Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa
File:                     326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          9mpnOF0+exkqUlafVX7K9fciSChh3yR3kmi84U9bnAc=
Subject key identifier:   93:ED:E1:91:33:17:9E:45:EF:78:D2:02:C5:8F:A6:5D:D9:FC:A8:B4
Certificate issuer:       /CN=1D2CDA0FB26151C931AF55B6A81109B51A233DF1
Certificate serial:       67526630186B622F4998EE380BCBEF66CFF687AA
Authority key identifier: 1D:2C:DA:0F:B2:61:51:C9:31:AF:55:B6:A8:11:09:B5:1A:23:3D:F1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa
Signing time:             Thu 19 Oct 2023 23:34:44 +0000
ROA not before:           Thu 19 Oct 2023 23:29:44 +0000
ROA not after:            Thu 17 Oct 2024 23:34:44 +0000
asID:                     16509
IP address blocks:        2a05:dfc1:8900::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:52:66:30:18:6b:62:2f:49:98:ee:38:0b:cb:ef:66:cf:f6:87:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D2CDA0FB26151C931AF55B6A81109B51A233DF1
        Validity
            Not Before: Oct 19 23:29:44 2023 GMT
            Not After : Oct 17 23:34:44 2024 GMT
        Subject: CN=93EDE19133179E45EF78D202C58FA65DD9FCA8B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:97:c6:6e:32:da:46:b4:78:17:bc:70:d9:
                    99:b1:cf:cf:18:dc:4c:ba:9f:ea:d1:04:c2:db:70:
                    87:b7:aa:cc:ef:b7:96:80:c1:2b:af:af:e3:be:74:
                    4f:5a:b2:ef:32:46:11:cf:c5:43:0d:f9:81:37:0d:
                    74:ac:69:0e:17:fd:8b:f3:35:20:82:1a:dd:92:42:
                    3e:42:c3:13:6d:2a:82:7e:fd:3e:76:f2:68:5a:71:
                    ef:35:4f:ad:57:27:ee:df:62:96:6b:59:cb:0c:45:
                    87:79:70:63:d5:9d:c9:e8:fd:d9:b4:a4:74:71:3c:
                    da:69:7f:85:4e:a9:ea:e5:97:37:6c:6c:d5:35:3f:
                    58:f4:5d:0e:82:08:84:69:e6:fd:a8:4a:91:1a:79:
                    13:f8:09:88:01:2b:4a:e2:dc:76:3a:e3:f2:2f:9a:
                    ef:1c:e6:ba:4d:e5:14:c9:30:01:7d:d4:16:fb:38:
                    53:59:58:f6:63:03:3c:b9:b4:b9:b1:94:54:5c:fe:
                    b5:63:ea:34:65:82:e9:52:e0:27:52:92:ec:96:58:
                    47:f9:bc:78:9a:35:57:e1:1b:88:f2:33:82:12:b9:
                    33:11:64:37:e2:37:8c:18:a6:9b:79:ed:53:a8:a8:
                    9d:9a:a2:d3:4d:f6:c9:11:c6:92:db:a9:4f:97:8a:
                    cf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:ED:E1:91:33:17:9E:45:EF:78:D2:02:C5:8F:A6:5D:D9:FC:A8:B4
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DA:0F:B2:61:51:C9:31:AF:55:B6:A8:11:09:B5:1A:23:3D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8900::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:ab:fa:ff:ac:cb:e6:8e:50:10:d5:16:d4:86:f2:57:d1:f8:
         c0:99:68:55:75:b3:1c:9f:d7:67:9c:4e:17:13:bf:01:36:72:
         26:c2:f0:73:63:ca:89:3a:d5:0a:40:52:f5:11:b7:44:20:33:
         fa:13:30:38:7f:5f:11:e5:d8:be:7c:92:93:6f:49:20:78:68:
         79:cb:e5:85:cb:78:65:38:fa:95:f6:0e:76:dd:e7:18:57:96:
         ab:cb:ee:20:e2:4d:59:05:3e:56:fa:69:1a:19:d8:c9:9b:a1:
         25:7f:c9:b8:85:18:bb:39:18:00:9d:20:3d:6e:69:72:50:a9:
         24:a4:b4:ab:fa:2a:40:ad:88:2c:26:cf:8c:55:da:0c:1b:02:
         22:d8:63:65:87:42:3c:c7:67:5f:b5:10:1b:ac:12:3f:4e:90:
         b3:28:1e:6d:0c:69:9c:19:90:ee:56:86:03:cc:d6:04:45:59:
         e2:8e:94:9d:f8:94:0a:6b:14:fa:d1:7d:14:74:e5:f7:af:e2:
         cb:e0:6b:16:4f:1b:5c:99:89:81:c8:f6:94:66:5d:5f:f1:5c:
         3b:d7:c3:e8:d4:e2:d4:6a:10:ef:fc:eb:68:69:1a:12:44:62:
         6f:54:7b:9e:2d:29:69:b9:5e:08:72:43:11:f2:4f:a0:c6:5c:
         73:e8:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----