Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa
File:                     326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa (raw, json)
Hash identifier:          sIuBJcF2ja0NjHV4sUiXmPdgPw8ogMHvbA+H8r3wrLw=
Subject key identifier:   3D:41:C5:C8:26:98:14:7A:34:7F:13:55:FB:CF:C3:9A:14:4A:D6:00
Certificate issuer:       /CN=1D2CDA0FB26151C931AF55B6A81109B51A233DF1
Certificate serial:       1C2E7DF60C90F8920523E2E43BB16BED3C966A0A
Authority key identifier: 1D:2C:DA:0F:B2:61:51:C9:31:AF:55:B6:A8:11:09:B5:1A:23:3D:F1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa
Signing time:             Thu 19 Oct 2023 23:34:44 +0000
ROA not before:           Thu 19 Oct 2023 23:29:44 +0000
ROA not after:            Thu 17 Oct 2024 23:34:44 +0000
asID:                     199766
IP address blocks:        2a05:dfc1:8901::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2e:7d:f6:0c:90:f8:92:05:23:e2:e4:3b:b1:6b:ed:3c:96:6a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D2CDA0FB26151C931AF55B6A81109B51A233DF1
        Validity
            Not Before: Oct 19 23:29:44 2023 GMT
            Not After : Oct 17 23:34:44 2024 GMT
        Subject: CN=3D41C5C82698147A347F1355FBCFC39A144AD600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:fa:a2:db:53:b9:2f:43:9a:da:9c:7c:bb:
                    4c:a7:c9:72:17:31:ad:b4:ed:7e:ca:d7:fa:0d:53:
                    98:0b:3f:63:81:0f:9e:99:b9:45:bf:8c:b4:a6:2e:
                    ee:cb:a0:e4:c4:4f:65:6b:58:40:fe:8b:05:3b:e6:
                    82:24:7f:3d:84:f6:e3:c9:c8:2d:2b:49:9e:65:03:
                    4c:4d:91:c8:a6:75:d2:7e:eb:5c:cb:5d:4a:05:4b:
                    ff:84:bc:b4:9f:4a:35:1f:7c:fd:c9:3b:1b:15:40:
                    ba:6d:ec:c9:ae:67:94:8a:ac:96:d1:65:1a:08:f4:
                    ec:97:21:aa:b2:c0:62:21:f1:10:8d:f1:2b:eb:bb:
                    50:c3:a7:00:a0:58:c0:96:0c:63:06:9d:14:cc:75:
                    84:df:dd:47:4f:14:49:ad:55:41:2b:39:0a:3c:f1:
                    a6:97:ef:d4:ff:46:32:98:e7:c7:58:d8:a6:cb:e1:
                    20:0e:70:51:23:05:73:59:79:95:ea:98:80:23:02:
                    f0:c4:8a:5d:d1:cf:f5:a2:e4:85:4e:16:33:a0:ac:
                    8d:7c:13:ad:06:0a:e1:1d:94:c0:3e:9f:33:e6:3c:
                    59:c5:40:16:6d:00:97:4f:07:70:17:51:38:6c:f2:
                    70:59:86:3d:3f:ef:48:49:dc:94:9d:2d:10:42:38:
                    b1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:41:C5:C8:26:98:14:7A:34:7F:13:55:FB:CF:C3:9A:14:4A:D6:00
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DA:0F:B2:61:51:C9:31:AF:55:B6:A8:11:09:B5:1A:23:3D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930313a3a2f34382d3438203d3e20313939373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8901::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:92:48:29:5d:fe:21:3b:14:82:0b:10:54:14:1d:9e:bc:ef:
         f3:07:b7:dd:49:98:d0:7c:b0:f3:02:24:cb:56:84:2d:3a:1e:
         ca:13:27:f5:53:52:77:78:d5:2b:51:17:2e:8a:9b:9d:b9:ac:
         18:4d:5c:b9:e3:8d:d6:32:5d:b5:9f:11:d8:1a:5d:66:fa:1d:
         9b:88:8f:99:89:26:32:0a:65:12:5f:31:bb:d8:e1:37:3a:d1:
         b1:fc:c2:06:7d:92:c6:da:dd:6a:8b:93:c8:2b:2d:14:b5:0c:
         ee:8c:0f:56:b5:a0:49:12:3c:1a:85:05:74:6e:11:fe:0d:f3:
         d8:3b:98:ed:6d:71:82:91:28:61:0f:c6:4b:ef:76:35:36:14:
         79:80:6f:44:64:9a:ef:cd:9b:1d:70:97:7c:b8:38:2a:29:0d:
         0b:21:53:6c:89:d2:5b:ab:9b:b6:c2:4b:96:e8:89:d2:ea:85:
         a1:cf:46:3c:67:d2:89:83:91:7a:9c:4d:a2:5b:90:3d:15:ac:
         6d:9e:58:77:a0:ac:9f:4d:a0:73:7f:47:5d:90:9c:fe:0e:19:
         ac:55:a8:5b:3f:bd:9a:8a:0f:20:7a:ae:83:01:30:2b:25:de:
         78:eb:5f:68:7d:c3:cf:f3:ba:a0:f9:70:30:95:7c:57:3b:c1:
         63:16:9e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----