Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa
File:                     326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa (raw, json)
Hash identifier:          hSCwNr7QSWL3VmHJaLnUvz1n6yAI57A/EK+lGW4qCiQ=
Subject key identifier:   D8:EC:B7:3E:5F:5D:2F:E8:D2:DE:4A:EA:94:66:FB:76:E6:76:A8:EC
Certificate issuer:       /CN=1D2CDA0FB26151C931AF55B6A81109B51A233DF1
Certificate serial:       6D08B84355D796B1B19E9DCE000B011A1A948474
Authority key identifier: 1D:2C:DA:0F:B2:61:51:C9:31:AF:55:B6:A8:11:09:B5:1A:23:3D:F1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa
Signing time:             Thu 19 Oct 2023 23:34:44 +0000
ROA not before:           Thu 19 Oct 2023 23:29:44 +0000
ROA not after:            Thu 17 Oct 2024 23:34:44 +0000
asID:                     199766
IP address blocks:        2a05:dfc1:8902::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:08:b8:43:55:d7:96:b1:b1:9e:9d:ce:00:0b:01:1a:1a:94:84:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D2CDA0FB26151C931AF55B6A81109B51A233DF1
        Validity
            Not Before: Oct 19 23:29:44 2023 GMT
            Not After : Oct 17 23:34:44 2024 GMT
        Subject: CN=D8ECB73E5F5D2FE8D2DE4AEA9466FB76E676A8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:01:26:b3:5d:2e:ff:0b:c8:82:cb:7f:42:
                    89:b3:7b:3d:06:2c:c7:e1:e8:31:d9:74:e4:a7:d6:
                    7c:65:52:93:44:b2:b4:ca:8d:18:f4:0a:5d:bc:1a:
                    25:d8:ee:a1:88:ed:97:c2:87:0c:a6:14:47:82:f3:
                    51:6e:ad:a2:ef:45:fb:73:a8:fb:32:03:48:98:c6:
                    f6:51:b7:b8:27:ab:9c:70:f6:8f:73:e4:10:36:c5:
                    f7:f0:06:a1:6e:71:59:2c:a6:59:78:0d:e7:17:ba:
                    3e:90:c2:f8:20:84:87:9e:fc:6d:60:06:d2:50:89:
                    0f:b9:4b:4e:47:da:4a:c3:5d:88:90:bb:cc:87:37:
                    63:33:d0:4f:bc:bc:e1:8c:ee:a5:d7:5a:38:23:ea:
                    f6:4a:87:71:e6:54:4b:20:24:b5:99:6a:82:b4:5d:
                    f8:70:ea:a8:49:ad:8a:c8:c7:da:d3:50:48:46:c8:
                    e7:92:54:1c:53:a7:5d:0d:ab:4c:87:b1:ca:d3:be:
                    00:35:bf:61:a7:5f:b6:0d:a5:45:34:3a:df:58:6b:
                    d1:e4:2b:b5:77:b0:d0:12:d9:4e:3e:cd:22:3a:10:
                    a4:d3:b8:5c:4a:19:62:42:06:99:42:e2:67:35:7f:
                    1b:6b:b6:5e:6f:41:7c:35:23:66:7d:79:a1:29:ea:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EC:B7:3E:5F:5D:2F:E8:D2:DE:4A:EA:94:66:FB:76:E6:76:A8:EC
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DA:0F:B2:61:51:C9:31:AF:55:B6:A8:11:09:B5:1A:23:3D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1D2CDA0FB26151C931AF55B6A81109B51A233DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65af1ec0-83c2-402a-8aa2-0aaad07fc9f0/1/326130353a646663313a383930323a3a2f34382d3438203d3e20313939373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8902::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:d0:f1:6f:81:09:31:2b:22:b3:2a:3e:6a:c7:7d:e5:1e:
         c8:e3:93:ed:cb:2d:e1:15:32:0d:ed:1d:ac:4b:cc:ec:2b:60:
         b1:12:a5:e6:78:1b:0d:a0:b2:67:3d:ef:74:11:22:11:f8:f0:
         a2:74:27:6b:e2:37:91:b1:90:ca:bc:24:ba:a6:2f:ab:b0:b2:
         64:38:48:16:fc:2e:c5:b0:5c:6a:83:f2:e9:2b:3f:87:af:ae:
         d6:de:00:47:26:67:ae:48:d8:64:78:9e:9a:85:95:6f:39:fb:
         21:3f:47:0a:75:f7:ab:7f:b6:e1:10:2a:8e:5f:e6:1b:ca:ae:
         f8:c8:90:e8:2d:24:5b:7d:01:79:b6:f9:a5:ed:41:fc:a5:7e:
         ad:29:4c:33:65:94:6d:65:27:e0:9e:1f:e7:7b:46:a8:81:78:
         27:d2:ca:b0:16:bc:87:c9:ee:b8:aa:d4:73:db:4b:0b:29:65:
         de:14:f2:cf:4e:00:c1:1a:9b:4a:94:bf:33:f5:55:d0:d5:a5:
         b2:60:dc:73:7b:3c:02:c0:75:11:b8:b8:80:ef:3d:17:f2:3d:
         09:c3:22:d3:76:95:ed:1e:38:c9:ea:c0:19:6d:c6:ae:81:f5:
         8f:bb:e2:6a:db:87:89:6b:4d:09:f0:37:04:4d:75:99:c4:fb:
         bb:ba:51:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----