Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/326130613a363034303a333130303a3a2f34302d3430203d3e20323030333335.roa
File:                     326130613a363034303a333130303a3a2f34302d3430203d3e20323030333335.roa (raw, json)
Hash identifier:          8Zw/xxGRjROGxpixfGF1UgaFSyv1oFz9mXuNo49f6Ek=
Subject key identifier:   A8:28:99:BC:2E:48:D5:21:0D:3F:A5:FD:CD:CF:A2:09:4D:B2:9C:8C
Certificate issuer:       /CN=3065BD7B3029FB9B4990D695C6176778CC637436
Certificate serial:       2A05251CCFCDC5127D6205A774ACF742EC89E15E
Authority key identifier: 30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3065BD7B3029FB9B4990D695C6176778CC637436.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/326130613a363034303a333130303a3a2f34302d3430203d3e20323030333335.roa
Signing time:             Mon 06 Feb 2023 22:51:09 +0000
ROA not before:           Mon 06 Feb 2023 22:46:09 +0000
ROA not after:            Mon 05 Feb 2024 22:51:09 +0000
asID:                     200335
IP address blocks:        2a0a:6040:3100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:05:25:1c:cf:cd:c5:12:7d:62:05:a7:74:ac:f7:42:ec:89:e1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3065BD7B3029FB9B4990D695C6176778CC637436
        Validity
            Not Before: Feb  6 22:46:09 2023 GMT
            Not After : Feb  5 22:51:09 2024 GMT
        Subject: CN=A82899BC2E48D5210D3FA5FDCDCFA2094DB29C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:df:f8:ee:8e:d4:ac:df:21:f9:fa:ef:2f:d3:
                    d3:47:83:bd:ec:8e:58:c1:f9:c4:51:cd:1d:3b:92:
                    52:b5:52:53:8e:23:9d:e3:74:7c:bd:53:2c:ed:81:
                    dc:f0:2a:03:ee:5d:70:a1:b6:9e:70:dd:bb:eb:b2:
                    39:7a:4f:70:48:49:00:d2:84:2f:2c:df:45:d2:ba:
                    dc:bf:12:4f:fb:31:4d:72:1a:49:0b:c9:01:1f:61:
                    03:98:ec:00:2e:2e:3b:79:13:10:75:f2:d9:a7:d2:
                    28:e1:c1:8f:d8:81:43:95:9b:33:c1:e5:b6:6c:b2:
                    0f:5c:fd:31:f1:98:1b:59:60:2a:56:f5:88:26:40:
                    fd:c7:11:a3:73:b8:01:de:42:6d:5b:a3:b7:45:06:
                    81:03:0f:fd:cc:28:b7:18:21:c7:c2:cf:77:aa:6c:
                    ab:6c:32:0c:ed:e8:7d:20:09:f3:f3:77:bb:cf:3a:
                    b6:dd:e7:66:9f:6d:54:23:da:0b:09:24:0d:d2:06:
                    46:c0:dd:d3:a4:1f:c2:8d:63:24:28:e7:7f:1a:b5:
                    da:a8:39:fb:81:01:89:9b:4f:05:80:ad:4d:24:b4:
                    2a:77:60:1b:d0:f6:8a:f2:4a:44:68:de:5c:da:9d:
                    f5:d7:8d:cd:a0:8b:a3:94:79:cd:23:25:0f:cd:0f:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:28:99:BC:2E:48:D5:21:0D:3F:A5:FD:CD:CF:A2:09:4D:B2:9C:8C
            X509v3 Authority Key Identifier:
                keyid:30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3065BD7B3029FB9B4990D695C6176778CC637436.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/326130613a363034303a333130303a3a2f34302d3430203d3e20323030333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:02:43:b1:3a:d8:02:5b:0a:ec:c3:ac:36:9d:fd:fd:4a:36:
         41:e9:7b:3e:61:ab:76:cf:37:b4:c9:0a:43:64:87:4a:0c:df:
         49:6b:1e:c9:81:be:66:3a:39:36:bf:f7:b8:9a:53:eb:78:cf:
         c3:06:83:d7:a9:87:33:92:94:ea:56:45:41:a0:69:b2:fd:89:
         f0:56:25:6a:3d:4b:f2:64:43:1c:6f:1f:54:a0:d9:f5:31:eb:
         8a:af:ef:70:3b:3f:2c:36:c4:44:6d:e6:16:1c:fb:2c:8f:46:
         49:ee:df:da:ea:3b:87:b2:18:9b:7b:da:3b:05:50:6f:8a:d4:
         d6:c9:9a:43:80:5f:4b:0a:f7:77:8f:15:de:15:d2:95:ac:14:
         50:b3:54:5d:e2:21:46:00:e6:e2:f0:70:d4:fb:56:5d:ad:aa:
         85:2c:03:e3:34:b4:13:4f:0d:22:12:d3:97:95:e9:7c:14:3e:
         92:d8:ed:cb:d7:ff:b8:08:89:74:11:5c:39:a7:4c:4e:3c:e7:
         00:26:5a:4a:ac:fe:c1:d7:0f:28:39:19:78:42:c0:24:52:20:
         87:d6:6c:31:7f:f1:fb:b7:ee:34:18:09:06:19:6c:1d:95:1d:
         f2:ee:2d:0e:05:92:38:2b:d1:08:1b:2a:6e:42:66:f2:55:c0:
         dd:c0:b1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----