Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/326130613a363034303a333130303a3a2f34302d3430203d3e203536363535.roa
File:                     326130613a363034303a333130303a3a2f34302d3430203d3e203536363535.roa (raw, json)
Hash identifier:          x4RCGaq5MdjFrRbmbK83wtp+qnbUxko70gzS/Ff9G+g=
Subject key identifier:   64:B3:A2:84:A4:13:66:48:70:23:D4:2A:33:C0:4E:36:62:04:1D:12
Certificate issuer:       /CN=3065BD7B3029FB9B4990D695C6176778CC637436
Certificate serial:       1714D89671E62BD6BCBF4077AE230E38667BD977
Authority key identifier: 30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3065BD7B3029FB9B4990D695C6176778CC637436.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/326130613a363034303a333130303a3a2f34302d3430203d3e203536363535.roa
Signing time:             Mon 06 Feb 2023 22:51:32 +0000
ROA not before:           Mon 06 Feb 2023 22:46:32 +0000
ROA not after:            Mon 05 Feb 2024 22:51:32 +0000
asID:                     56655
IP address blocks:        2a0a:6040:3100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:14:d8:96:71:e6:2b:d6:bc:bf:40:77:ae:23:0e:38:66:7b:d9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3065BD7B3029FB9B4990D695C6176778CC637436
        Validity
            Not Before: Feb  6 22:46:32 2023 GMT
            Not After : Feb  5 22:51:32 2024 GMT
        Subject: CN=64B3A284A41366487023D42A33C04E3662041D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:e0:c3:23:23:ab:52:d4:b5:d8:02:4e:20:
                    3c:a4:32:57:b2:28:72:29:90:e5:0e:86:60:00:2d:
                    d3:02:1a:c9:68:57:22:0e:8a:e1:51:78:b8:c2:2f:
                    34:3c:81:42:1c:ef:3d:af:a7:f0:13:be:99:06:d4:
                    7f:6f:b6:d8:c0:42:0b:51:b6:10:be:f3:69:51:c8:
                    3b:ca:d0:09:d5:ac:f4:fb:e9:39:18:eb:24:4e:0b:
                    a8:10:67:32:bd:ff:30:00:e7:91:e7:f7:b1:76:02:
                    3b:b1:f1:cb:ff:fb:c0:9d:2e:79:56:5b:fb:c8:27:
                    18:16:e1:02:d2:9f:7d:7a:f2:ef:03:b6:e9:08:da:
                    75:d4:c1:68:14:51:05:ed:86:0b:a9:f9:2d:6f:df:
                    b4:b2:f3:3d:00:3a:f6:3b:db:eb:03:07:57:e9:96:
                    01:ef:63:11:2c:71:83:61:ee:93:1f:ba:84:04:fc:
                    e8:f4:2e:d3:42:18:c3:38:c1:b5:79:eb:5c:63:e1:
                    ad:ea:f8:e9:f8:84:8a:03:55:be:dc:bd:52:93:58:
                    6a:e0:44:e8:dc:93:b9:c8:4d:51:5a:56:4d:a3:1c:
                    c4:7c:d9:f1:82:6d:7d:92:1d:b4:d7:75:35:55:58:
                    84:42:47:e4:e6:a7:83:e2:07:22:2f:4f:06:ad:ca:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B3:A2:84:A4:13:66:48:70:23:D4:2A:33:C0:4E:36:62:04:1D:12
            X509v3 Authority Key Identifier:
                keyid:30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3065BD7B3029FB9B4990D695C6176778CC637436.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/326130613a363034303a333130303a3a2f34302d3430203d3e203536363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:09:4e:79:5d:27:d9:0d:9c:66:04:96:36:bd:c4:02:b0:9d:
         92:5e:ee:7c:1e:50:aa:bc:91:a9:56:4e:4a:bd:05:43:ef:fa:
         16:07:28:15:a8:07:71:c6:6a:ee:ba:20:3a:69:cf:a8:b1:c5:
         fd:a5:50:09:93:83:87:2e:b5:21:dd:10:ad:01:13:d9:f5:89:
         64:4e:5b:55:1f:78:0f:7e:3b:12:33:be:ca:8f:6b:3a:a1:f3:
         ba:14:d7:b5:76:f9:ec:67:cd:be:0c:5a:ef:cc:c1:1c:56:b2:
         f4:bb:26:08:ec:d9:11:f7:53:0e:ea:39:83:26:19:87:ea:a8:
         28:58:fd:0f:ef:07:c9:fd:6d:05:8d:ec:10:f1:d8:c2:26:30:
         bf:e7:03:bd:9e:4d:36:1f:d4:8e:5b:71:ab:ff:63:a3:42:19:
         d6:e6:35:04:69:10:c1:c5:6f:62:ad:6b:ec:ec:5f:21:9d:b7:
         63:4d:bc:c9:d8:2b:78:66:5c:a1:ec:c6:b0:fa:78:14:90:bd:
         7c:33:20:b3:71:eb:c2:7c:ea:73:69:b7:9f:81:79:54:52:c4:
         f9:3c:05:47:dd:13:d9:21:62:a5:b4:95:67:78:dc:93:26:0d:
         81:77:44:15:11:ee:67:1d:5c:65:c1:a9:ab:a6:1f:d6:ef:d5:
         d3:08:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org