Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/326130613a363034303a336430303a3a2f34302d3430203d3e20313939373531.roa
File:                     326130613a363034303a336430303a3a2f34302d3430203d3e20313939373531.roa (raw, json)
Hash identifier:          qKI6Iu6aod+CqmEFzdIegMwdzBERHbCDyj5VPBpjNRU=
Subject key identifier:   B2:D1:A3:39:42:5E:53:E1:FB:9E:1E:02:A6:25:E1:87:A6:49:D1:4D
Certificate issuer:       /CN=3065BD7B3029FB9B4990D695C6176778CC637436
Certificate serial:       24AB3DCC4CA8F7A102FCEA17730A4923243BEE2F
Authority key identifier: 30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3065BD7B3029FB9B4990D695C6176778CC637436.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/326130613a363034303a336430303a3a2f34302d3430203d3e20313939373531.roa
Signing time:             Mon 06 Mar 2023 08:05:13 +0000
ROA not before:           Mon 06 Mar 2023 08:00:13 +0000
ROA not after:            Mon 04 Mar 2024 08:05:13 +0000
asID:                     199751
IP address blocks:        2a0a:6040:3d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ab:3d:cc:4c:a8:f7:a1:02:fc:ea:17:73:0a:49:23:24:3b:ee:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3065BD7B3029FB9B4990D695C6176778CC637436
        Validity
            Not Before: Mar  6 08:00:13 2023 GMT
            Not After : Mar  4 08:05:13 2024 GMT
        Subject: CN=B2D1A339425E53E1FB9E1E02A625E187A649D14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:14:23:02:0b:4b:31:e5:a2:d9:96:a7:1c:
                    22:86:24:5d:2f:ae:44:7c:18:3a:ee:cf:81:30:59:
                    87:47:e7:a8:29:b5:0f:f6:30:ba:38:fe:ef:e0:39:
                    ea:32:97:4b:ba:d0:7f:8d:01:e3:a7:20:22:13:23:
                    b6:f3:d3:b4:3e:1d:b8:bd:7e:5c:b6:cf:42:bc:a1:
                    97:12:d7:45:21:7a:41:eb:4f:86:25:2b:dd:53:02:
                    1d:61:07:67:c9:8e:3c:65:cb:05:a3:f5:3c:d0:c2:
                    c4:58:46:bc:48:8f:e7:0a:b4:2d:b9:39:51:dd:7a:
                    8b:b6:ea:12:c6:25:6c:4b:3e:98:6b:64:80:36:1d:
                    48:f3:19:0a:a1:90:f1:2c:71:f9:4e:d2:15:30:d8:
                    72:f3:8c:a7:27:88:d2:ac:ba:12:3e:96:8e:93:26:
                    91:24:cb:a4:4e:8b:f4:44:3c:07:44:04:19:e7:6b:
                    57:14:ba:9d:82:7d:8b:8e:4e:f3:df:15:67:11:e4:
                    a2:46:a1:29:4f:28:4e:17:3b:ce:b2:aa:94:0d:80:
                    c8:89:0e:11:4e:b9:a2:26:c8:4c:aa:0e:dc:dd:d3:
                    9a:8a:41:f0:47:b6:fc:e2:b3:70:11:97:0d:92:8e:
                    c7:9f:ab:de:74:71:e6:dd:a9:db:43:ef:6c:b8:e1:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D1:A3:39:42:5E:53:E1:FB:9E:1E:02:A6:25:E1:87:A6:49:D1:4D
            X509v3 Authority Key Identifier:
                keyid:30:65:BD:7B:30:29:FB:9B:49:90:D6:95:C6:17:67:78:CC:63:74:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/3065BD7B3029FB9B4990D695C6176778CC637436.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3065BD7B3029FB9B4990D695C6176778CC637436.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/980bebee-85fd-4060-b392-00aa32ab1562/1/326130613a363034303a336430303a3a2f34302d3430203d3e20313939373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         db:71:95:8d:cb:1e:c3:58:2a:19:70:6d:68:e9:b1:f2:3f:3a:
         04:81:e5:2b:b5:95:8d:9a:c4:8b:41:c1:38:9f:ca:93:58:dd:
         0b:99:3d:c4:e1:c5:84:25:79:a6:80:c4:b9:53:b7:01:46:f5:
         28:ad:24:2e:e7:4d:ba:a7:e0:06:3d:27:a4:cb:1a:a8:0d:1e:
         0f:cd:37:c4:e1:97:bc:da:d2:4a:15:7c:b0:2b:0d:45:dd:04:
         f9:8b:59:92:a9:75:81:80:83:c7:32:fe:a6:e8:52:99:b7:e4:
         56:9d:b4:0e:17:35:02:27:ce:a1:d8:3a:e7:b9:b0:0b:46:5b:
         d1:fe:75:df:cc:65:05:e5:40:5e:af:0b:4c:19:43:3a:ff:72:
         f1:f2:72:1f:a5:6b:2b:c2:11:ac:e6:7c:20:9e:7e:14:9d:b3:
         ac:a2:07:2b:e4:ca:c4:2f:ac:8b:7f:7b:9e:40:80:76:06:d3:
         49:e0:78:cf:62:66:ca:92:97:26:06:35:5d:49:3e:9b:87:ed:
         8e:0e:f2:82:ab:e7:b5:c6:22:92:c7:6a:f2:c3:b9:d9:8e:67:
         5e:09:9f:06:76:ca:7e:1e:e9:4d:5f:e3:d0:a1:3e:45:c4:2f:
         55:bc:74:40:a2:82:3c:6e:94:d7:ba:62:eb:77:fb:34:a1:4f:
         43:3a:b3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----