Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/326130353a646663313a393230303a3a2f34302d3430203d3e203437323732.roa
File:                     326130353a646663313a393230303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier:          BaB3qTCMo4N+sFSrk2Egt55Yq0gBLT8RpkLDU7gz7Mc=
Subject key identifier:   1B:44:D5:C8:4B:2E:B0:5F:3E:0A:B2:4D:30:A7:51:6B:21:2F:4F:E9
Certificate issuer:       /CN=C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1
Certificate serial:       77CE7BF51841A02D3FF4FF7B15CB85C794E5CCDC
Authority key identifier: C0:75:D1:7C:AA:BF:FA:0D:20:43:20:EA:AA:CD:35:E6:C2:DE:C9:B1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/326130353a646663313a393230303a3a2f34302d3430203d3e203437323732.roa
Signing time:             Tue 24 Oct 2023 18:23:37 +0000
ROA not before:           Tue 24 Oct 2023 18:18:37 +0000
ROA not after:            Tue 22 Oct 2024 18:23:37 +0000
asID:                     47272
IP address blocks:        2a05:dfc1:9200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ce:7b:f5:18:41:a0:2d:3f:f4:ff:7b:15:cb:85:c7:94:e5:cc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1
        Validity
            Not Before: Oct 24 18:18:37 2023 GMT
            Not After : Oct 22 18:23:37 2024 GMT
        Subject: CN=1B44D5C84B2EB05F3E0AB24D30A7516B212F4FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:48:fb:26:03:d9:42:bb:0c:db:ca:bf:9e:
                    ff:bb:28:87:0e:6a:e5:a0:82:91:11:8f:02:76:2f:
                    d9:a7:8b:6b:1f:1d:62:07:bf:30:8a:7f:8b:25:c3:
                    5d:9a:23:80:dd:88:72:25:14:bf:9e:d1:d3:a0:25:
                    ae:e4:74:2e:b7:74:5a:e9:51:e7:03:03:02:4d:32:
                    28:8f:a5:dc:13:d0:ba:a4:36:c9:08:1a:cb:6f:af:
                    64:3a:4c:29:a5:1b:6c:6f:12:df:73:d8:d1:cd:6b:
                    34:5e:82:d7:4b:0c:cd:0c:f9:99:f3:bb:c9:be:59:
                    10:8e:48:2e:af:34:b4:eb:71:3e:b0:1a:99:76:e2:
                    3c:26:5b:e4:17:53:f3:6d:ef:f9:33:14:12:41:de:
                    7f:cb:8e:ef:fc:e3:70:46:74:36:9e:ed:0b:15:9c:
                    7c:a9:fe:52:56:fb:7b:33:1d:76:6e:e9:89:56:03:
                    91:03:87:89:4b:85:7e:74:80:08:de:33:96:0f:b9:
                    f7:11:fe:db:48:26:80:67:e6:2c:db:92:4d:89:77:
                    60:45:29:51:5b:4b:f4:2e:2d:28:0e:a5:30:89:37:
                    4a:c5:77:64:f7:c9:72:9f:58:f2:3c:2f:f3:7e:22:
                    93:0b:cd:04:15:01:24:fb:31:49:df:02:9c:b8:e8:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:44:D5:C8:4B:2E:B0:5F:3E:0A:B2:4D:30:A7:51:6B:21:2F:4F:E9
            X509v3 Authority Key Identifier:
                keyid:C0:75:D1:7C:AA:BF:FA:0D:20:43:20:EA:AA:CD:35:E6:C2:DE:C9:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/C075D17CAABFFA0D204320EAAACD35E6C2DEC9B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/3/326130353a646663313a393230303a3a2f34302d3430203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:2a:f7:a2:11:b9:72:4d:bb:9a:67:b0:1b:94:da:64:ec:6d:
         f4:82:81:ed:8b:bc:02:95:38:d4:ae:b5:df:cb:ea:a0:3e:49:
         6c:ab:b6:3a:8c:b3:33:9e:22:ec:a5:5f:5e:4b:7c:ca:49:9a:
         86:20:c7:bb:5b:c5:8d:14:75:9b:d6:6c:8c:92:d8:8d:43:b8:
         a6:43:4e:4b:85:90:1b:17:46:58:77:b2:74:3d:95:58:fc:29:
         0f:bf:3b:34:a0:5b:b7:40:18:6d:8d:04:d4:09:0a:2d:b0:0a:
         d3:82:53:f7:33:0e:10:f5:7b:fd:0f:49:6f:af:5d:4e:ab:1f:
         73:d8:11:a6:3c:b7:06:9a:ca:67:cb:ce:4d:a7:b7:e8:bc:92:
         d7:58:de:06:25:0c:0b:fd:37:89:48:bc:b5:c4:11:e8:62:ac:
         3a:f5:56:2c:5f:63:24:c1:a2:df:35:3c:8a:a4:59:b8:3c:6c:
         30:d9:78:07:c0:fa:40:e1:d4:19:12:1d:68:05:88:e1:84:a5:
         fd:5c:3c:e0:ff:37:6a:b9:f9:8b:d1:6f:8c:df:0b:16:b1:51:
         63:2e:ad:9e:f1:99:53:1d:8c:c5:50:9b:d2:16:a4:3c:2d:d8:
         5a:5b:28:9a:ab:15:ec:cf:5b:e6:aa:bc:50:25:c7:1a:a2:42:
         69:27:a8:0f
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUd8579RhBoC0/9P97FcuFx5TlzNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA3NUQxN0NBQUJGRkEwRDIwNDMyMEVBQUFDRDM1RTZD
MkRFQzlCMTAeFw0yMzEwMjQxODE4MzdaFw0yNDEwMjIxODIzMzdaMDMxMTAvBgNV
BAMTKDFCNDRENUM4NEIyRUIwNUYzRTBBQjI0RDMwQTc1MTZCMjEyRjRGRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2Uj7JgPZQrsM28q/nv+7KIcO
auWggpERjwJ2L9mni2sfHWIHvzCKf4slw12aI4DdiHIlFL+e0dOgJa7kdC63dFrp
UecDAwJNMiiPpdwT0LqkNskIGstvr2Q6TCmlG2xvEt9z2NHNazRegtdLDM0M+Znz
u8m+WRCOSC6vNLTrcT6wGpl24jwmW+QXU/Nt7/kzFBJB3n/Lju/843BGdDae7QsV
nHyp/lJW+3szHXZu6YlWA5EDh4lLhX50gAjeM5YPufcR/ttIJoBn5izbkk2Jd2BF
KVFbS/QuLSgOpTCJN0rFd2T3yXKfWPI8L/N+IpMLzQQVAST7MUnfApy46DNFAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUG0TVyEsusF8+CrJNMKdRayEvT+kwHwYDVR0j
BBgwFoAUwHXRfKq/+g0gQyDqqs015sLeybEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzMvQzA3NUQxN0NBQUJGRkEwRDIwNDMyMEVBQUFDRDM1RTZDMkRFQzlCMS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0MwNzVEMTdDQUFCRkZB
MEQyMDQzMjBFQUFBQ0QzNUU2QzJERUM5QjEuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2JjOTBmNGY2LWYyYzQtNDg4Mi05MWNmLTliOGYwYjM4ZDdk
YS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzMjMwMzAzYTNhMmYzNDMwMmQzNDMw
MjAzZDNlMjAzNDM3MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwZIwDQYJKoZIhvcNAQEL
BQADggEBAJ0q96IRuXJNu5pnsBuU2mTsbfSCge2LvAKVONSutd/L6qA+SWyrtjqM
szOeIuylX15LfMpJmoYgx7tbxY0UdZvWbIyS2I1DuKZDTkuFkBsXRlh3snQ9lVj8
KQ+/OzSgW7dAGG2NBNQJCi2wCtOCU/czDhD1e/0PSW+vXU6rH3PYEaY8twaaymfL
zk2nt+i8ktdY3gYlDAv9N4lIvLXEEehirDr1VixfYyTBot81PIqkWbg8bDDZeAfA
+kDh1BkSHWgFiOGEpf1cPOD/N2q5+YvRb4zfCxaxUWMurZ7xmVMdjMVQm9IWpDwt
2FpbKJqrFezPW+aqvFAlxxqiQmknqA8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org