Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          miDNa469ZNVkc6HLeoE7QNcDT7S4Cdpt7Ajw6pId/6I=
Subject key identifier:   5E:2D:71:EE:90:C7:6C:45:EE:41:8C:BA:30:FC:EC:DC:C5:D2:4E:E4
Certificate issuer:       /CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
Certificate serial:       15C40E36BAA402BBBC58DBA0340EC8134923F788
Authority key identifier: 8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Mon 16 Oct 2023 10:45:50 +0000
ROA not before:           Mon 16 Oct 2023 10:40:50 +0000
ROA not after:            Mon 14 Oct 2024 10:45:50 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c4:0e:36:ba:a4:02:bb:bc:58:db:a0:34:0e:c8:13:49:23:f7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
        Validity
            Not Before: Oct 16 10:40:50 2023 GMT
            Not After : Oct 14 10:45:50 2024 GMT
        Subject: CN=5E2D71EE90C76C45EE418CBA30FCECDCC5D24EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:af:6f:6f:f9:9e:ca:20:9a:83:a8:8a:10:
                    d0:fd:a6:4c:d1:61:97:c2:e8:ca:63:65:44:52:b3:
                    8d:a3:38:e3:f3:b8:5f:33:07:69:be:cf:5e:b8:61:
                    05:a2:2d:b6:69:76:04:b5:d2:0b:79:88:b6:62:11:
                    eb:00:6a:c9:3e:0c:d1:64:87:1b:1e:27:67:5e:26:
                    05:1f:ef:96:b0:1c:03:7d:63:3a:e7:e9:32:f0:13:
                    6b:d2:56:09:25:8d:5c:a1:37:ca:99:98:7f:22:4f:
                    67:ea:ce:33:31:1c:fe:49:02:cc:21:20:74:98:82:
                    4a:60:81:21:0f:19:52:0f:4e:fe:b1:dd:ff:2e:5a:
                    e8:65:e6:c3:d5:d6:18:c0:8c:81:6c:26:c9:01:21:
                    0b:fd:e8:4a:7d:0c:b3:d2:6b:18:5c:1e:8c:6e:6d:
                    4d:b2:a0:09:19:49:ef:6f:7e:18:b4:f5:8f:3f:62:
                    a3:21:8f:83:b9:d6:88:a7:06:c1:76:ff:d6:ac:b0:
                    e0:7f:3e:f1:38:61:36:f6:a3:3a:60:6c:5c:0e:1d:
                    64:81:f8:f4:25:e3:b2:54:cd:94:23:b2:1d:7b:f5:
                    b4:99:45:9f:6f:87:fa:1f:ef:83:38:0e:fc:93:ce:
                    e6:d9:cd:be:64:25:f7:1a:ae:61:b6:dc:2f:aa:28:
                    0a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2D:71:EE:90:C7:6C:45:EE:41:8C:BA:30:FC:EC:DC:C5:D2:4E:E4
            X509v3 Authority Key Identifier:
                keyid:8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a101::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:2a:06:e0:9f:23:5e:d3:38:97:61:1c:b8:45:99:40:62:6e:
         b2:2d:f4:f3:a4:56:d9:d2:f0:5d:2a:84:f8:5f:db:3d:d0:a6:
         6b:47:0a:7f:f4:0c:af:0f:a9:64:dd:d9:06:0d:4a:cd:2a:e7:
         43:1a:f6:32:b1:54:5f:d3:92:66:c2:82:a2:31:52:80:d8:39:
         50:8b:df:ab:85:bd:fc:f2:a0:d2:c4:be:b0:3a:30:16:24:ff:
         c2:09:e7:d0:0a:4a:63:ec:b5:fa:2e:a3:07:46:24:85:82:20:
         05:f0:1f:00:7d:7c:5f:96:e0:3c:57:c2:11:82:67:c4:22:5d:
         96:d0:e2:9a:de:56:68:31:ad:52:70:6b:0b:00:ce:7b:e4:7a:
         3a:29:af:4f:34:06:d8:f1:da:e8:f7:37:bf:51:a5:6e:43:48:
         74:65:85:73:7e:dd:9a:f7:00:66:e5:f6:6b:35:d8:8c:42:68:
         58:29:1e:72:fc:5c:7a:8e:25:b2:be:c0:0c:2f:bf:26:4f:e0:
         a1:71:ec:28:83:a5:ca:2d:eb:96:68:01:15:4a:11:4f:b5:5a:
         98:b6:0e:ac:74:28:70:7a:65:3d:aa:b2:f1:7f:43:61:a9:b8:
         6f:9b:50:1a:a4:33:05:c7:39:59:36:3c:f4:5e:ce:22:92:c9:
         b2:2b:47:11
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUFcQONrqkAru8WNugNA7IE0kj94gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJBQ0Y2RjA2MDhCQjJDQjYxMDAxM0QwMDc0NEYyRUFC
REZERTQ0QjAeFw0yMzEwMTYxMDQwNTBaFw0yNDEwMTQxMDQ1NTBaMDMxMTAvBgNV
BAMTKDVFMkQ3MUVFOTBDNzZDNDVFRTQxOENCQTMwRkNFQ0RDQzVEMjRFRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy369vb/meyiCag6iKEND9pkzR
YZfC6MpjZURSs42jOOPzuF8zB2m+z164YQWiLbZpdgS10gt5iLZiEesAask+DNFk
hxseJ2deJgUf75awHAN9Yzrn6TLwE2vSVgkljVyhN8qZmH8iT2fqzjMxHP5JAswh
IHSYgkpggSEPGVIPTv6x3f8uWuhl5sPV1hjAjIFsJskBIQv96Ep9DLPSaxhcHoxu
bU2yoAkZSe9vfhi09Y8/YqMhj4O51oinBsF2/9assOB/PvE4YTb2ozpgbFwOHWSB
+PQl47JUzZQjsh179bSZRZ9vh/of74M4DvyTzubZzb5kJfcarmG23C+qKApBAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUXi1x7pDHbEXuQYy6MPzs3MXSTuQwHwYDVR0j
BBgwFoAUi6z28GCLssthABPQB0Ty6r395EswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzgyYjUwODItZWI5NC00ZmZmLTg5NTgtM2RlYmQ3OGZi
ODQwLzAvOEJBQ0Y2RjA2MDhCQjJDQjYxMDAxM0QwMDc0NEYyRUFCREZERTQ0Qi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhCQUNGNkYwNjA4QkIy
Q0I2MTAwMTNEMDA3NDRGMkVBQkRGREU0NEIuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2M4MmI1MDgyLWViOTQtNGZmZi04OTU4LTNkZWJkNzhmYjg0
MC8wLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjEzMTMwMzEzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMwMzMzODM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAoQEwDQYJKoZIhvcN
AQELBQADggEBABEqBuCfI17TOJdhHLhFmUBibrIt9POkVtnS8F0qhPhf2z3QpmtH
Cn/0DK8PqWTd2QYNSs0q50Ma9jKxVF/TkmbCgqIxUoDYOVCL36uFvfzyoNLEvrA6
MBYk/8IJ59AKSmPstfouowdGJIWCIAXwHwB9fF+W4DxXwhGCZ8QiXZbQ4preVmgx
rVJwawsAznvkejopr080Btjx2uj3N79RpW5DSHRlhXN+3Zr3AGbl9ms12IxCaFgp
HnL8XHqOJbK+wAwvvyZP4KFx7CiDpcot65ZoARVKEU+1Wpi2Dqx0KHB6ZT2qsvF/
Q2GpuG+bUBqkMwXHOVk2PPReziKSybIrRxE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org