Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          iph2SeeweIluoCsLWK5s8g9Pwo3s7gF1R3JxhNNpBz8=
Subject key identifier:   01:40:C8:49:E3:A0:25:68:80:3B:B3:55:7B:29:5C:43:3A:76:4D:36
Certificate issuer:       /CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
Certificate serial:       1BE21ECA83DC21A1FB7E31E5F2F2028CA1C9560E
Authority key identifier: 8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Mon 16 Oct 2023 10:45:49 +0000
ROA not before:           Mon 16 Oct 2023 10:40:49 +0000
ROA not after:            Mon 14 Oct 2024 10:45:49 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a102::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e2:1e:ca:83:dc:21:a1:fb:7e:31:e5:f2:f2:02:8c:a1:c9:56:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BACF6F0608BB2CB610013D00744F2EABDFDE44B
        Validity
            Not Before: Oct 16 10:40:49 2023 GMT
            Not After : Oct 14 10:45:49 2024 GMT
        Subject: CN=0140C849E3A02568803BB3557B295C433A764D36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:8d:ca:74:ce:43:54:d0:b8:7d:77:f5:d6:
                    ff:cb:44:5d:b4:4b:df:27:aa:39:aa:5c:c1:5b:bd:
                    e3:f8:f3:cf:69:34:9d:20:95:d1:93:11:5e:07:ad:
                    b3:1d:c9:b5:2a:8f:2f:e8:7d:06:2b:50:04:9b:59:
                    6b:4e:ee:72:66:c0:1e:57:8c:82:6b:06:61:8a:bd:
                    d9:fb:3a:a0:66:94:d5:cb:25:94:c1:c3:ba:5c:17:
                    e5:2c:6c:f2:10:fd:61:bc:5e:bd:30:7a:f9:23:fb:
                    1d:a6:52:33:78:e6:4b:31:b4:88:46:ce:de:90:6a:
                    bd:96:3c:93:51:fa:84:9a:fd:bb:93:4a:3b:29:33:
                    ec:1d:2c:a7:16:01:04:a2:7a:a6:de:15:d8:54:70:
                    e6:3c:73:9c:4d:01:d5:bb:c3:3f:63:44:6e:42:b1:
                    47:00:cd:1e:da:c6:22:e2:26:60:f5:a2:b4:73:36:
                    9c:26:dc:bb:94:b3:09:d5:28:d3:2d:42:6c:64:d9:
                    89:4c:21:91:e6:74:a2:50:59:17:03:da:a3:36:38:
                    ae:9d:ea:53:49:5b:f8:a5:e2:1f:e2:ee:ed:17:95:
                    99:cc:6f:07:44:99:e5:8f:d0:43:63:55:cb:1b:04:
                    1c:f3:26:3b:34:93:2b:1a:d7:e6:cf:74:5f:f0:10:
                    99:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:40:C8:49:E3:A0:25:68:80:3B:B3:55:7B:29:5C:43:3A:76:4D:36
            X509v3 Authority Key Identifier:
                keyid:8B:AC:F6:F0:60:8B:B2:CB:61:00:13:D0:07:44:F2:EA:BD:FD:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BACF6F0608BB2CB610013D00744F2EABDFDE44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c82b5082-eb94-4fff-8958-3debd78fb840/0/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a102::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:30:66:b6:3e:db:8c:40:35:70:38:68:e0:cf:16:8f:9d:
         82:cb:b9:b4:fc:74:ec:0e:72:b5:db:ed:1e:d1:2e:eb:24:85:
         ba:c9:35:67:94:23:2b:5c:7f:72:81:91:a8:74:9a:bc:77:22:
         4c:c9:2d:5e:16:ee:69:98:59:55:b3:6b:7c:bb:9f:f3:98:7f:
         28:2d:d2:75:b9:7d:ca:be:fb:87:be:60:bc:c3:1a:f6:1d:ab:
         15:a1:48:17:3f:b6:98:34:23:bc:da:2c:19:d7:54:0b:14:2a:
         a8:e8:d3:47:c0:0e:f9:f4:a4:9e:10:c0:47:80:3f:66:d2:f7:
         9f:e9:c8:c1:d5:59:16:7b:1a:7f:9e:6a:07:16:68:22:ae:59:
         b2:a3:e2:4e:39:51:0e:d4:93:86:56:ab:22:76:a3:dc:b5:a9:
         01:64:2e:02:42:58:4f:99:4f:d2:2b:75:ce:74:d4:30:25:44:
         71:5e:7b:3c:95:e9:d3:b5:c9:9e:6a:2a:8e:a9:f0:3f:f0:d8:
         9d:0c:19:ff:ee:d3:a1:91:fc:94:17:47:17:40:18:e7:67:76:
         c6:4b:c3:33:51:ec:e5:4c:f8:46:2e:7b:71:6f:7a:ca:6f:63:
         a7:dc:85:24:04:f9:29:1a:ef:78:1d:56:94:51:4f:ec:fb:1f:
         1a:1b:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----