Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130323a3a2f34382d3438203d3e20323030323130.roa
File:                     326130613a363034303a316130323a3a2f34382d3438203d3e20323030323130.roa (raw, json)
Hash identifier:          qvnvKDJ86IlrvMA5oy/PCM1JHdLMuBmS66oWkz9vwa8=
Subject key identifier:   BA:5F:B9:95:4B:F9:EC:E1:0C:25:7D:65:F9:D2:66:3C:82:9E:49:91
Certificate issuer:       /CN=EF55D32540CC64935F37B5C7BF144EF9C489D9BE
Certificate serial:       02263BCED37E72F0F31542FB3EECA052F00665F8
Authority key identifier: EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130323a3a2f34382d3438203d3e20323030323130.roa
Signing time:             Mon 23 Jan 2023 02:12:00 +0000
ROA not before:           Mon 23 Jan 2023 02:07:00 +0000
ROA not after:            Mon 22 Jan 2024 02:12:00 +0000
asID:                     200210
IP address blocks:        2a0a:6040:1a02::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:26:3b:ce:d3:7e:72:f0:f3:15:42:fb:3e:ec:a0:52:f0:06:65:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF55D32540CC64935F37B5C7BF144EF9C489D9BE
        Validity
            Not Before: Jan 23 02:07:00 2023 GMT
            Not After : Jan 22 02:12:00 2024 GMT
        Subject: CN=BA5FB9954BF9ECE10C257D65F9D2663C829E4991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:99:8b:e2:f1:75:06:9e:9f:06:fe:77:df:65:
                    35:b2:f3:3f:30:ac:91:e8:9a:bd:37:6b:2c:ee:b2:
                    02:ed:e9:8e:dc:70:7e:3d:3b:7f:53:d9:df:a6:be:
                    11:9c:ad:1e:76:b2:ed:e9:7a:23:77:85:18:24:5a:
                    80:c5:09:3d:55:ba:7e:49:06:0a:d7:80:52:19:8d:
                    5b:19:4b:e2:df:d3:02:a3:69:3f:3c:72:ee:8a:e8:
                    8d:1d:63:e1:8c:b9:82:48:a0:b8:a4:c3:64:66:85:
                    01:88:d4:98:ca:a2:9d:42:26:f3:ef:b6:2f:63:b5:
                    d9:20:d8:b4:4a:2d:ed:d8:5f:3e:be:b4:c2:ef:1f:
                    39:82:bd:56:2d:41:00:72:10:ba:06:c6:d7:ce:31:
                    36:5e:d7:4f:50:f9:cf:34:b4:d4:3d:df:8a:3c:18:
                    26:96:26:bf:0b:a2:07:94:f1:81:91:11:8e:1c:61:
                    e1:68:7c:c3:92:92:9f:b9:7d:bf:14:ab:58:f6:b6:
                    ea:9e:71:59:36:e1:05:05:a1:d5:be:8a:ef:3f:7d:
                    05:3c:8e:c7:3a:f9:75:66:81:d7:d1:9d:9c:c0:01:
                    8e:a0:d9:78:4d:81:b2:1b:c3:04:ae:6a:a3:c1:38:
                    5d:d1:78:a3:32:6e:56:9e:e7:42:d6:88:bb:ac:65:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5F:B9:95:4B:F9:EC:E1:0C:25:7D:65:F9:D2:66:3C:82:9E:49:91
            X509v3 Authority Key Identifier:
                keyid:EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130323a3a2f34382d3438203d3e20323030323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1a02::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:53:88:6b:c1:c8:4c:c7:e2:4d:c1:07:29:46:c6:9e:30:0f:
         12:7b:e0:95:95:95:9f:55:5a:a2:ae:fd:9d:e5:75:ef:cc:64:
         1d:4c:9d:d4:62:c5:2c:3e:a5:99:de:71:10:7c:2d:21:c0:fc:
         ee:99:24:ae:35:72:46:61:d2:7d:11:58:30:d5:a7:56:d3:ac:
         6e:bd:e7:84:33:5f:9b:0f:ed:44:27:77:7e:03:84:d2:b8:49:
         6f:80:5a:a6:cc:d1:a6:eb:56:d7:bd:68:f1:d9:05:bf:a7:f7:
         2c:59:07:34:e9:f9:3e:c1:6f:44:82:c9:00:b0:40:b6:b9:64:
         8a:87:0e:59:36:c4:f3:82:b4:fe:5a:da:25:ab:69:c8:6a:56:
         8e:7c:73:0e:22:1b:6b:b6:7a:0e:2a:63:4e:df:9e:98:0b:ec:
         24:b0:3c:8c:67:6d:8e:49:76:38:07:ec:40:09:ab:f3:0f:d9:
         c1:b7:d2:c2:d3:46:9c:05:97:52:45:b9:0d:0d:61:a6:cf:9f:
         57:6c:00:60:0d:5c:91:4e:f8:10:3a:c9:9b:d4:22:33:ba:b0:
         66:eb:4a:2b:5c:19:10:3e:11:c9:f7:95:bd:04:2a:20:74:b1:
         c9:cc:44:e0:30:cb:09:e8:9f:f9:dc:91:31:26:a4:9c:78:d5:
         bd:3b:97:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----