Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130333a3a2f34382d3438203d3e20323030323130.roa
File:                     326130613a363034303a316130333a3a2f34382d3438203d3e20323030323130.roa (raw, json)
Hash identifier:          6y801QpYpcMFoINKlUGJK/jtUh6thh42IqqcNQ3WUoo=
Subject key identifier:   44:C4:24:39:F6:2F:8D:87:A4:C4:BA:F1:47:40:CC:02:4A:D6:CF:C1
Certificate issuer:       /CN=EF55D32540CC64935F37B5C7BF144EF9C489D9BE
Certificate serial:       68C28B2EE451354EDB21293E8550B9C013852A15
Authority key identifier: EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130333a3a2f34382d3438203d3e20323030323130.roa
Signing time:             Wed 15 Mar 2023 19:24:14 +0000
ROA not before:           Wed 15 Mar 2023 19:19:14 +0000
ROA not after:            Wed 13 Mar 2024 19:24:14 +0000
asID:                     200210
IP address blocks:        2a0a:6040:1a03::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c2:8b:2e:e4:51:35:4e:db:21:29:3e:85:50:b9:c0:13:85:2a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF55D32540CC64935F37B5C7BF144EF9C489D9BE
        Validity
            Not Before: Mar 15 19:19:14 2023 GMT
            Not After : Mar 13 19:24:14 2024 GMT
        Subject: CN=44C42439F62F8D87A4C4BAF14740CC024AD6CFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:43:58:09:f2:20:41:8a:3e:1a:62:84:4f:6c:
                    85:8e:97:b1:2f:86:c3:12:cb:36:54:5e:30:b7:02:
                    26:83:a0:75:bb:a3:47:ed:af:7f:f3:74:56:97:6e:
                    75:3b:db:54:4b:73:86:4b:30:86:d0:d9:7c:c3:3d:
                    8d:54:ce:3d:43:12:30:76:3e:61:cf:e2:83:d0:91:
                    32:05:2a:d8:6f:f7:a8:f8:37:06:eb:27:b4:40:01:
                    81:52:e0:8b:ab:f3:28:00:8d:0b:99:c5:1f:9f:e3:
                    5c:36:1d:a1:6a:7c:b6:ce:da:62:d8:74:a9:5b:21:
                    47:e9:95:56:61:d3:b9:90:61:c3:24:52:47:22:2d:
                    ab:55:1f:69:42:37:ce:f0:f2:c7:e2:45:9f:ab:a5:
                    97:f8:cd:5d:64:3a:4d:34:b1:f0:bd:c2:01:7f:45:
                    c8:83:61:01:98:a9:f0:0a:04:c9:ac:6e:e5:18:47:
                    84:15:df:e9:12:5f:ec:94:37:91:07:17:dd:86:dc:
                    bd:cf:3e:34:24:0b:23:2d:c3:e6:2b:4c:31:e6:06:
                    2b:be:48:f4:20:49:92:cf:9b:a3:28:48:cb:74:f6:
                    b7:8f:bb:83:01:cf:27:a6:21:14:ba:52:09:01:b4:
                    1e:8f:02:0f:fc:6f:1f:1c:44:77:0a:89:16:84:ac:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C4:24:39:F6:2F:8D:87:A4:C4:BA:F1:47:40:CC:02:4A:D6:CF:C1
            X509v3 Authority Key Identifier:
                keyid:EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130333a3a2f34382d3438203d3e20323030323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1a03::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:d7:d0:9b:a8:64:0b:f0:9c:31:e1:0f:88:95:17:02:87:f4:
         86:e2:a9:09:77:ba:ca:63:77:d7:0d:6c:ee:a8:2c:ec:6c:97:
         1e:8d:0e:d3:6e:6e:f2:f4:1f:9e:cd:64:5a:3e:eb:1a:13:15:
         b4:84:55:e2:63:7c:79:75:6c:81:aa:6d:16:f9:12:83:6a:6a:
         97:7f:7b:4c:78:ab:99:a4:9c:d4:37:9b:0a:21:11:4e:be:26:
         f8:68:25:db:21:ce:72:61:f8:45:93:20:14:4d:2e:c8:7f:00:
         3e:8c:41:b1:19:f2:87:91:f5:a7:1e:20:38:6f:25:2c:65:5e:
         7d:db:7c:97:17:9f:03:53:bc:79:2b:bb:5f:c2:c5:76:e1:49:
         3b:0c:51:ce:49:d4:24:79:b9:38:59:e2:12:6a:27:c3:61:3b:
         e0:33:11:6c:cb:0f:a0:6d:99:d5:9e:26:68:57:a0:ef:2f:eb:
         07:59:a9:aa:42:71:f0:9f:8a:9f:95:f3:20:6b:47:a3:11:04:
         02:78:d7:ed:43:44:36:d0:26:ad:6b:91:50:0e:18:8d:74:a0:
         fb:96:3c:1a:a3:b7:34:2c:d0:9c:d1:e3:f5:77:e0:bc:80:cc:
         1e:d0:a7:7f:86:34:51:04:c1:72:a1:47:06:32:d2:3d:ac:25:
         19:7b:cf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----