Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130343a3a2f34382d3438203d3e20323030323130.roa
File:                     326130613a363034303a316130343a3a2f34382d3438203d3e20323030323130.roa (raw, json)
Hash identifier:          poJhbI+vn4OFmeNo2DOadzqELar1bV+pvrIqMH0nT8M=
Subject key identifier:   89:4D:B1:6B:03:E0:54:CA:66:50:BF:1F:82:22:E8:8C:67:62:B4:7F
Certificate issuer:       /CN=EF55D32540CC64935F37B5C7BF144EF9C489D9BE
Certificate serial:       1393B89983961F44EF3C69E767AC9515FC79F2A3
Authority key identifier: EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130343a3a2f34382d3438203d3e20323030323130.roa
Signing time:             Sat 18 Mar 2023 02:30:11 +0000
ROA not before:           Sat 18 Mar 2023 02:25:11 +0000
ROA not after:            Sat 16 Mar 2024 02:30:11 +0000
asID:                     200210
IP address blocks:        2a0a:6040:1a04::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:93:b8:99:83:96:1f:44:ef:3c:69:e7:67:ac:95:15:fc:79:f2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF55D32540CC64935F37B5C7BF144EF9C489D9BE
        Validity
            Not Before: Mar 18 02:25:11 2023 GMT
            Not After : Mar 16 02:30:11 2024 GMT
        Subject: CN=894DB16B03E054CA6650BF1F8222E88C6762B47F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:bf:fa:c9:93:0b:3c:e0:87:45:6d:a6:a9:
                    1c:b5:59:f8:e9:e1:b3:3b:84:ae:87:c0:6a:ec:51:
                    2f:28:f6:46:52:7e:ba:17:ea:db:3e:24:8c:66:2e:
                    8b:dc:f5:cb:17:2b:97:ca:2d:f8:67:f8:f4:99:1d:
                    3c:a1:46:5a:67:9f:39:d5:41:e8:d5:88:af:4a:73:
                    30:10:12:c1:89:b2:e3:0f:13:b5:a3:f5:86:90:ed:
                    97:33:9d:79:00:1e:c1:55:24:f8:58:e7:9b:8b:0c:
                    f0:e8:fb:d3:18:e3:47:c1:a5:4f:8f:8f:32:78:f2:
                    9b:6e:82:00:ee:f9:04:1f:bc:e1:eb:51:c1:90:f5:
                    ff:89:22:c1:ed:64:7e:4b:64:69:2b:c3:e1:15:92:
                    86:5b:2a:f5:8e:0f:9a:ff:66:cb:6d:b4:b2:f0:c8:
                    83:f2:d2:ae:42:d8:00:bc:b9:d7:b2:c6:87:93:65:
                    1f:c5:bf:ce:ff:66:04:78:1c:3b:62:00:6f:e7:34:
                    4b:59:70:17:c6:83:00:26:3c:2e:1d:0f:9e:bc:2a:
                    79:26:26:1e:49:5f:1e:02:bf:69:6b:c3:a9:6a:e3:
                    47:a5:79:ca:79:87:ce:fe:31:d1:71:c4:98:17:a8:
                    30:c5:15:1f:ca:bb:0b:6d:c8:8d:c7:70:3a:35:2e:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4D:B1:6B:03:E0:54:CA:66:50:BF:1F:82:22:E8:8C:67:62:B4:7F
            X509v3 Authority Key Identifier:
                keyid:EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/326130613a363034303a316130343a3a2f34382d3438203d3e20323030323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1a04::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:29:72:0b:f5:57:be:cc:88:58:93:a8:66:da:32:e2:d5:
         6a:14:fb:a1:17:87:02:52:6c:e7:78:8f:27:dd:a9:17:43:b5:
         ba:cf:7d:5c:05:a7:eb:8d:7e:21:eb:c9:cd:9a:87:26:18:f4:
         4b:95:06:5c:ea:41:61:ae:df:57:1a:f6:99:9f:5a:4a:47:af:
         ea:a0:3a:d3:73:e2:88:91:a8:37:c7:35:04:d3:01:51:fc:93:
         59:66:8b:c4:10:14:00:d9:33:5e:1a:4c:cc:2b:e3:05:4e:11:
         e8:6f:1c:1a:1d:1e:fe:97:d8:d0:2f:a2:2a:44:dc:8d:c6:1d:
         e9:16:0f:04:d9:af:90:84:9a:52:05:6c:ea:c0:b0:3a:cf:8e:
         dc:25:5d:c7:63:18:93:de:5f:d1:d9:c7:ec:cc:5d:4d:49:8a:
         a5:f2:3d:cd:9b:dd:4c:f3:46:0b:46:48:2b:fc:e6:7a:f7:21:
         75:48:50:41:10:b8:f7:7f:1d:4d:ae:c3:e8:8a:81:3a:d6:3a:
         2a:8c:56:f7:1d:20:db:81:8b:8e:af:bf:35:41:43:7b:83:82:
         b3:b0:0d:17:fa:40:55:29:7d:a7:26:67:56:a6:0a:0f:05:16:
         0f:43:fa:bd:6a:94:ea:47:ac:0d:28:e8:65:83:b5:4f:97:bb:
         53:f6:ad:c8
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUE5O4mYOWH0TvPGnnZ6yVFfx58qMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY1NUQzMjU0MENDNjQ5MzVGMzdCNUM3QkYxNDRFRjlD
NDg5RDlCRTAeFw0yMzAzMTgwMjI1MTFaFw0yNDAzMTYwMjMwMTFaMDMxMTAvBgNV
BAMTKDg5NERCMTZCMDNFMDU0Q0E2NjUwQkYxRjgyMjJFODhDNjc2MkI0N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVb/6yZMLPOCHRW2mqRy1Wfjp
4bM7hK6HwGrsUS8o9kZSfroX6ts+JIxmLovc9csXK5fKLfhn+PSZHTyhRlpnnznV
QejViK9KczAQEsGJsuMPE7Wj9YaQ7ZcznXkAHsFVJPhY55uLDPDo+9MY40fBpU+P
jzJ48ptuggDu+QQfvOHrUcGQ9f+JIsHtZH5LZGkrw+EVkoZbKvWOD5r/ZstttLLw
yIPy0q5C2AC8udeyxoeTZR/Fv87/ZgR4HDtiAG/nNEtZcBfGgwAmPC4dD568Knkm
Jh5JXx4Cv2lrw6lq40elecp5h87+MdFxxJgXqDDFFR/KuwttyI3HcDo1LpjPAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUiU2xawPgVMpmUL8fgiLojGditH8wHwYDVR0j
BBgwFoAU71XTJUDMZJNfN7XHvxRO+cSJ2b4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDIyODhiMGUtYTFkMC00YzFhLThjZWQtYTA1N2E2MDc2
YTdmLzEvRUY1NUQzMjU0MENDNjQ5MzVGMzdCNUM3QkYxNDRFRjlDNDg5RDlCRS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0VGNTVEMzI1NDBDQzY0
OTM1RjM3QjVDN0JGMTQ0RUY5QzQ4OUQ5QkUuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2QyMjg4YjBlLWExZDAtNGMxYS04Y2VkLWEwNTdhNjA3NmE3
Zi8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzE2MTMwMzQzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMwMzAzMjMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAGgQwDQYJKoZIhvcN
AQELBQADggEBAC//KXIL9Ve+zIhYk6hm2jLi1WoU+6EXhwJSbOd4jyfdqRdDtbrP
fVwFp+uNfiHryc2ahyYY9EuVBlzqQWGu31ca9pmfWkpHr+qgOtNz4oiRqDfHNQTT
AVH8k1lmi8QQFADZM14aTMwr4wVOEehvHBodHv6X2NAvoipE3I3GHekWDwTZr5CE
mlIFbOrAsDrPjtwlXcdjGJPeX9HZx+zMXU1JiqXyPc2b3UzzRgtGSCv85nr3IXVI
UEEQuPd/HU2uw+iKgTrWOiqMVvcdINuBi46vvzVBQ3uDgrOwDRf6QFUpfacmZ1am
Cg8FFg9D+r1qlOpHrA0o6GWDtU+Xu1P2rcg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org