Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          mc7rfnU8BdARrrKTPMBJ3HyEGFpSu/hAFCGaVTD826Q=
Subject key identifier:   7A:84:7B:EB:F4:35:D7:8D:9E:8C:EC:CF:58:AC:EB:7D:F2:57:F7:17
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       488C763D751516BF2B48C9285EBD9D883CEA83CE
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa
Signing time:             Mon 17 Jul 2023 18:02:30 +0000
ROA not before:           Mon 17 Jul 2023 17:57:30 +0000
ROA not after:            Mon 15 Jul 2024 18:02:30 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8c:76:3d:75:15:16:bf:2b:48:c9:28:5e:bd:9d:88:3c:ea:83:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Jul 17 17:57:30 2023 GMT
            Not After : Jul 15 18:02:30 2024 GMT
        Subject: CN=7A847BEBF435D78D9E8CECCF58ACEB7DF257F717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:80:9b:9a:2d:e0:66:13:3d:e4:37:c6:ed:
                    83:9a:bd:b0:41:1b:72:c4:2b:19:ba:a0:7c:1b:4a:
                    22:bb:62:a9:7b:14:2b:8c:30:d4:92:c0:a1:af:9f:
                    bb:73:4f:91:5e:b5:40:2a:08:b7:18:5e:e1:5f:40:
                    63:19:2e:ec:5b:ee:f8:71:90:50:0d:8f:de:80:77:
                    70:a6:14:09:65:7b:49:e5:15:1e:36:85:43:0e:e5:
                    64:43:a0:fd:3f:7c:96:9a:91:ed:68:6b:fc:56:cc:
                    b1:e4:a7:bd:54:6c:81:34:28:af:41:9d:a2:04:2b:
                    27:49:28:a9:d0:5a:a8:20:96:b5:e3:18:6a:d0:43:
                    aa:66:f4:f5:bd:1d:15:ba:b7:d9:c3:77:62:b4:de:
                    67:6d:81:58:e6:57:54:8f:4a:4d:cf:62:5c:a2:cb:
                    bd:5a:f0:41:9f:e6:b6:53:0b:08:ed:b8:5b:13:98:
                    54:13:da:ad:f6:89:19:4b:80:d3:ba:04:9b:98:b5:
                    24:3e:02:96:8a:6e:51:b5:ca:15:e4:94:e8:d1:89:
                    8a:5e:8f:2a:93:cc:a1:33:cf:09:3c:b5:95:04:e7:
                    b4:03:f0:92:13:86:01:64:5f:35:65:6c:7f:44:f5:
                    08:5e:65:90:1e:2b:fa:3f:48:76:21:31:53:d6:b6:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:84:7B:EB:F4:35:D7:8D:9E:8C:EC:CF:58:AC:EB:7D:F2:57:F7:17
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f15::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:24:0f:c9:11:ed:42:42:cc:fe:40:61:ec:fa:ea:11:17:aa:
         1f:cc:14:e5:d0:93:f9:d7:23:84:c0:49:96:bd:23:5a:32:cb:
         2a:d9:12:59:f3:6e:8c:35:13:7a:e0:3d:a3:25:25:e5:5f:b9:
         ac:a6:8b:cb:e6:7c:60:ad:3f:c9:62:5c:17:24:bb:06:5d:11:
         7e:39:88:55:47:19:82:d8:0a:b7:0e:d1:61:21:92:12:03:42:
         2d:ee:2d:94:bd:5f:b1:0a:ea:03:31:7a:32:f7:6d:8c:95:34:
         c1:bc:1f:6f:a2:ec:7d:27:8e:c9:4f:f9:61:d1:9e:b7:97:49:
         52:d3:a1:32:58:a0:64:cf:95:20:0c:ef:c2:91:8d:8e:b9:12:
         ad:9b:ba:af:c2:93:78:ec:f6:38:44:c7:c7:80:4a:2c:5b:12:
         51:39:8d:20:c5:2f:e4:ed:13:c4:62:b5:22:aa:b9:80:15:69:
         35:01:ed:49:db:8c:0e:52:1d:22:42:07:c3:5c:db:fb:4f:f7:
         ff:66:c9:7c:90:cf:be:f3:ee:de:08:09:5e:d7:2f:de:0f:79:
         1d:76:98:84:5c:fa:29:3a:9b:7a:67:8b:1d:4f:18:61:b1:ea:
         08:8f:3d:fa:60:49:56:75:26:68:95:61:fc:45:4b:7e:29:86:
         62:fa:01:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----