Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          R/mLGap1D3d7Yw/8bBvGhXcZZNaCWGlV4nNCrA+r5po=
Subject key identifier:   9C:2F:2F:8E:0E:F1:74:D8:69:BF:36:9D:6D:6F:8F:8D:F4:8F:A4:24
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       61F5F78B01E57281214D11D9ED4A26797861034B
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa
Signing time:             Tue 18 Jul 2023 05:10:53 +0000
ROA not before:           Tue 18 Jul 2023 05:05:53 +0000
ROA not after:            Tue 16 Jul 2024 05:10:53 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f5:f7:8b:01:e5:72:81:21:4d:11:d9:ed:4a:26:79:78:61:03:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Jul 18 05:05:53 2023 GMT
            Not After : Jul 16 05:10:53 2024 GMT
        Subject: CN=9C2F2F8E0EF174D869BF369D6D6F8F8DF48FA424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:33:29:9d:9b:51:91:df:22:7e:cd:bd:2d:c7:
                    c2:53:da:93:4a:4d:93:9f:54:dd:23:37:47:29:44:
                    65:3c:ad:ec:01:b9:fd:de:b2:ee:9d:e8:6c:33:e4:
                    bf:8d:38:af:90:4a:4e:06:8b:c1:32:e7:c6:6f:41:
                    2c:e9:31:ef:62:5b:e8:ce:65:25:98:40:b2:84:5a:
                    25:01:ed:fe:e4:d5:90:92:d4:b9:ec:d0:5b:77:99:
                    17:e8:b3:0e:d6:99:43:85:81:94:76:1e:0a:11:25:
                    c8:c7:5b:c1:bf:ad:59:92:23:de:db:af:94:fd:2b:
                    58:b7:60:46:40:8e:82:c8:6f:4a:4d:98:63:7c:ac:
                    ca:4d:92:d3:51:bf:40:9f:28:fc:00:da:54:f8:3a:
                    c2:d0:80:dc:d9:29:0b:c9:39:8c:7c:6e:48:aa:5b:
                    2b:b9:96:d4:d4:fe:06:ab:a6:46:ee:c8:ce:83:7a:
                    87:cc:88:5f:60:fb:a5:4f:04:b6:fc:9c:1a:ef:8c:
                    71:b4:de:15:e6:af:26:fb:5b:0c:0e:3c:e9:99:56:
                    09:9f:cb:bd:b6:f9:74:8a:06:d5:08:07:25:33:f4:
                    4e:ff:b2:c2:85:11:83:e0:b6:bb:68:ef:7f:12:ba:
                    0a:8e:b2:2e:dc:46:c2:ee:c0:6f:73:55:5d:11:f8:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2F:2F:8E:0E:F1:74:D8:69:BF:36:9D:6D:6F:8F:8D:F4:8F:A4:24
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f20::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:9e:7d:9b:34:06:6a:3f:c5:ef:5c:89:39:f0:74:48:3d:
         c8:1f:96:ab:93:45:45:c5:2d:5a:2a:d7:47:27:5e:42:58:a2:
         97:e9:08:e6:f3:0f:2a:d8:39:10:c8:36:50:ab:bf:97:88:ea:
         5e:82:03:99:8d:2e:51:a0:97:c3:43:d7:89:d7:65:a5:63:b3:
         bf:19:b4:70:0a:02:0b:c1:13:b5:3d:aa:ac:b0:89:32:14:e1:
         43:80:83:33:ff:c6:f5:ca:40:88:24:1a:8f:01:d7:03:bd:18:
         80:5e:88:93:a9:6a:3f:f2:ce:67:d1:f9:dd:2e:46:ef:80:e1:
         37:ec:4f:5c:54:af:e2:bc:a6:48:25:a9:54:be:74:ed:0f:95:
         fd:fd:20:6e:0b:be:a1:83:3c:16:ad:23:78:16:76:9f:8b:95:
         aa:31:c3:63:ee:3c:1d:f2:58:c2:44:88:13:72:fe:ca:fc:da:
         38:06:f3:6e:f4:ba:4a:7d:75:01:32:a6:41:f4:c3:2a:13:0b:
         c1:c3:d7:83:73:be:37:60:e7:ff:34:fb:b9:3c:0e:e7:f6:ba:
         2e:47:bf:ad:ae:ca:c8:21:06:5d:98:94:70:35:79:b0:1b:40:
         3d:f1:a5:94:55:da:b2:64:ea:98:1f:cf:b6:81:44:46:70:9c:
         67:96:b3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----