Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa
File:                     326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (raw, json)
Hash identifier:          8Kjn+IKsC/x+WW5xzJuGA0myViTngFxH/JxWSp+IcEo=
Subject key identifier:   1B:07:6B:F7:3A:88:3C:59:E7:B0:A7:41:99:F5:DF:18:57:2B:21:08
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       060BFB774EEEF895E0F5920C4F74B860A57C572E
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa
Signing time:             Tue 05 Sep 2023 04:42:13 +0000
ROA not before:           Tue 05 Sep 2023 04:37:13 +0000
ROA not after:            Tue 03 Sep 2024 04:42:13 +0000
asID:                     138190
IP address blocks:        2a05:dfc1:5f25::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0b:fb:77:4e:ee:f8:95:e0:f5:92:0c:4f:74:b8:60:a5:7c:57:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Sep  5 04:37:13 2023 GMT
            Not After : Sep  3 04:42:13 2024 GMT
        Subject: CN=1B076BF73A883C59E7B0A74199F5DF18572B2108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:0b:66:68:5e:fb:fd:ce:ba:4d:b8:6e:dc:
                    0a:17:22:40:8c:3a:d6:eb:48:a3:04:08:56:a3:ac:
                    18:2d:82:5f:d3:b2:00:c6:a5:c7:aa:42:8b:43:74:
                    56:62:d6:6a:68:93:78:b2:df:18:6b:ab:13:31:b3:
                    71:1d:83:04:ac:81:f6:ea:83:cf:a1:a8:05:1c:dc:
                    c2:e5:99:65:35:c9:e7:1e:0e:22:d2:af:4e:57:46:
                    eb:3d:8d:6a:fe:3e:3a:c8:a7:df:d4:5b:73:61:93:
                    4b:23:21:50:9e:6f:c1:ce:e8:3c:03:c1:77:23:cb:
                    2a:d1:c6:31:e5:17:d7:7a:ce:43:30:6a:63:ff:4a:
                    85:ff:40:88:d1:74:2f:08:57:cc:ac:0f:ab:61:8a:
                    0a:f2:cf:2a:b4:e3:5a:27:1a:f6:f4:2f:3a:b3:40:
                    cc:77:42:ad:58:68:46:eb:f5:e6:0c:b1:48:27:06:
                    a7:c8:b3:38:17:a2:d8:0e:aa:81:8a:98:81:db:ae:
                    4e:1d:4b:9d:be:26:31:58:58:f1:05:d9:91:65:7c:
                    a3:5e:61:e6:85:36:5d:fb:e3:5b:b3:ee:c6:f8:a6:
                    94:44:26:1d:b6:67:81:86:05:d3:19:7e:58:55:74:
                    05:77:21:d5:44:ab:6a:de:fc:4f:55:fa:28:b3:a7:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:07:6B:F7:3A:88:3C:59:E7:B0:A7:41:99:F5:DF:18:57:2B:21:08
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f25::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:f1:00:3c:cd:81:da:cc:51:8f:bf:68:28:8d:86:7c:e6:8a:
         55:c6:89:f4:4e:7e:86:5c:6f:80:3a:44:0b:ec:49:ae:62:63:
         0e:03:c1:36:0d:76:74:a1:13:34:3a:b9:a2:08:de:a2:45:be:
         e5:19:57:5e:db:4f:06:75:0e:07:9c:e3:cf:d5:b2:ce:f7:54:
         b7:01:80:aa:7d:5c:0e:0a:c7:d1:04:d9:4e:6f:6e:ff:a4:49:
         4e:04:5d:d9:11:50:01:17:35:bc:36:59:c6:71:0e:2e:25:e4:
         ca:13:2b:4c:5c:7d:e3:bd:98:2c:07:c7:6c:cc:80:a5:e3:b8:
         a9:c6:f8:d9:dd:43:d0:04:69:21:52:98:b6:1a:9e:a5:6b:e0:
         19:d6:1e:eb:9e:90:76:cb:01:ae:12:38:b5:31:58:7f:5d:95:
         2f:d9:2b:af:05:1a:36:02:e0:b7:32:cd:b5:1f:6a:3f:01:5d:
         26:c6:6e:df:f4:be:22:d2:e1:5a:60:9e:b1:99:c2:83:65:3a:
         ff:5e:18:ce:ec:23:1e:03:f9:79:82:1b:1f:a5:be:82:1c:90:
         01:c0:ad:17:3b:9f:14:c4:4d:28:08:5f:43:4d:32:6c:cf:58:
         20:d0:ae:0e:b7:4b:85:be:20:83:a7:7b:0f:37:42:5b:e6:2a:
         39:ad:f6:13
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUBgv7d07u+JXg9ZIMT3S4YKV8Vy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZCNTA1Njc5MUM2RjFGMjg4OTFCMjRENEJEMkZDNzkz
QjdENzk0NjAeFw0yMzA5MDUwNDM3MTNaFw0yNDA5MDMwNDQyMTNaMDMxMTAvBgNV
BAMTKDFCMDc2QkY3M0E4ODNDNTlFN0IwQTc0MTk5RjVERjE4NTcyQjIxMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshQtmaF77/c66Tbhu3AoXIkCM
OtbrSKMECFajrBgtgl/TsgDGpceqQotDdFZi1mpok3iy3xhrqxMxs3EdgwSsgfbq
g8+hqAUc3MLlmWU1yeceDiLSr05XRus9jWr+PjrIp9/UW3Nhk0sjIVCeb8HO6DwD
wXcjyyrRxjHlF9d6zkMwamP/SoX/QIjRdC8IV8ysD6thigryzyq041onGvb0Lzqz
QMx3Qq1YaEbr9eYMsUgnBqfIszgXotgOqoGKmIHbrk4dS52+JjFYWPEF2ZFlfKNe
YeaFNl3741uz7sb4ppREJh22Z4GGBdMZflhVdAV3IdVEq2re/E9V+iizp49NAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUGwdr9zqIPFnnsKdBmfXfGFcrIQgwHwYDVR0j
BBgwFoAUX7UFZ5HG8fKIkbJNS9L8eTt9eUYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTc5YzJiMDktZWJkZC00YTZjLWE5NzUtMjRlMWEyMjYy
ZjRmLzAvNUZCNTA1Njc5MUM2RjFGMjg4OTFCMjRENEJEMkZDNzkzQjdENzk0Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzVGQjUwNTY3OTFDNkYx
RjI4ODkxQjI0RDRCRDJGQzc5M0I3RDc5NDYuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2U3OWMyYjA5LWViZGQtNGE2Yy1hOTc1LTI0ZTFhMjI2MmY0
Zi8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMyMzUzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTMzMzgzMTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/BXyUwDQYJKoZIhvcN
AQELBQADggEBAEfxADzNgdrMUY+/aCiNhnzmilXGifROfoZcb4A6RAvsSa5iYw4D
wTYNdnShEzQ6uaII3qJFvuUZV17bTwZ1Dgec48/Vss73VLcBgKp9XA4Kx9EE2U5v
bv+kSU4EXdkRUAEXNbw2WcZxDi4l5MoTK0xcfeO9mCwHx2zMgKXjuKnG+NndQ9AE
aSFSmLYanqVr4BnWHuuekHbLAa4SOLUxWH9dlS/ZK68FGjYC4LcyzbUfaj8BXSbG
bt/0viLS4VpgnrGZwoNlOv9eGM7sIx4D+XmCGx+lvoIckAHArRc7nxTETSgIX0NN
MmzPWCDQrg63S4W+IIOnew83QlvmKjmt9hM=
-----END CERTIFICATE-----