Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          1ceL/HscQvQ8UCfKNUjs4FU2sz8fZc1q0KeIbmoNFYI=
Subject key identifier:   BD:C2:5E:25:AD:54:C7:63:CB:9A:9A:C5:07:D2:6B:CD:20:9A:5A:D8
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       778349657893417B3ADCB3261B175C2B52232CD9
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa
Signing time:             Tue 18 Jul 2023 13:27:23 +0000
ROA not before:           Tue 18 Jul 2023 13:22:23 +0000
ROA not after:            Tue 16 Jul 2024 13:27:23 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f25::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:83:49:65:78:93:41:7b:3a:dc:b3:26:1b:17:5c:2b:52:23:2c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Jul 18 13:22:23 2023 GMT
            Not After : Jul 16 13:27:23 2024 GMT
        Subject: CN=BDC25E25AD54C763CB9A9AC507D26BCD209A5AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0f:3b:d7:b1:73:ef:bb:53:1f:1b:1a:49:9b:
                    18:c9:b7:38:1f:12:51:05:fa:69:3d:6c:b1:ee:fa:
                    c6:3e:fb:3d:67:28:64:54:31:73:6a:2b:ad:f0:03:
                    55:bf:0a:b5:ce:8c:1a:82:18:df:69:25:50:a3:0d:
                    90:1e:b0:48:bb:95:66:62:0c:93:36:35:d1:08:1f:
                    03:5c:e2:e0:b2:58:0e:31:60:2d:1d:03:04:7f:f4:
                    ef:c5:5f:cd:cd:55:8f:7c:6d:74:8e:0d:c3:03:80:
                    fa:ba:af:f7:17:32:81:cd:1e:c4:2b:ad:4c:4a:a1:
                    0d:34:db:ef:65:53:e5:0a:71:61:a3:34:26:99:d5:
                    54:8f:97:e0:cb:25:5c:e8:72:23:32:08:ad:0b:c1:
                    67:46:fa:f2:7a:e9:4b:96:b5:a7:63:12:37:5c:47:
                    af:ed:6e:32:97:29:3d:5c:e9:b4:e2:50:04:1b:7e:
                    e8:40:9c:fa:ec:3d:cb:82:72:35:3a:23:61:ed:a1:
                    0a:d9:0b:27:3d:ec:0e:ff:0a:f5:0e:0f:59:92:d3:
                    5c:92:ef:ac:fd:c5:a0:7b:db:79:ad:6e:8a:45:de:
                    67:1a:65:61:af:3a:67:89:7c:5a:28:a4:55:b3:1c:
                    a2:f4:56:dd:3d:cb:69:eb:39:79:7b:40:b0:04:a3:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C2:5E:25:AD:54:C7:63:CB:9A:9A:C5:07:D2:6B:CD:20:9A:5A:D8
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f25::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:b3:67:a5:e2:4e:c7:04:c5:18:0c:ad:12:58:ee:8c:85:6e:
         16:d4:f2:3a:e0:94:3d:65:81:f3:c7:33:f3:4f:77:9b:cb:b8:
         02:b4:b7:36:59:4a:76:30:c6:04:6b:41:43:97:81:3e:63:97:
         ad:ad:ce:77:d3:71:66:21:eb:f4:5d:76:42:69:c4:9f:46:78:
         4b:1e:64:c0:5c:a1:3c:af:aa:71:76:16:89:5d:1e:ac:c7:33:
         77:c6:e9:70:e4:d2:62:e9:a3:d8:54:77:d5:9d:61:3f:9e:4b:
         b7:f3:66:84:c3:46:c9:06:2d:93:59:d7:43:fe:f6:8c:5e:82:
         81:4e:c6:47:f8:a7:19:7f:f5:da:77:b2:8c:0f:fb:24:ca:96:
         76:e9:c7:8d:fe:c8:dd:b0:d4:47:3e:84:93:61:8f:d2:d0:3e:
         e7:53:19:c3:2b:ae:37:2d:8e:0f:6d:eb:81:1f:9a:45:1b:b8:
         47:05:d2:66:ad:be:5d:c8:e0:54:e0:b5:46:49:2d:95:97:06:
         0f:39:45:a7:28:41:bc:ac:98:3f:d4:8f:c5:0e:ba:bf:b1:1b:
         04:12:0d:0f:78:10:52:f1:a5:5b:1d:a9:3b:72:66:18:15:30:
         52:49:16:b8:da:b4:2f:45:ed:e6:f1:6f:a5:a4:03:a6:25:31:
         e5:5a:6d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----