Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          ws/+xBH2kMP/hPmFJCgt7kZQbbXjWjUKw8uloDrOkxw=
Subject key identifier:   01:1B:22:8D:B8:AC:B0:FC:BF:13:D5:30:8B:9D:72:80:45:40:DE:6B
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       58EF02D002DE0577E5F984AADA3654C4899976BB
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa
Signing time:             Tue 18 Jul 2023 13:30:45 +0000
ROA not before:           Tue 18 Jul 2023 13:25:45 +0000
ROA not after:            Tue 16 Jul 2024 13:30:45 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ef:02:d0:02:de:05:77:e5:f9:84:aa:da:36:54:c4:89:99:76:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Jul 18 13:25:45 2023 GMT
            Not After : Jul 16 13:30:45 2024 GMT
        Subject: CN=011B228DB8ACB0FCBF13D5308B9D72804540DE6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:b1:3f:43:81:b4:57:26:35:e4:ca:14:97:
                    8c:c9:1a:f2:c5:ae:43:e5:28:e6:e8:0a:a9:ef:d0:
                    11:78:db:77:94:11:ad:92:c7:f5:75:02:d9:33:1a:
                    9e:37:37:1f:20:1f:6a:0a:a2:92:16:d8:14:fa:f8:
                    e6:4a:5f:30:64:8c:7d:46:60:5a:6d:d4:cd:6b:eb:
                    0d:d5:53:18:bf:7c:da:3e:2b:af:7d:04:98:5a:48:
                    c8:40:55:89:a1:9e:d7:1b:20:08:02:cc:4f:d3:02:
                    08:dd:38:55:3c:9e:9d:1b:ca:04:2f:e3:51:6f:61:
                    08:f3:b6:8f:89:18:de:ee:99:19:52:0e:95:30:ac:
                    65:ff:06:db:76:87:42:c4:de:71:57:d4:de:0d:c0:
                    ae:97:ea:69:bc:92:a6:27:0b:c7:31:77:f4:5f:e5:
                    97:6a:54:0d:6f:2e:90:68:48:4c:33:9d:c8:80:8c:
                    10:8f:eb:84:0d:8f:8d:d6:68:27:e7:c6:5d:c8:cf:
                    08:da:91:44:45:28:1b:2f:5a:70:c5:29:72:64:3e:
                    f7:b3:60:fa:cc:22:52:9a:38:9e:22:3d:ed:7d:08:
                    76:ed:04:6d:1c:2f:a5:9e:ae:0f:28:c3:0a:ac:9d:
                    29:c2:08:c4:51:78:62:b1:12:9a:aa:0f:91:87:34:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:22:8D:B8:AC:B0:FC:BF:13:D5:30:8B:9D:72:80:45:40:DE:6B
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f30::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:e2:a8:53:44:41:d0:61:59:dd:bb:79:33:8f:47:9e:c9:72:
         38:a5:5c:79:af:d4:8f:c6:7d:a3:4f:66:39:c8:4b:29:0f:55:
         e5:c1:83:f3:c0:7d:d1:42:8a:e5:01:85:66:60:41:5e:6f:d0:
         13:1d:6d:82:fe:f9:df:68:93:74:75:a4:3e:e1:20:22:ef:64:
         b5:01:f5:68:60:c1:ad:8b:e0:9b:f1:d1:2e:d0:77:b2:52:20:
         43:04:43:b9:ab:02:5a:66:40:fe:6c:3c:5d:6f:b4:43:ca:cb:
         9f:73:01:41:1a:d0:0d:3d:80:dc:19:a3:61:da:fe:85:45:c2:
         ce:d2:ee:d6:ca:2c:d2:29:68:e6:4f:9d:3c:07:2c:ce:44:68:
         57:5c:40:94:e6:cb:dd:93:14:0a:54:35:8a:4c:50:d0:34:8b:
         9d:29:c6:a6:9b:cb:5c:b2:c5:36:21:6c:2d:d6:86:38:00:1c:
         25:68:62:9c:70:f1:59:5e:11:35:8e:8a:85:a1:26:df:8c:69:
         c1:59:23:a4:1d:84:fc:d5:ba:eb:51:81:79:ea:a3:e2:b2:73:
         f0:4f:52:21:52:6a:e1:05:65:5c:e0:73:80:b8:e3:d2:94:d5:
         dc:c1:ce:10:74:46:15:51:ba:8c:3b:6f:0d:a9:84:83:89:e7:
         c0:3e:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----