Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          owwQX7n8jR3UPpg/YxWIi7NNcGJ2RlRYrb9/rMvFEyk=
Subject key identifier:   2D:1B:63:E4:AB:8F:7F:51:09:EC:3D:93:37:17:2C:C7:E8:52:F0:A5
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       090EEFAF9202095431D596567A24B9268EAC1167
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa
Signing time:             Tue 18 Jul 2023 17:56:35 +0000
ROA not before:           Tue 18 Jul 2023 17:51:35 +0000
ROA not after:            Tue 16 Jul 2024 17:56:35 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f35::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0e:ef:af:92:02:09:54:31:d5:96:56:7a:24:b9:26:8e:ac:11:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Jul 18 17:51:35 2023 GMT
            Not After : Jul 16 17:56:35 2024 GMT
        Subject: CN=2D1B63E4AB8F7F5109EC3D9337172CC7E852F0A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:94:8e:da:e1:99:f0:b1:75:bb:ee:c9:da:
                    37:05:18:46:9f:b5:34:71:c1:e6:c7:ee:79:f4:8d:
                    d0:e9:86:a1:d0:33:d7:a9:43:6b:85:87:d4:26:34:
                    77:63:71:86:e3:0f:0f:40:af:95:66:3d:fc:78:37:
                    61:fe:84:6c:1a:4f:5b:f5:59:7f:4e:68:ad:18:6b:
                    69:cd:23:98:76:c3:84:bf:10:75:98:c2:4b:fb:08:
                    0b:0f:4b:d8:6e:c4:e2:10:24:d5:61:e1:7d:fc:88:
                    ba:48:42:da:d2:c0:16:a9:50:32:90:9f:0b:80:62:
                    3a:3f:5f:fa:a5:44:b8:83:fe:fc:27:b8:40:16:ca:
                    ab:33:ad:8d:a0:6e:32:f7:13:86:14:19:fb:a2:8f:
                    05:b0:14:b4:cb:12:d8:f3:d2:5c:85:1c:db:f4:1e:
                    4c:b3:f5:5b:af:c2:2e:84:1f:25:32:62:ce:c4:0f:
                    49:17:78:f9:b4:4e:fa:da:85:db:f3:12:5a:9c:c1:
                    4b:95:5e:bb:82:ce:22:d8:58:85:9a:22:0a:d8:42:
                    33:a7:f5:18:e2:75:de:d7:b6:a4:17:45:f1:0b:28:
                    77:29:ca:56:cd:44:88:74:8c:de:f4:90:db:8a:76:
                    63:13:4d:ad:3f:34:d2:d6:d1:99:44:ad:b0:dc:06:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1B:63:E4:AB:8F:7F:51:09:EC:3D:93:37:17:2C:C7:E8:52:F0:A5
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f35::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:f2:19:c6:2d:84:e2:b3:3b:2f:5b:fa:81:9a:06:be:ac:72:
         95:19:98:e7:f7:20:a4:54:c3:17:a8:96:ff:79:cc:84:f9:61:
         6d:f9:de:ae:53:71:29:82:32:67:1d:52:f1:6d:37:f1:bd:e3:
         13:bf:68:92:24:cf:9f:12:e6:3a:91:22:a5:e7:a3:0d:23:9a:
         52:b4:30:21:4a:2c:e0:ef:a9:01:ab:1b:3d:6b:61:00:2c:a8:
         48:a5:34:64:48:1e:79:f3:bb:81:f2:c3:3b:b0:21:97:cf:6a:
         43:62:18:6b:c8:c2:1b:cc:c0:d8:20:96:45:03:32:75:5c:eb:
         41:29:c7:ae:9a:87:da:f4:9d:d2:ab:2d:69:d5:53:4c:ed:99:
         b5:60:23:22:bd:d1:62:46:a4:3d:b0:4c:5c:da:ab:b6:8d:5a:
         45:df:a2:90:3c:dd:a2:af:0c:2f:5d:e0:e3:3b:50:e7:b1:03:
         93:91:53:12:b5:a3:d0:21:37:0b:d6:98:22:af:28:f8:21:04:
         cd:f1:68:f0:91:8d:4e:15:8c:4d:dd:40:19:2c:ba:d4:a2:31:
         ac:d2:c2:c0:98:d0:1c:b3:92:4c:42:78:fd:0a:7b:ca:f4:e4:
         f0:2c:c0:1b:84:7b:d5:67:63:b6:2b:2e:c2:2c:d3:aa:25:53:
         97:67:7f:5e
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUCQ7vr5ICCVQx1ZZWeiS5Jo6sEWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZCNTA1Njc5MUM2RjFGMjg4OTFCMjRENEJEMkZDNzkz
QjdENzk0NjAeFw0yMzA3MTgxNzUxMzVaFw0yNDA3MTYxNzU2MzVaMDMxMTAvBgNV
BAMTKDJEMUI2M0U0QUI4RjdGNTEwOUVDM0Q5MzM3MTcyQ0M3RTg1MkYwQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9pSO2uGZ8LF1u+7J2jcFGEaf
tTRxwebH7nn0jdDphqHQM9epQ2uFh9QmNHdjcYbjDw9Ar5VmPfx4N2H+hGwaT1v1
WX9OaK0Ya2nNI5h2w4S/EHWYwkv7CAsPS9huxOIQJNVh4X38iLpIQtrSwBapUDKQ
nwuAYjo/X/qlRLiD/vwnuEAWyqszrY2gbjL3E4YUGfuijwWwFLTLEtjz0lyFHNv0
Hkyz9Vuvwi6EHyUyYs7ED0kXePm0TvrahdvzElqcwUuVXruCziLYWIWaIgrYQjOn
9Rjidd7XtqQXRfELKHcpylbNRIh0jN70kNuKdmMTTa0/NNLW0ZlErbDcBtCXAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQULRtj5KuPf1EJ7D2TNxcsx+hS8KUwHwYDVR0j
BBgwFoAUX7UFZ5HG8fKIkbJNS9L8eTt9eUYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTc5YzJiMDktZWJkZC00YTZjLWE5NzUtMjRlMWEyMjYy
ZjRmLzAvNUZCNTA1Njc5MUM2RjFGMjg4OTFCMjRENEJEMkZDNzkzQjdENzk0Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzVGQjUwNTY3OTFDNkYx
RjI4ODkxQjI0RDRCRDJGQzc5M0I3RDc5NDYuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2U3OWMyYjA5LWViZGQtNGE2Yy1hOTc1LTI0ZTFhMjI2MmY0
Zi8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMzMzUzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV81MA0GCSqGSIb3DQEB
CwUAA4IBAQCh8hnGLYTiszsvW/qBmga+rHKVGZjn9yCkVMMXqJb/ecyE+WFt+d6u
U3EpgjJnHVLxbTfxveMTv2iSJM+fEuY6kSKl56MNI5pStDAhSizg76kBqxs9a2EA
LKhIpTRkSB5587uB8sM7sCGXz2pDYhhryMIbzMDYIJZFAzJ1XOtBKceumofa9J3S
qy1p1VNM7Zm1YCMivdFiRqQ9sExc2qu2jVpF36KQPN2irwwvXeDjO1DnsQOTkVMS
taPQITcL1pgiryj4IQTN8WjwkY1OFYxN3UAZLLrUojGs0sLAmNAcs5JMQnj9CnvK
9OTwLMAbhHvVZ2O2Ky7CLNOqJVOXZ39e
-----END CERTIFICATE-----