Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          xOO+vgwlm0uTNxU2eMot/84gCr3zxR7SU/HcdT1x7Xg=
Subject key identifier:   4D:22:4E:C7:EA:9E:C5:AE:58:D6:12:41:75:15:10:83:2E:D9:B0:28
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       3B86491F773F5BA3AF9D326CD985984EC11D676A
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Sun 23 Jul 2023 22:33:38 +0000
ROA not before:           Sun 23 Jul 2023 22:28:38 +0000
ROA not after:            Sun 21 Jul 2024 22:33:38 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f70::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:86:49:1f:77:3f:5b:a3:af:9d:32:6c:d9:85:98:4e:c1:1d:67:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Jul 23 22:28:38 2023 GMT
            Not After : Jul 21 22:33:38 2024 GMT
        Subject: CN=4D224EC7EA9EC5AE58D61241751510832ED9B028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8a:7f:88:58:cf:78:8e:ec:7c:4f:3d:cf:9d:
                    27:cb:88:7e:a7:c4:42:a2:ed:88:03:52:41:11:be:
                    36:02:ce:bd:fd:a5:da:2b:3c:d5:19:f4:8b:20:cc:
                    68:b7:d0:fc:64:ee:bd:2f:db:d0:10:17:7b:03:52:
                    34:89:9e:61:0d:4d:0e:76:46:e6:45:49:ac:f1:0f:
                    fa:49:0e:be:4e:81:9f:d1:97:1a:af:24:8d:f6:35:
                    fe:e8:54:5c:3d:e8:af:31:9a:31:1d:76:4a:bc:2d:
                    32:04:d7:f3:fc:02:bc:b3:9b:90:e6:16:5f:17:de:
                    f9:35:d2:68:18:67:fa:fb:6d:68:d0:63:0e:72:37:
                    84:5f:97:13:b3:87:ee:7a:a5:84:c7:a5:e4:6d:25:
                    ea:bf:68:2f:30:b2:ff:0b:5e:5a:f2:9f:c1:7f:f9:
                    22:cf:ca:14:ca:4c:09:7d:0f:6b:b8:54:c5:c0:71:
                    c4:84:3c:67:7c:b4:4f:e8:64:13:d4:e0:04:b3:89:
                    73:dc:ce:af:18:01:8e:8f:d5:42:44:e7:03:2d:ba:
                    9f:f8:95:5a:73:e4:99:2c:94:b3:da:0e:65:59:d3:
                    87:08:83:fc:64:3e:3b:0a:55:c7:05:f0:f0:8e:33:
                    c2:50:13:c2:41:d9:3e:e1:72:0b:7a:b8:09:28:e9:
                    ce:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:22:4E:C7:EA:9E:C5:AE:58:D6:12:41:75:15:10:83:2E:D9:B0:28
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f70::/44

    Signature Algorithm: sha256WithRSAEncryption
         47:1c:f0:3b:b6:48:8b:f8:f2:1d:37:6c:d4:5c:2b:39:77:42:
         e9:b5:12:eb:c5:7e:7e:2a:d4:4d:b7:b9:e6:de:18:8b:12:46:
         c5:01:31:c4:fb:ca:6c:a6:92:8c:5a:97:5e:20:ec:06:74:73:
         41:c3:5f:1c:ca:9a:e9:dd:fc:cc:6e:f9:28:32:42:9d:03:05:
         0e:d8:38:93:bb:91:71:f1:93:8d:d7:0c:dd:66:80:59:48:f9:
         7a:08:6c:7f:a7:b4:e4:71:5e:28:f4:8c:50:35:e5:5b:94:da:
         aa:00:39:68:73:66:a2:36:ca:e3:68:1b:cd:26:0b:ae:49:0c:
         7f:83:a1:82:f6:54:f0:62:31:f8:12:9e:ca:2d:f8:79:16:0a:
         72:e4:e7:c4:6f:d3:65:13:fd:fd:66:d4:0e:54:84:3b:71:da:
         8f:9b:a0:a9:da:09:d0:3a:f4:25:02:e5:7f:a1:f7:d4:72:80:
         63:db:49:b5:e3:a7:78:99:ae:dc:1d:85:34:0a:51:a2:cf:ee:
         8b:b5:a7:72:32:19:45:f4:dc:16:fc:ea:2c:0a:7e:ae:55:f9:
         ce:37:2a:20:f9:a6:a3:0f:ca:25:89:15:ca:62:b4:57:6f:08:
         f7:af:98:db:86:5c:ab:f8:c7:55:64:07:bf:23:18:2b:af:25:
         8e:8c:19:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----