Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          GEUoYvQE+yeicFBZ5oixODPKxKvxD+my73otLY0ojKk=
Subject key identifier:   97:91:E3:78:5E:D5:40:83:E7:06:E8:1C:8D:6E:C5:69:8C:7A:A4:AE
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       37B7E762C80A1865ED7661E7C64155A4B4879792
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Fri 15 Sep 2023 20:19:39 +0000
ROA not before:           Fri 15 Sep 2023 20:14:39 +0000
ROA not after:            Fri 13 Sep 2024 20:19:39 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8ef0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b7:e7:62:c8:0a:18:65:ed:76:61:e7:c6:41:55:a4:b4:87:97:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Sep 15 20:14:39 2023 GMT
            Not After : Sep 13 20:19:39 2024 GMT
        Subject: CN=9791E3785ED54083E706E81C8D6EC5698C7AA4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:67:80:60:c9:a4:16:39:38:f5:c6:d6:e9:
                    46:4c:f4:6f:b9:97:94:da:b0:6d:e3:d1:ce:17:b7:
                    8f:30:fe:1f:43:3d:1c:b2:13:2e:30:f8:0d:be:d7:
                    0e:21:43:b5:5e:65:af:6d:b7:bd:ec:cf:80:78:71:
                    68:fd:90:60:bc:b3:d3:bb:b8:f2:33:f3:be:1d:27:
                    cd:9b:4c:c7:28:26:40:b3:73:fb:71:bc:e6:4a:4c:
                    d1:ba:c7:d4:c9:29:fc:58:21:4f:2d:b2:55:82:1e:
                    7d:35:01:47:12:8a:54:61:f1:72:b3:66:8e:47:a8:
                    c7:9e:71:71:26:0b:9c:ff:c4:7f:e9:45:3f:e5:0b:
                    31:00:cb:27:d5:02:81:77:14:c1:47:9d:6d:d1:83:
                    12:c3:10:03:49:2a:89:3c:7a:3c:f7:52:94:33:6b:
                    44:d2:10:da:99:56:f8:07:f7:62:b8:df:bb:7d:e6:
                    a6:dd:34:2f:18:13:5d:64:dc:d1:af:93:3e:b3:a6:
                    60:3c:10:61:9b:7e:48:d5:6f:50:2d:54:19:ff:b1:
                    1c:d9:6c:6e:ea:71:81:d5:75:9e:97:5a:3e:c6:70:
                    42:42:57:36:a6:e7:4c:be:79:6e:97:fa:02:18:79:
                    2b:eb:9d:21:a3:ee:12:61:df:12:14:8d:d4:a2:0b:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:91:E3:78:5E:D5:40:83:E7:06:E8:1C:8D:6E:C5:69:8C:7A:A4:AE
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8ef0::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:06:d8:98:b4:5a:c4:36:be:33:58:46:78:63:81:b7:5a:
         e2:6a:58:22:2a:34:8a:50:b4:af:bc:1e:d8:a2:d8:52:db:dc:
         0d:de:7d:1c:c1:7c:75:2e:6f:44:82:5a:64:6e:1b:ba:c5:6b:
         d0:ed:f6:f8:4d:82:b7:e7:20:64:e0:dc:80:95:95:5d:f0:5d:
         16:c3:86:9d:b1:fd:51:14:b0:03:5c:a9:b8:27:99:c5:f3:fd:
         36:d3:f8:92:9e:d2:90:4c:e1:ad:3a:24:ad:2b:a7:b7:f3:f4:
         e7:e2:bc:99:7b:55:f4:e6:32:30:51:95:af:84:cb:c0:5c:0c:
         bf:11:90:17:3b:68:72:f9:7b:e6:8f:4f:55:bb:b1:93:bc:12:
         13:ba:b8:81:36:6a:2d:aa:4a:ff:c4:5a:10:75:40:fa:70:bb:
         2f:65:8a:fd:09:a1:a3:fc:99:cd:2e:5c:c3:1f:a6:15:78:28:
         ee:03:7d:2e:77:1b:75:e5:9f:9a:b2:aa:8a:e5:8a:ee:db:90:
         c1:fe:92:d5:4d:47:76:ef:05:98:39:b5:17:8b:1f:ac:64:08:
         1a:de:15:fa:ec:2a:e1:c0:4b:b2:6d:f0:94:06:60:83:13:a2:
         f3:7a:ee:af:e0:94:81:9d:f2:b9:34:53:b5:49:9d:58:c5:00:
         3e:8b:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----