Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa
File:                     326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (raw, json)
Hash identifier:          KTLHwta4ucozbutcKTnq5ZqrnJTc1dg7Jw89Lhl2aX4=
Subject key identifier:   F9:42:31:34:0A:67:B1:BC:FD:BF:B3:B1:BC:BB:EE:2A:DE:94:56:EE
Certificate issuer:       /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial:       55DDAB1D055F6327558655D15919629268D2AF2C
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa
Signing time:             Sat 13 Jul 2024 19:09:37 +0000
ROA not before:           Sat 13 Jul 2024 19:04:37 +0000
ROA not after:            Sat 12 Jul 2025 19:09:37 +0000
asID:                     215365
IP address blocks:        2a14:7c0:1000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:dd:ab:1d:05:5f:63:27:55:86:55:d1:59:19:62:92:68:d2:af:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
        Validity
            Not Before: Jul 13 19:04:37 2024 GMT
            Not After : Jul 12 19:09:37 2025 GMT
        Subject: CN=F94231340A67B1BCFDBFB3B1BCBBEE2ADE9456EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:71:a1:4c:58:fa:96:eb:e8:89:f5:71:a4:71:
                    2e:9c:62:ad:be:03:16:05:63:fe:31:b6:cd:7f:25:
                    13:f6:4e:0f:16:09:67:2a:91:8a:f7:57:b5:a5:ef:
                    45:4a:75:47:91:63:8f:b1:e8:ac:1b:9a:0d:ca:63:
                    94:20:98:db:17:a7:97:dc:88:e7:27:c8:e4:53:7a:
                    bb:1d:ee:bb:a5:51:5b:da:da:f3:15:8e:c6:f9:3f:
                    c5:25:c1:4e:05:47:f0:de:c0:4c:fa:f5:01:59:dd:
                    de:58:da:bf:d7:4d:c2:d6:bb:cc:96:49:f0:b2:5c:
                    c0:0a:24:70:41:95:23:31:70:82:c1:e1:47:d2:8c:
                    d5:86:5d:12:ef:a7:c3:41:9d:52:c8:a9:43:80:6d:
                    34:99:88:44:fe:7e:6b:ad:d6:be:56:c0:29:1e:25:
                    c5:c2:83:89:cc:1a:96:66:9c:f1:29:82:83:49:f9:
                    e8:86:9f:e6:a0:d1:7a:23:7a:7b:9a:9c:fa:d1:c9:
                    90:14:69:3e:87:da:0e:f6:8f:f8:0a:74:eb:c7:6f:
                    a2:e6:77:d5:fa:91:4a:6a:76:ad:71:ee:27:46:56:
                    88:4f:03:79:80:fa:93:66:e1:be:8a:fe:d6:68:16:
                    2a:92:31:d1:4d:fb:21:a9:f5:b7:13:d8:cd:2e:99:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:42:31:34:0A:67:B1:BC:FD:BF:B3:B1:BC:BB:EE:2A:DE:94:56:EE
            X509v3 Authority Key Identifier:
                keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         2d:f0:ed:a9:95:e9:54:3d:07:63:5a:9d:27:51:e0:19:74:5b:
         10:7e:c0:c4:6c:ad:35:32:0f:6b:c2:ae:8f:f4:6e:ff:49:c7:
         5b:f7:b1:30:ec:ba:ee:72:9d:95:0f:1f:3e:19:f6:61:17:1a:
         12:0f:d5:60:36:5a:2f:e9:e4:81:94:e6:09:2b:36:c9:5a:d9:
         5b:73:69:97:7f:12:f1:06:1d:0e:27:c8:a4:ce:6e:18:c5:07:
         8b:ef:99:c1:dd:09:f3:74:e2:de:40:6f:70:d5:75:33:9c:23:
         c9:09:16:0e:3d:bd:08:6f:a5:27:aa:21:74:e5:fc:5a:ea:26:
         3f:e9:04:56:5d:16:d2:b2:2b:05:bc:f4:fd:6c:63:3c:6b:07:
         bc:81:fc:c7:79:6d:ce:b7:4d:ad:26:03:00:0b:93:bd:9c:69:
         07:27:94:82:8d:d3:70:ab:75:3c:21:bd:5a:b4:fc:59:ae:36:
         8d:be:b4:da:61:74:6f:73:74:e0:7b:f8:1f:e4:94:c0:72:33:
         fb:5c:63:c7:5b:14:c9:07:af:8d:fc:7e:52:58:5d:01:08:fe:
         f0:a8:dc:0e:5a:45:cb:ad:ba:56:58:f2:44:22:51:c8:1f:0c:
         97:62:df:99:31:d6:bc:6d:e3:7d:a9:d2:77:45:ea:68:c9:b0:
         1b:4d:ce:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----