Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030333a3a2f34382d3438203d3e20323133383531.roa
File:                     326131343a3763303a313030333a3a2f34382d3438203d3e20323133383531.roa (raw, json)
Hash identifier:          nDiz84C0jqVZ65MNv0sNV6FKCd/YxTdQFsSrJ4dbO4g=
Subject key identifier:   EA:85:21:5A:A1:9F:F2:8A:53:29:23:03:FF:F4:A5:BA:F8:64:44:18
Certificate issuer:       /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial:       4056B3780D52170625836CCC8540D258482377EC
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030333a3a2f34382d3438203d3e20323133383531.roa
Signing time:             Fri 15 Nov 2024 12:36:14 +0000
ROA not before:           Fri 15 Nov 2024 12:31:14 +0000
ROA not after:            Fri 14 Nov 2025 12:36:14 +0000
asID:                     213851
IP address blocks:        2a14:7c0:1003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:56:b3:78:0d:52:17:06:25:83:6c:cc:85:40:d2:58:48:23:77:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
        Validity
            Not Before: Nov 15 12:31:14 2024 GMT
            Not After : Nov 14 12:36:14 2025 GMT
        Subject: CN=EA85215AA19FF28A53292303FFF4A5BAF8644418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:8a:68:6f:58:5a:09:59:7b:6f:97:f5:67:43:
                    f5:ec:46:2a:e3:36:3a:fd:06:72:ec:df:46:d9:81:
                    6f:4a:5c:19:b6:85:87:7d:4f:d8:06:f9:3d:75:48:
                    cd:d7:4a:99:fe:a8:ef:4a:81:e9:74:a0:1e:2c:93:
                    90:5f:e6:98:e8:48:f2:f0:63:4a:0d:19:80:f0:b3:
                    a3:89:39:a3:37:69:af:a7:eb:42:8f:49:07:a4:8a:
                    be:46:b5:f5:5a:ce:2f:47:20:42:e5:94:d2:d2:64:
                    82:fe:0c:0e:24:47:7b:ff:ee:a8:e8:05:ee:12:47:
                    b4:d7:49:ca:09:58:46:78:bf:5d:e9:82:64:ad:6c:
                    6d:4d:c5:ba:8a:50:4b:9c:31:db:9d:15:a7:cb:23:
                    ef:5d:e6:08:5e:75:12:62:ab:98:3d:90:af:3d:cc:
                    e9:03:90:c9:45:ac:66:60:05:f3:b4:1b:50:fb:19:
                    b3:4c:53:f7:10:11:5f:c3:23:2c:91:a9:16:6c:1d:
                    d3:3f:55:0b:0f:32:0c:9a:b5:c3:ac:c8:cc:fa:60:
                    9e:92:e5:89:c6:6f:ec:03:d1:23:b2:c1:5d:21:dd:
                    ac:99:37:f1:ce:75:14:7e:b7:87:a8:4c:e6:fa:ec:
                    18:ee:e3:64:17:85:99:85:dc:4c:57:50:cf:a7:72:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:85:21:5A:A1:9F:F2:8A:53:29:23:03:FF:F4:A5:BA:F8:64:44:18
            X509v3 Authority Key Identifier:
                keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030333a3a2f34382d3438203d3e20323133383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:1003::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:57:2d:7b:28:6e:82:ea:ce:f1:4e:c0:7d:78:72:a7:ce:01:
         d6:2a:2f:f6:a1:43:fe:51:12:f2:2e:d4:70:87:e1:da:f8:90:
         e1:22:4f:b2:a2:16:ac:2c:eb:3c:b2:ad:62:91:4e:c9:21:75:
         c4:dc:ae:ba:71:81:c7:99:70:26:21:46:f8:7c:6d:b9:a7:d5:
         86:26:7f:63:21:00:a0:42:13:0a:31:f7:8e:4b:bb:93:bb:b3:
         fb:8b:69:18:bb:f2:75:93:51:b3:2b:39:0b:3e:8e:c8:14:35:
         cd:58:5a:d5:88:b4:af:f3:be:f6:db:7f:89:b5:20:fe:ac:fb:
         3e:22:ef:4b:d4:aa:9f:42:f9:fe:51:3a:d7:e1:b7:a4:4b:8d:
         f0:6d:77:73:ac:97:cd:e0:af:47:f6:30:f5:d8:e9:04:34:47:
         3e:27:45:0f:58:39:72:78:dc:53:e5:ae:4c:b4:f6:e0:3a:c8:
         19:c3:39:10:a6:1b:86:66:64:58:86:c2:aa:d6:44:9c:e6:bd:
         bd:39:5a:55:06:5b:50:04:82:ce:9c:3c:88:e1:da:4f:c9:cf:
         e2:33:3b:3a:dd:33:68:bd:e2:32:f4:3c:1f:3e:1b:02:ff:fc:
         bc:aa:4c:16:a5:d8:25:96:1e:25:1a:89:15:0a:c4:8c:6f:d0:
         11:17:3d:95
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUQFazeA1SFwYlg2zMhUDSWEgjd+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAz
RUVCMTA4ODAeFw0yNDExMTUxMjMxMTRaFw0yNTExMTQxMjM2MTRaMDMxMTAvBgNV
BAMTKEVBODUyMTVBQTE5RkYyOEE1MzI5MjMwM0ZGRjRBNUJBRjg2NDQ0MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7imhvWFoJWXtvl/VnQ/XsRirj
Njr9BnLs30bZgW9KXBm2hYd9T9gG+T11SM3XSpn+qO9Kgel0oB4sk5Bf5pjoSPLw
Y0oNGYDws6OJOaM3aa+n60KPSQekir5GtfVazi9HIELllNLSZIL+DA4kR3v/7qjo
Be4SR7TXScoJWEZ4v13pgmStbG1NxbqKUEucMdudFafLI+9d5ghedRJiq5g9kK89
zOkDkMlFrGZgBfO0G1D7GbNMU/cQEV/DIyyRqRZsHdM/VQsPMgyatcOsyMz6YJ6S
5YnGb+wD0SOywV0h3ayZN/HOdRR+t4eoTOb67Bju42QXhZmF3ExXUM+nct/LAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU6oUhWqGf8opTKSMD//SluvhkRBgwHwYDVR0j
BBgwFoAUyr83Pq3Nk3blJM4xOrhowD7rEIgwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZjbG91
ZC10Z2V3aWVzZS8wL0NBQkYzNzNFQURDRDkzNzZFNTI0Q0UzMTNBQjg2OEMwM0VF
QjEwODguY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9y
ZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0NBQkYzNzNFQURDRDkz
NzZFNTI0Q0UzMTNBQjg2OEMwM0VFQjEwODguY2VyMIGQBggrBgEFBQcBCwSBgzCB
gDB+BggrBgEFBQcwC4ZycnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9wZmNs
b3VkLXRnZXdpZXNlLzAvMzI2MTMxMzQzYTM3NjMzMDNhMzEzMDMwMzMzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMxMzMzODM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqFAfAEAMw
DQYJKoZIhvcNAQELBQADggEBAB5XLXsoboLqzvFOwH14cqfOAdYqL/ahQ/5REvIu
1HCH4dr4kOEiT7KiFqws6zyyrWKRTskhdcTcrrpxgceZcCYhRvh8bbmn1YYmf2Mh
AKBCEwox945Lu5O7s/uLaRi78nWTUbMrOQs+jsgUNc1YWtWItK/zvvbbf4m1IP6s
+z4i70vUqp9C+f5ROtfht6RLjfBtd3Osl83gr0f2MPXY6QQ0Rz4nRQ9YOXJ43FPl
rky09uA6yBnDORCmG4ZmZFiGwqrWRJzmvb05WlUGW1AEgs6cPIjh2k/Jz+IzOzrd
M2i94jL0PB8+GwL//LyqTBal2CWWHiUaiRUKxIxv0BEXPZU=
-----END CERTIFICATE-----