Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa
File:                     326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (raw, json)
Hash identifier:          tBCbEpr+oJ1RFgpk9g+qD3+yfAoxP+nrSqRPHhwlJ+w=
Subject key identifier:   4F:48:15:37:55:6F:84:E9:09:2D:2A:BC:6C:1D:FF:10:B2:12:AD:9D
Certificate issuer:       /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Certificate serial:       767EE56F85760790BC7A2B2CF004A843E569CA66
Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa
Signing time:             Sun 25 Aug 2024 18:41:30 +0000
ROA not before:           Sun 25 Aug 2024 18:36:30 +0000
ROA not after:            Sun 24 Aug 2025 18:41:30 +0000
asID:                     200179
IP address blocks:        2a05:dfc1:9500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:7e:e5:6f:85:76:07:90:bc:7a:2b:2c:f0:04:a8:43:e5:69:ca:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
        Validity
            Not Before: Aug 25 18:36:30 2024 GMT
            Not After : Aug 24 18:41:30 2025 GMT
        Subject: CN=4F481537556F84E9092D2ABC6C1DFF10B212AD9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:a8:61:77:d1:50:a0:e0:f5:35:d6:e2:99:
                    61:4a:7b:d1:a5:d0:a3:c1:4e:ed:85:f3:39:b0:12:
                    5a:c4:a7:0b:e3:f0:2b:ff:5f:dc:d9:52:8d:13:09:
                    fa:6f:b3:e7:1d:53:1f:0c:c9:28:f6:03:d0:df:67:
                    2b:ac:1f:c3:93:db:9d:88:47:4e:20:24:02:cf:d6:
                    5b:64:14:3e:4b:d0:73:9a:11:b7:98:9a:d4:96:91:
                    70:59:1e:1e:8e:95:43:18:5a:0e:31:38:c9:10:ab:
                    3c:c5:8e:fa:1d:73:d2:5b:21:bc:e6:75:8d:fc:ce:
                    f9:72:c6:ff:4c:a3:a4:d8:64:5e:cf:c0:9e:3a:ff:
                    69:40:e3:45:f6:70:f5:54:08:cf:2b:94:11:f5:40:
                    48:aa:5c:f6:89:a5:d1:4a:9c:b3:e6:16:6d:c1:62:
                    b5:52:a7:e9:70:cf:13:19:c8:3c:6d:6f:1d:b3:25:
                    d8:61:5f:53:8a:8f:6e:64:7d:f4:42:ce:b7:fc:b7:
                    4a:64:74:ac:65:1e:27:4a:68:35:f8:d8:32:8d:14:
                    f4:22:9d:98:05:ac:59:9d:05:8b:3f:68:48:dd:b2:
                    3a:37:d0:e6:53:3a:02:12:13:96:cb:2c:25:b4:2d:
                    c7:30:95:8b:51:68:c9:29:84:15:fc:ba:63:c3:d7:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:48:15:37:55:6F:84:E9:09:2D:2A:BC:6C:1D:FF:10:B2:12:AD:9D
            X509v3 Authority Key Identifier:
                keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:9500::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:58:ca:fb:d0:65:a7:ee:42:c0:d2:95:c7:9b:7e:52:c8:de:
         a3:bb:b9:f3:fd:38:5d:a9:d2:69:28:e3:49:74:d2:46:91:a4:
         57:e1:bb:fe:aa:72:48:04:ce:9e:1f:00:8e:2e:71:ef:c8:b6:
         4c:30:6e:2d:8c:b4:39:51:52:8b:28:0a:91:96:ee:5f:42:bb:
         ce:41:8c:6f:38:56:64:c5:44:07:5e:47:30:2f:8c:a1:93:03:
         43:6e:af:97:b7:15:42:1b:46:ae:7f:ca:2c:a2:3f:7f:8e:5b:
         e4:00:e5:7b:78:2a:0c:f2:86:69:47:04:07:1c:83:1a:83:d2:
         c9:4d:fe:c8:be:a8:31:e1:b8:70:70:db:4d:0c:33:67:38:66:
         cf:82:53:53:b8:43:26:70:d4:4e:5c:ba:f4:04:2e:4e:99:e5:
         b1:bb:d1:9e:6e:40:39:67:9b:7a:9c:d7:bf:16:37:4d:8a:8b:
         fa:04:fe:b3:92:17:a1:4f:2c:8b:5e:09:d6:dc:a6:d7:e7:40:
         81:28:6e:1e:26:1c:43:38:f7:f5:4d:a0:25:a0:68:30:31:80:
         e8:b0:8c:fc:6c:e8:77:51:cc:be:6f:24:74:64:8e:72:6a:cc:
         05:83:20:e3:f4:d6:c1:9f:a1:95:c7:2a:93:09:ab:3e:32:7c:
         5a:28:3e:38
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIUdn7lb4V2B5C8eiss8ASoQ+VpymYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3Mjcw
RTNENjBFMzAeFw0yNDA4MjUxODM2MzBaFw0yNTA4MjQxODQxMzBaMDMxMTAvBgNV
BAMTKDRGNDgxNTM3NTU2Rjg0RTkwOTJEMkFCQzZDMURGRjEwQjIxMkFEOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/qhhd9FQoOD1NdbimWFKe9Gl
0KPBTu2F8zmwElrEpwvj8Cv/X9zZUo0TCfpvs+cdUx8MySj2A9DfZyusH8OT252I
R04gJALP1ltkFD5L0HOaEbeYmtSWkXBZHh6OlUMYWg4xOMkQqzzFjvodc9JbIbzm
dY38zvlyxv9Mo6TYZF7PwJ46/2lA40X2cPVUCM8rlBH1QEiqXPaJpdFKnLPmFm3B
YrVSp+lwzxMZyDxtbx2zJdhhX1OKj25kffRCzrf8t0pkdKxlHidKaDX42DKNFPQi
nZgFrFmdBYs/aEjdsjo30OZTOgISE5bLLCW0LccwlYtRaMkphBX8umPD1wnpAgMB
AAGjggJfMIICWzAdBgNVHQ4EFgQUT0gVN1VvhOkJLSq8bB3/ELISrZ0wHwYDVR0j
BBgwFoAUU7q4qfgzeJs1PSrMFc43Jw49YOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3
Y2EzLzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzUzQkFCOEE5RjgzMzc4
OUIzNTNEMkFDQzE1Q0UzNzI3MEUzRDYwRTMuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzAxNzkxYTY0LWEzNmEtNGViOS1hNmZmLWUxYzQwNzhhN2Nh
My8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzNTMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMjMwMzAzMTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BlTANBgkqhkiG9w0B
AQsFAAOCAQEAAljK+9Blp+5CwNKVx5t+Usjeo7u58/04XanSaSjjSXTSRpGkV+G7
/qpySATOnh8Aji5x78i2TDBuLYy0OVFSiygKkZbuX0K7zkGMbzhWZMVEB15HMC+M
oZMDQ26vl7cVQhtGrn/KLKI/f45b5ADle3gqDPKGaUcEBxyDGoPSyU3+yL6oMeG4
cHDbTQwzZzhmz4JTU7hDJnDUTly69AQuTpnlsbvRnm5AOWebepzXvxY3TYqL+gT+
s5IXoU8si14J1tym1+dAgShuHiYcQzj39U2gJaBoMDGA6LCM/Gzod1HMvm8kdGSO
cmrMBYMg4/TWwZ+hlccqkwmrPjJ8Wig+OA==
-----END CERTIFICATE-----