Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa
File:                     326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          u/op1Gb+lh53LhTdxSovsMBPfFi75dye37nTdYVQSh4=
Subject key identifier:   5F:1B:7D:8A:EA:65:77:93:9C:61:18:A1:F9:43:98:3F:CC:86:D0:D3
Certificate issuer:       /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial:       0B8BD40A5E8EDE29B261C9E424AC0C2AE596AD23
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa
Signing time:             Fri 11 Apr 2025 16:00:07 +0000
ROA not before:           Fri 11 Apr 2025 15:55:07 +0000
ROA not after:            Fri 10 Apr 2026 16:00:07 +0000
asID:                     203069
IP address blocks:        2a0a:6040:3f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8b:d4:0a:5e:8e:de:29:b2:61:c9:e4:24:ac:0c:2a:e5:96:ad:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
        Validity
            Not Before: Apr 11 15:55:07 2025 GMT
            Not After : Apr 10 16:00:07 2026 GMT
        Subject: CN=5F1B7D8AEA6577939C6118A1F943983FCC86D0D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:ed:bb:9f:37:0d:f7:38:f3:9f:a4:cd:69:
                    4d:0a:68:c3:2d:05:e4:3c:10:6a:8b:48:9d:5b:fa:
                    c2:18:e7:5e:34:48:fd:aa:ea:a9:10:43:0e:f5:91:
                    ed:2a:0e:04:83:83:d8:61:3c:db:50:31:ec:aa:3d:
                    38:1c:ac:9e:71:1c:11:c3:b7:d1:85:e9:54:89:2e:
                    af:da:03:8c:00:2e:09:8b:89:0f:e6:d1:2e:83:c9:
                    e8:2a:ef:cd:b1:48:b9:85:ca:e3:a1:da:cc:0b:8e:
                    52:34:78:9c:f3:4a:b3:24:2e:5b:54:b6:c1:23:18:
                    1d:59:7a:9b:2f:78:ba:34:c0:ae:3f:f3:fd:6d:87:
                    42:67:4e:3b:5e:c4:28:a0:97:9a:2d:2c:ac:71:23:
                    ac:2e:64:3f:2c:24:5d:0e:a8:46:5d:36:ee:a4:0a:
                    e4:71:13:05:7b:4a:7b:9b:9a:b2:f7:5a:d1:05:a7:
                    f2:46:04:4e:ae:52:f4:cc:79:bc:6a:4d:8b:2d:f9:
                    6f:1e:0b:08:97:aa:7d:2c:cf:ec:ba:25:6b:fd:10:
                    d8:b2:10:df:2f:90:ee:5f:78:e7:d2:51:b3:a6:64:
                    43:5f:0a:3c:14:f5:8b:ad:de:52:c1:09:89:75:c9:
                    d6:e6:25:d0:d2:60:11:63:a9:c5:86:d3:e5:39:ee:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1B:7D:8A:EA:65:77:93:9C:61:18:A1:F9:43:98:3F:CC:86:D0:D3
            X509v3 Authority Key Identifier:
                keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:eb:73:4e:22:0e:21:30:b0:94:2b:85:b1:73:31:69:6c:4f:
         ea:4d:3c:74:44:cd:da:17:a2:bf:14:8a:19:5e:b2:6f:f0:be:
         5a:45:34:f5:f1:3f:27:5f:0b:27:f9:f6:9f:5e:f0:3e:f9:46:
         c2:d2:e8:a6:16:1e:5c:a0:63:48:36:4f:7f:0e:32:54:8c:9b:
         2b:f6:af:67:81:ed:83:c4:72:41:0d:c0:ef:82:aa:b1:61:e3:
         33:db:32:f5:bc:1d:f3:66:13:7b:e6:cc:90:1f:ae:97:e2:16:
         ef:22:ab:69:da:0e:6a:29:b7:b5:4b:51:5d:ae:d5:bb:b2:93:
         00:ad:b8:71:15:41:4d:99:30:52:5b:e6:67:06:56:6b:e7:be:
         c3:e1:28:2e:f2:b6:58:0e:e5:f2:c3:56:91:f9:3b:b9:cd:86:
         c2:89:36:ee:fb:08:b7:d0:31:84:9d:1c:74:e8:68:47:04:13:
         e2:55:ac:c1:fb:2b:aa:be:2d:14:df:a8:37:22:04:4c:c4:62:
         40:1f:a5:5c:4d:f0:6f:65:3f:97:1b:23:93:37:ef:5c:43:27:
         0a:60:11:f3:30:b1:67:4f:5c:5a:c4:8d:c8:65:be:9c:4f:bf:
         f9:9f:11:92:fd:0e:14:fc:c8:3a:35:ab:62:d1:24:41:53:aa:
         b0:9f:d6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----