Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa
File:                     326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (raw, json)
Hash identifier:          BmKTbRMoiut+8VNSufvgCLPuOQU03tX8DldEeEoDX0o=
Subject key identifier:   2E:82:C9:75:E3:C4:3B:7C:D9:03:69:9C:6F:5B:1D:1D:39:4D:5B:DF
Certificate issuer:       /CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C
Certificate serial:       79BD32530D85CB1422768D4BC560CE7A0AA84CDD
Authority key identifier: 04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa
Signing time:             Tue 13 Aug 2024 02:21:14 +0000
ROA not before:           Tue 13 Aug 2024 02:16:14 +0000
ROA not after:            Tue 12 Aug 2025 02:21:14 +0000
asID:                     31898
IP address blocks:        2a05:dfc1:8260::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bd:32:53:0d:85:cb:14:22:76:8d:4b:c5:60:ce:7a:0a:a8:4c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C
        Validity
            Not Before: Aug 13 02:16:14 2024 GMT
            Not After : Aug 12 02:21:14 2025 GMT
        Subject: CN=2E82C975E3C43B7CD903699C6F5B1D1D394D5BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:33:51:30:0c:cc:85:ee:a3:ad:a2:cf:c0:
                    91:04:96:2f:11:ab:7a:07:8a:7d:6a:3d:70:e5:d2:
                    e4:07:c1:91:35:20:1e:1f:49:8a:4b:35:00:cf:15:
                    fe:35:f0:90:9a:83:13:2d:52:ab:28:17:6c:5a:f6:
                    2a:95:0d:5b:1f:1a:9a:9f:e9:9a:f4:26:72:c1:3d:
                    75:e1:60:88:12:c8:ed:28:07:03:ce:13:17:e3:fa:
                    28:a4:67:8f:59:41:5c:4d:d9:6a:a2:d2:9e:e8:0f:
                    47:66:32:4e:b1:4d:98:63:ce:76:fe:b1:7b:65:0f:
                    ab:2c:05:fc:5e:ce:42:01:20:10:b9:b7:4c:aa:ca:
                    9e:c0:66:5c:40:79:36:e3:bb:be:dd:b5:b5:4b:34:
                    62:42:26:a3:9e:f1:31:9d:83:ce:ca:61:21:34:63:
                    bb:62:33:fb:1b:c2:e0:74:64:aa:4b:3f:29:a1:63:
                    45:83:ba:a6:b5:6c:29:22:f4:17:b8:02:a8:5e:a4:
                    e5:81:02:d4:1f:82:b5:49:b6:81:69:37:a7:cf:bf:
                    07:f6:88:1b:4a:d6:4e:a5:a6:95:af:b9:18:b8:07:
                    7b:39:7f:de:5e:e5:7c:cf:96:0b:f1:5c:da:1d:b8:
                    79:01:56:aa:ec:20:82:0d:24:1c:bf:b1:04:7e:fd:
                    68:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:82:C9:75:E3:C4:3B:7C:D9:03:69:9C:6F:5B:1D:1D:39:4D:5B:DF
            X509v3 Authority Key Identifier:
                keyid:04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8260::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:1e:94:19:af:4f:40:ba:64:08:d6:fb:62:6d:d2:38:91:fd:
         60:0f:56:98:1c:56:ef:db:9a:92:a7:65:be:ac:dc:7d:21:25:
         8f:3b:c0:05:d4:da:d4:ef:53:9e:b6:d0:2d:c6:d5:b1:a1:28:
         5d:1b:e9:24:5b:78:47:a0:d7:37:88:ea:66:36:a0:bd:0d:f5:
         b4:33:37:c5:62:04:43:ea:73:03:a9:c2:9a:2b:ad:3d:83:ae:
         c0:21:6f:7c:6a:79:4e:49:f5:1f:34:1b:0b:57:e9:0b:9d:f6:
         40:f4:24:6a:0f:32:c2:c7:49:4f:01:b2:44:76:08:b4:e8:e9:
         09:8f:ac:5c:6a:13:6a:e3:2f:63:9c:f4:ea:82:fc:0c:10:c3:
         d5:26:a8:59:e7:27:41:54:6c:93:79:e8:10:9f:b1:5f:39:0f:
         3a:28:c8:02:3f:d5:11:15:20:e5:35:87:db:da:f1:17:3a:8e:
         07:25:56:c1:10:c4:c7:9c:cd:54:be:42:7a:6a:49:48:6f:75:
         9c:a7:6a:83:b9:10:61:6a:37:38:83:7b:cf:fc:4a:93:22:04:
         1e:eb:58:a7:98:1a:cf:fb:4e:3e:ec:d0:ac:df:76:b4:74:d9:
         2f:cb:d2:95:ed:fa:a6:1c:1d:d6:b7:c7:d1:94:3b:91:a4:27:
         06:54:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----