Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          mk1xCsiHTx7F0xULuXNbDaGog2bC4Mb2Yc5lNkM6r0Q=
Subject key identifier:   07:A5:80:B5:77:C7:6B:07:B2:34:FA:74:42:18:AB:D3:44:A3:AC:9C
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       69129373E59A84106B94D1B36C07D6726FD4B37A
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Sun 30 Jun 2024 13:05:37 +0000
ROA not before:           Sun 30 Jun 2024 13:00:37 +0000
ROA not after:            Sun 29 Jun 2025 13:05:37 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3030::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:12:93:73:e5:9a:84:10:6b:94:d1:b3:6c:07:d6:72:6f:d4:b3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun 30 13:00:37 2024 GMT
            Not After : Jun 29 13:05:37 2025 GMT
        Subject: CN=07A580B577C76B07B234FA744218ABD344A3AC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:3b:b6:ab:e3:7e:d6:19:c6:51:8d:73:57:
                    6d:8e:cf:b7:0b:a3:aa:06:38:f6:f0:c7:ff:0a:20:
                    d1:b3:ab:7f:c9:c9:7c:af:c2:ad:7e:71:b4:33:11:
                    41:37:25:8e:b3:c7:14:84:58:53:b3:c7:17:cc:fa:
                    d8:18:06:3b:c3:90:75:ac:06:33:0a:67:a0:9c:cf:
                    5d:c1:61:46:56:5c:c8:38:bf:38:84:a5:17:86:8c:
                    dc:fa:d8:98:db:e7:11:52:e7:f7:85:68:6f:21:03:
                    1d:26:c8:2f:f9:d9:9d:c8:d7:1a:83:56:d3:2d:c8:
                    56:14:d5:d8:50:ab:42:7d:bc:23:11:dd:31:3a:da:
                    aa:19:6d:39:21:90:ea:cc:97:5e:68:dc:a9:0f:57:
                    f2:d3:e0:3f:c8:5f:41:31:42:8a:e1:c1:68:76:32:
                    16:4f:cd:ad:66:ee:2f:51:d8:27:83:98:9c:09:de:
                    75:55:91:97:f8:71:50:77:ee:e2:ba:aa:80:60:74:
                    31:d4:f7:2f:96:08:0e:24:e3:1b:e9:4f:71:fd:cd:
                    43:1b:70:f3:ed:ec:1b:f8:ee:25:73:8e:71:5f:ba:
                    66:fb:87:9f:d8:91:33:e9:6e:4e:0a:52:7d:0c:3e:
                    76:95:b2:8c:c3:c3:7c:f8:3a:ca:2c:76:b0:3f:be:
                    6d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:80:B5:77:C7:6B:07:B2:34:FA:74:42:18:AB:D3:44:A3:AC:9C
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3030::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:2e:22:4b:e3:a0:b8:a8:84:1f:8b:95:9a:67:97:3d:5c:e9:
         69:77:dd:35:c2:21:16:61:c1:98:ea:b5:a5:ff:51:fb:77:a4:
         5a:56:c7:68:7c:5a:1a:bc:ae:69:cd:11:2b:71:64:8e:28:95:
         2d:96:df:46:8e:5a:8b:4c:b7:f9:15:8e:3d:65:47:d6:5c:38:
         7a:03:e7:c7:23:cc:97:dd:70:6a:b7:c0:ce:6d:52:8f:2f:28:
         e7:4e:b0:ca:84:77:28:1c:30:bb:b1:97:15:0b:ad:f1:00:b9:
         01:ad:16:50:eb:ea:58:07:44:d3:0e:ca:5b:de:b1:a6:f3:04:
         3a:91:35:0b:e9:f2:d7:d8:e4:bb:bc:db:44:59:17:c1:06:57:
         ef:73:37:1f:c7:39:00:7c:93:6b:48:13:b7:76:42:96:fa:40:
         13:ee:da:6b:d4:dd:1b:2c:4a:38:e0:d2:b7:52:cf:0b:d6:f2:
         ab:2b:f9:70:b2:b8:6e:b3:a1:bb:c6:d2:b5:b3:d4:05:8b:3e:
         e8:6b:83:08:f0:58:85:cd:87:e8:3b:2a:5e:84:a2:99:59:06:
         a3:b3:29:65:fd:29:a4:50:67:30:57:a3:d6:fc:b8:77:c3:54:
         e5:8b:aa:2d:46:61:ff:48:81:a3:4a:a2:c1:25:cf:75:2a:9c:
         71:ae:18:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----