Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa
File:                     326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (raw, json)
Hash identifier:          f1lp35ZwWoO0OBO637Fr+jy818bQD7in6dlP0ey5icw=
Subject key identifier:   BC:CA:59:3F:79:78:0E:55:27:0B:94:75:70:C6:CE:6D:F7:F6:68:BE
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       687FE3C5169F604F80D641F22E113234B7C299F8
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa
Signing time:             Wed 28 Aug 2024 06:26:54 +0000
ROA not before:           Wed 28 Aug 2024 06:21:54 +0000
ROA not after:            Wed 27 Aug 2025 06:26:54 +0000
asID:                     214765
IP address blocks:        2a06:9f81:3040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7f:e3:c5:16:9f:60:4f:80:d6:41:f2:2e:11:32:34:b7:c2:99:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Aug 28 06:21:54 2024 GMT
            Not After : Aug 27 06:26:54 2025 GMT
        Subject: CN=BCCA593F79780E55270B947570C6CE6DF7F668BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:fb:07:51:b6:23:1e:99:9e:d2:c3:39:b9:
                    48:a2:3a:a3:06:d2:f0:c2:9d:12:54:a5:60:e3:7d:
                    0d:44:b4:3c:52:bd:81:c4:b8:b0:e4:ad:ef:19:02:
                    bb:83:26:f9:99:73:fc:94:e5:6f:ef:ee:14:1f:2e:
                    e5:00:59:eb:65:82:c0:90:03:5c:12:8a:e0:34:9b:
                    d0:d2:c7:37:97:31:69:52:0b:77:7f:9f:55:e7:7d:
                    63:58:b8:4d:a1:51:80:5e:34:b4:36:6e:ee:2a:9b:
                    7e:d1:30:99:c9:c9:21:42:7d:42:96:87:ad:9b:e7:
                    aa:fc:4f:15:e4:ef:1c:38:dd:12:8f:85:aa:19:ce:
                    4e:a0:c8:e6:b2:f9:29:cb:5e:cc:e7:64:d4:a9:56:
                    69:e1:a2:14:86:bd:55:58:70:bb:46:4a:22:34:c8:
                    bc:6a:6d:a9:0a:d4:da:4e:a9:8a:ad:91:ef:c7:7f:
                    8f:06:eb:70:6c:de:94:70:55:4b:c6:56:94:99:44:
                    ac:c9:ae:b8:7e:e9:b7:45:81:88:7f:e7:87:e2:3b:
                    70:8f:0f:91:64:04:c6:fd:ec:20:9a:99:dd:b6:04:
                    b4:4d:e3:fd:a9:b1:b7:94:90:57:2d:33:04:b4:06:
                    17:fb:ec:5e:d8:25:0a:c3:a0:48:3a:0f:ef:2a:34:
                    55:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CA:59:3F:79:78:0E:55:27:0B:94:75:70:C6:CE:6D:F7:F6:68:BE
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3040::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:2f:1c:80:56:10:9f:48:f0:1a:1b:5b:ba:cb:3e:fa:42:c7:
         f5:1b:7c:58:aa:f6:dd:75:ec:26:21:84:77:0c:9d:e1:4a:7d:
         cc:5e:0b:29:4b:5d:ec:af:7d:b0:3e:73:3b:d4:26:b7:4b:2d:
         50:0e:07:6c:b8:fc:52:d1:1d:e5:4c:04:be:65:5c:1f:4e:5f:
         da:78:33:5d:75:af:c3:5a:6c:bc:5e:56:5c:d0:8d:4d:81:05:
         d8:b6:fc:55:0f:5a:5e:1f:59:b0:ac:c4:23:0f:ca:52:63:73:
         ea:ce:8d:59:f1:22:42:78:19:24:3e:84:b5:39:03:87:5c:fa:
         1e:5a:f9:ed:4f:0a:0d:f7:f3:c0:b4:8d:c0:62:ef:98:b5:42:
         12:50:fc:47:bd:41:e8:d6:d1:f6:6e:df:b8:f9:00:a1:5d:60:
         12:41:78:58:80:ee:e7:d9:98:74:de:37:5a:fa:7e:5b:6d:bf:
         5c:b0:d8:06:ad:7d:3f:7e:d5:71:c7:fd:70:1c:53:9d:0b:0e:
         db:c0:8b:b4:28:e7:c3:15:7d:6c:70:fc:e5:cf:d1:3d:86:7c:
         7a:92:50:6e:60:00:81:34:78:20:30:4a:41:ca:fc:3d:cc:20:
         41:f2:ed:dc:15:25:88:2b:fe:c9:c2:29:22:89:18:9d:f8:54:
         0d:72:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----