Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa
File:                     326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier:          o5mQD1pv1eByQaDGuvdj1hN7UM3U0qvlJNbW9+ckK1k=
Subject key identifier:   65:A2:6B:47:51:97:61:97:35:97:E5:6D:05:CD:7D:DA:43:10:DA:4D
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       3ED79961923A48FAB93E8841D130BAB78A865300
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa
Signing time:             Sun 30 Jun 2024 13:05:43 +0000
ROA not before:           Sun 30 Jun 2024 13:00:43 +0000
ROA not after:            Sun 29 Jun 2025 13:05:43 +0000
asID:                     215087
IP address blocks:        2a06:9f81:30ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d7:99:61:92:3a:48:fa:b9:3e:88:41:d1:30:ba:b7:8a:86:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun 30 13:00:43 2024 GMT
            Not After : Jun 29 13:05:43 2025 GMT
        Subject: CN=65A26B47519761973597E56D05CD7DDA4310DA4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:4c:0e:f4:ec:30:88:f1:9a:bf:a3:a0:63:
                    78:fb:50:e8:cc:b4:6d:8e:97:df:bf:30:83:f4:22:
                    de:3f:ac:0b:4c:88:59:90:33:b0:6b:d9:9d:42:a3:
                    48:8a:48:55:48:76:fc:18:17:18:15:a6:b3:db:64:
                    23:67:5a:3d:fe:1f:81:be:7f:09:2a:f3:94:f6:e5:
                    1b:09:08:a0:98:05:c1:69:6e:19:1f:b4:25:3f:12:
                    39:a2:16:e0:c6:2c:26:06:14:0f:b0:2b:39:21:aa:
                    1a:a2:4c:be:fa:5a:54:16:85:76:03:13:ea:a5:cf:
                    76:57:5c:b5:6f:ec:c8:a6:cd:59:b4:b3:86:7a:07:
                    f0:6f:01:2e:d6:2c:e2:2d:d6:5b:f6:56:db:fd:6e:
                    9b:c6:08:82:1c:a6:ff:d4:39:c9:b5:24:02:f5:92:
                    98:cf:19:23:a1:0a:44:2e:c7:bb:37:34:54:1e:ea:
                    a5:69:93:2a:a4:66:c5:21:b0:87:e4:09:d3:5d:be:
                    29:f8:0e:9a:cb:ab:74:86:ae:8a:a0:dd:5b:fd:3b:
                    d4:e9:83:de:14:58:94:6f:1c:d5:1d:70:ff:b2:f2:
                    46:f3:38:71:0c:9d:ec:f9:e8:e5:68:ee:30:74:c7:
                    2a:79:c8:23:3a:36:35:fe:18:32:b7:0b:59:81:98:
                    63:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A2:6B:47:51:97:61:97:35:97:E5:6D:05:CD:7D:DA:43:10:DA:4D
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:34:90:3e:d2:f6:5c:40:6a:e6:cf:02:1d:77:b3:86:0b:1e:
         28:9a:f9:5a:f6:4c:f5:08:e3:06:e4:10:a8:da:cf:7a:7f:a6:
         cf:ab:68:41:a0:82:e9:4a:86:08:65:ea:81:37:09:2e:65:16:
         b8:1f:8e:a3:48:da:dc:3d:b1:cb:ca:7e:44:88:06:a0:22:de:
         76:d7:af:31:dd:b1:59:cc:4a:52:fb:1f:5d:b7:f4:7d:54:63:
         3c:5c:87:6a:01:41:5d:1d:1b:13:46:e0:b0:c3:b4:ff:de:7e:
         af:90:0e:ab:0d:78:a3:0f:96:88:ab:af:11:d5:6f:e6:77:8b:
         4d:eb:c2:8d:47:df:d1:62:5b:0f:0e:3f:f6:33:61:b8:8b:30:
         8a:7d:11:78:2e:e4:f2:4d:3b:ef:d9:30:4f:df:06:73:65:28:
         27:3e:1f:32:44:85:1c:1c:2f:5b:d6:e2:de:74:4a:30:79:f2:
         91:8a:8c:e3:db:1f:83:c0:92:43:7b:b3:32:dc:9e:b1:e0:01:
         3a:a2:0a:ec:67:d5:b2:67:1a:66:b6:bf:ad:66:cc:4e:26:cb:
         45:3d:97:a9:2f:5e:8b:28:3c:8e:39:0d:d3:6e:2a:a8:e1:cb:
         87:15:0c:e4:2a:03:ed:c2:93:74:6b:83:5f:e5:78:c3:1b:c5:
         4d:35:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----