Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          FRqvuduTNM2T/WKKqF4cnlsjpAQfEZTMqV+85Dq4eEg=
Subject key identifier:   ED:5C:53:66:46:2B:F1:4F:EB:A4:0D:F0:1B:3E:B2:5F:AC:03:7C:5A
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       2A22DF12642B7A4DF4A45A2A4FFD2AB7B60CBDC3
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Wed 10 Jul 2024 01:01:21 +0000
ROA not before:           Wed 10 Jul 2024 00:56:21 +0000
ROA not after:            Wed 09 Jul 2025 01:01:21 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba1d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:22:df:12:64:2b:7a:4d:f4:a4:5a:2a:4f:fd:2a:b7:b6:0c:bd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Jul 10 00:56:21 2024 GMT
            Not After : Jul  9 01:01:21 2025 GMT
        Subject: CN=ED5C5366462BF14FEBA40DF01B3EB25FAC037C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:b2:3f:9e:3d:1a:09:45:58:82:1f:a4:ee:
                    43:fb:84:82:59:5c:cb:55:ee:17:dc:59:23:66:bc:
                    8b:22:6c:28:51:80:a6:46:18:9f:81:bc:7c:fe:c5:
                    6a:70:06:c6:c2:9e:e5:01:a2:27:03:7c:f0:9a:ae:
                    f3:21:ba:1c:51:c2:95:fa:c4:6b:60:62:b5:2f:90:
                    f6:c4:24:47:1d:1f:db:df:9f:47:e0:7c:4e:c9:23:
                    4a:64:58:75:6a:20:bf:24:5b:8c:9e:c7:94:bc:a0:
                    ad:50:74:1c:96:71:4c:d8:2a:b4:3a:8a:f1:1e:14:
                    08:da:d0:0b:b5:40:a0:05:89:b7:d3:0e:22:54:e4:
                    44:ce:cc:47:53:c4:21:1f:c9:52:13:94:c1:0d:3d:
                    0f:a8:b4:46:77:6f:3b:72:6d:aa:25:cf:ea:91:19:
                    a1:f0:2e:25:b3:9e:2a:5b:25:8d:9f:2b:ba:de:bc:
                    12:18:ff:4f:19:5e:36:63:6d:25:52:bb:04:95:be:
                    53:65:71:a6:26:5f:f3:72:7b:be:94:36:85:68:3c:
                    da:b3:2a:f8:87:ee:1e:bb:58:97:36:f7:ae:86:67:
                    0e:8a:9f:1b:a6:cf:ff:f8:97:33:ce:02:ad:82:8e:
                    cf:28:f0:1b:53:26:6d:b1:d0:84:55:11:fb:96:5e:
                    23:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5C:53:66:46:2B:F1:4F:EB:A4:0D:F0:1B:3E:B2:5F:AC:03:7C:5A
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:83:56:f2:6a:3b:15:b5:3c:21:51:88:e1:13:4a:4f:cc:1e:
         fd:1b:6c:70:ab:7e:8c:39:c0:85:5b:03:9d:eb:8d:f3:fd:26:
         36:62:66:f7:5f:e5:9d:13:5e:3b:bb:b7:a5:2f:41:b0:b7:be:
         83:96:8b:31:c1:a9:dc:a9:be:5c:fc:ce:d1:93:64:f0:dc:a4:
         d1:17:5a:cb:a4:1a:27:79:33:5f:0b:25:5b:d2:be:75:0a:3f:
         f1:a7:ab:b9:88:eb:42:26:d4:62:d6:7a:a5:be:86:16:72:54:
         c3:f1:f1:1e:ed:ec:51:8f:57:c4:1c:31:da:e5:0d:a0:79:1b:
         6e:01:25:73:44:6b:7b:11:66:ef:9f:62:77:5d:85:29:b7:43:
         3e:db:79:09:90:ce:66:6e:2c:31:80:fb:81:10:19:b9:2e:9e:
         c6:29:29:89:fb:97:02:b5:9b:b5:9c:c5:08:58:88:75:13:97:
         61:bf:4c:a1:4f:9b:f2:3a:0f:ca:cb:7c:44:78:80:19:56:ea:
         74:4c:50:81:56:28:07:63:99:1f:a7:17:e1:c1:65:b3:dc:14:
         a9:f1:2c:58:7f:6a:e3:0f:16:5e:72:cb:a8:98:3d:af:69:3e:
         19:10:d3:35:6e:9d:80:56:f9:7a:d1:25:6e:54:fa:64:2a:50:
         1e:99:b3:42
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUKiLfEmQrek30pFoqT/0qt7YMvcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0
MTQ2MUU3RjAeFw0yNDA3MTAwMDU2MjFaFw0yNTA3MDkwMTAxMjFaMDMxMTAvBgNV
BAMTKEVENUM1MzY2NDYyQkYxNEZFQkE0MERGMDFCM0VCMjVGQUMwMzdDNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWLI/nj0aCUVYgh+k7kP7hIJZ
XMtV7hfcWSNmvIsibChRgKZGGJ+BvHz+xWpwBsbCnuUBoicDfPCarvMhuhxRwpX6
xGtgYrUvkPbEJEcdH9vfn0fgfE7JI0pkWHVqIL8kW4yex5S8oK1QdByWcUzYKrQ6
ivEeFAja0Au1QKAFibfTDiJU5ETOzEdTxCEfyVITlMENPQ+otEZ3bztybaolz+qR
GaHwLiWznipbJY2fK7revBIY/08ZXjZjbSVSuwSVvlNlcaYmX/Nye76UNoVoPNqz
KviH7h67WJc2966GZw6Knxumz//4lzPOAq2Cjs8o8BtTJm2x0IRVEfuWXiOvAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU7VxTZkYr8U/rpA3wGz6yX6wDfFowHwYDVR0j
BBgwFoAUdWVgxblgIizoGvR6i3WOF0FGHn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzEvNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0MTQ2MUU3Ri5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzc1NjU2MEM1Qjk2MDIy
MkNFODFBRjQ3QThCNzU4RTE3NDE0NjFFN0YuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBl
OC8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTMxNjQzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAuh0wDQYJKoZIhvcN
AQELBQADggEBAB+DVvJqOxW1PCFRiOETSk/MHv0bbHCrfow5wIVbA53rjfP9JjZi
Zvdf5Z0TXju7t6UvQbC3voOWizHBqdypvlz8ztGTZPDcpNEXWsukGid5M18LJVvS
vnUKP/Gnq7mI60Im1GLWeqW+hhZyVMPx8R7t7FGPV8QcMdrlDaB5G24BJXNEa3sR
Zu+fYnddhSm3Qz7beQmQzmZuLDGA+4EQGbkunsYpKYn7lwK1m7WcxQhYiHUTl2G/
TKFPm/I6D8rLfER4gBlW6nRMUIFWKAdjmR+nF+HBZbPcFKnxLFh/auMPFl5yy6iY
Pa9pPhkQ0zVunYBW+XrRJW5U+mQqUB6Zs0I=
-----END CERTIFICATE-----