Route Origin Authorization

$ rpki-client -vvf parent.rov.koenvanhove.nl/repo/KoenvanHove/1/323030313a6464623a3a2f34382d3438203d3e2030.roa
File:                     323030313a6464623a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          XP+VIglJxEvYj/com9YXdwjOf6qm6QwaWeJesxrSVf0=
Subject key identifier:   0D:F9:E2:9C:33:C7:8C:BB:E3:37:B8:01:F8:99:B0:08:70:E1:64:8C
Certificate issuer:       /CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
Certificate serial:       3E39309CF6437E43ADD76EC86765C79A3DCC9DB0
Authority key identifier: C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer
Subject info access:      rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/323030313a6464623a3a2f34382d3438203d3e2030.roa
Signing time:             Fri 15 Jul 2022 15:04:11 +0000
ROA not before:           Fri 15 Jul 2022 14:59:11 +0000
ROA not after:            Fri 14 Jul 2023 15:04:11 +0000
asID:                     0
IP address blocks:        2001:ddb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:39:30:9c:f6:43:7e:43:ad:d7:6e:c8:67:65:c7:9a:3d:cc:9d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
        Validity
            Not Before: Jul 15 14:59:11 2022 GMT
            Not After : Jul 14 15:04:11 2023 GMT
        Subject: CN=0DF9E29C33C78CBBE337B801F899B00870E1648C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:da:f3:43:f0:99:93:91:30:9a:01:b0:9d:
                    c1:a6:22:e9:95:e7:70:65:b1:2a:39:e3:d3:6e:c2:
                    76:1d:10:93:06:b5:6a:73:88:9b:50:4b:5e:5f:e1:
                    b7:6e:a5:2a:ad:8f:c4:7a:0d:a5:42:28:92:b3:99:
                    f3:7a:54:64:82:b5:69:d7:9a:83:b1:0b:dd:fb:df:
                    c9:fd:b6:bf:18:2e:df:9e:39:36:1e:8b:0e:91:13:
                    72:6a:00:a9:21:42:8f:38:34:20:f4:60:86:ad:97:
                    96:47:1f:cf:44:53:b2:bb:7b:20:97:fb:35:3c:48:
                    4c:79:35:2c:88:a8:0c:d0:2a:f0:1d:40:ef:f8:f8:
                    f2:68:55:63:09:6a:72:4f:3c:36:15:44:2b:7c:50:
                    ee:d0:0f:cb:9f:bf:44:ab:c8:f2:ea:79:f1:6c:7f:
                    75:e4:6c:31:36:95:a4:18:69:78:ff:57:50:57:73:
                    62:06:9f:c3:44:63:57:2d:4f:b2:e4:8d:b7:e5:31:
                    8b:28:f4:ed:bc:49:c3:68:3f:3c:c6:ae:8c:b3:8d:
                    f0:c9:94:09:6f:13:e3:3b:d1:54:cc:b0:95:31:77:
                    ae:b5:d2:f0:53:b2:64:6b:11:13:03:5f:74:8c:39:
                    c1:81:8c:ce:40:c3:d8:69:f0:c8:41:ee:d2:d9:b7:
                    76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F9:E2:9C:33:C7:8C:BB:E3:37:B8:01:F8:99:B0:08:70:E1:64:8C
            X509v3 Authority Key Identifier:
                keyid:C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/C1F7424F77FBF669FB750C6DC7B649C5969DCD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/323030313a6464623a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:ddb::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:6b:da:82:5e:eb:56:e1:a8:b5:29:e3:63:dd:cd:5e:60:81:
         e9:5d:64:35:2d:b7:de:c7:8a:0c:0f:8b:63:c8:50:76:53:83:
         cf:0b:21:bd:3b:55:06:e4:b6:88:02:40:38:17:e6:81:9e:1e:
         93:2c:88:13:59:f4:0b:08:a9:ab:c9:5c:5b:87:4b:2f:c6:d2:
         96:82:63:98:f4:ce:fe:5a:f6:f0:4f:73:7d:36:27:e6:e8:a7:
         70:b4:5c:40:28:a8:ed:5d:f1:ad:8e:df:bf:a3:e7:78:ac:47:
         5f:60:c2:54:5f:17:4b:cd:c5:87:b0:6c:17:e3:f8:9f:9d:b1:
         e6:7e:7a:73:90:49:87:46:56:0c:15:a6:84:06:34:d5:15:76:
         e9:85:68:11:a9:dc:50:a5:08:32:87:69:6a:7a:24:8c:fd:3a:
         19:fd:5c:d9:13:0c:6f:8d:4b:6f:78:f4:35:08:ae:2d:1e:b9:
         f1:92:f1:e3:2c:42:d8:89:1a:f5:d4:28:e9:ea:0e:14:1a:ce:
         09:92:df:5b:70:b8:31:de:b0:35:52:60:a2:63:84:51:9e:6a:
         b9:9d:ac:65:7e:68:3d:ee:19:e6:b4:6a:7e:26:6b:c8:86:a0:
         53:b6:b5:9c:bd:c5:bb:2d:3e:0f:c8:a7:11:bf:be:ab:08:c2:
         d1:be:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----