Route Origin Authorization

$ rpki-client -vvf parent.rov.koenvanhove.nl/repo/KoenvanHove/1/3230332e3131392e32312e302f32342d3234203d3e2031313333.roa
File:                     3230332e3131392e32312e302f32342d3234203d3e2031313333.roa (raw, json)
Hash identifier:          bKdbiRkj/S+76SJjvMymqMP0A/sjDZgy2GqBa8a1Css=
Subject key identifier:   03:B3:DC:75:6B:70:FA:7F:F2:06:0D:B9:CE:6F:1C:EB:F7:F2:30:14
Certificate issuer:       /CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
Certificate serial:       3427E10A591C27168F86524899F194EE671BD066
Authority key identifier: C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer
Subject info access:      rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/3230332e3131392e32312e302f32342d3234203d3e2031313333.roa
Signing time:             Thu 21 Jul 2022 11:31:19 +0000
ROA not before:           Thu 21 Jul 2022 11:26:19 +0000
ROA not after:            Thu 20 Jul 2023 11:31:19 +0000
asID:                     1133
IP address blocks:        203.119.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:27:e1:0a:59:1c:27:16:8f:86:52:48:99:f1:94:ee:67:1b:d0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
        Validity
            Not Before: Jul 21 11:26:19 2022 GMT
            Not After : Jul 20 11:31:19 2023 GMT
        Subject: CN=03B3DC756B70FA7FF2060DB9CE6F1CEBF7F23014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:b3:94:a0:c7:b5:e1:21:3b:ed:1f:2a:8a:
                    fb:6d:3e:95:f5:90:53:b4:70:bc:46:c4:86:18:7f:
                    22:31:61:54:bd:51:c9:7a:ce:68:aa:c9:de:64:47:
                    66:16:b3:72:b8:83:3d:ae:5b:3f:eb:6c:4a:8d:ee:
                    98:11:d1:26:0a:18:d3:ca:0b:34:74:3d:4d:bd:93:
                    ac:ce:62:67:25:0a:4b:83:32:b5:86:68:b4:7b:da:
                    8b:f7:f0:5c:87:83:6b:0d:92:c0:25:a7:b8:4c:d8:
                    36:42:38:a6:6d:09:89:87:a8:20:5b:5f:1d:0c:0f:
                    af:db:24:7c:a3:aa:8c:d9:fe:c9:5f:ce:68:82:36:
                    31:94:4b:f0:ed:c4:55:6e:3d:73:70:c2:a7:87:ee:
                    5f:7d:f2:d6:e7:f5:1d:27:63:8c:9a:1e:a5:61:fd:
                    cc:75:69:93:ed:40:e6:50:c5:3d:74:c7:3b:2e:56:
                    e3:d1:a3:4a:7f:db:a0:93:ab:e4:18:14:00:2d:e8:
                    6e:a2:ad:7f:c0:5e:b3:a4:56:86:69:91:a8:fb:7a:
                    0f:c7:12:6a:c7:97:02:c8:29:31:09:7e:45:9f:08:
                    a9:69:4c:c2:3e:33:36:14:c9:f4:a4:58:06:44:eb:
                    ae:e8:09:00:73:1f:68:9c:82:c9:20:90:ae:87:68:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B3:DC:75:6B:70:FA:7F:F2:06:0D:B9:CE:6F:1C:EB:F7:F2:30:14
            X509v3 Authority Key Identifier:
                keyid:C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/C1F7424F77FBF669FB750C6DC7B649C5969DCD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/3230332e3131392e32312e302f32342d3234203d3e2031313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:67:72:20:b9:2e:35:8c:fe:90:6b:8b:a9:9c:0b:a3:ba:93:
         e9:38:00:7d:75:94:9c:76:80:a6:93:01:23:3c:c3:d1:80:4a:
         76:a1:92:31:76:0e:79:81:48:0f:b8:39:24:6c:55:be:26:0a:
         26:1d:c9:9e:bb:c5:52:60:da:57:01:e8:59:1f:ea:63:25:29:
         4a:25:42:05:31:f7:1a:3f:fd:ae:ac:cf:0f:0b:0f:4e:ee:6f:
         9b:97:a8:b1:9d:0e:48:d9:3f:5d:55:9a:47:0b:99:de:ca:16:
         09:6e:02:a7:6d:f0:cb:b6:b5:1f:09:ba:ca:f8:87:23:1d:70:
         6d:48:f6:5b:58:56:f4:70:1a:8a:9d:10:35:78:38:e0:8c:ac:
         34:47:b7:d3:52:e9:3a:53:7d:84:3b:c1:5a:1d:d7:f0:34:16:
         8f:93:ba:8e:a2:b8:02:fe:51:ad:19:dd:f5:1d:1a:fe:50:ef:
         f5:0e:f7:bc:1b:94:b2:63:a9:75:71:94:d8:5e:c6:37:e3:ba:
         92:a6:47:ca:83:4d:ed:1c:92:1e:a5:a9:70:22:6b:47:e2:95:
         23:fa:af:ce:c3:1c:8d:14:d0:2a:9b:90:50:9f:1c:68:6a:c8:
         c3:29:b3:f4:95:37:16:e6:14:cd:bf:6c:b6:9b:3a:ed:f6:3c:
         13:21:4b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----