Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/yuki/0/326130363a313238373a353630323a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a313238373a353630323a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          oeCM5p8f8StYlVf3HB9ejAh2MjUtRPZbi2ptsILQ0Nk=
Subject key identifier:   B2:C2:2C:65:25:57:14:E5:EC:F2:3C:9C:C3:96:A0:E4:4E:8D:FF:92
Certificate issuer:       /CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
Certificate serial:       2C11A324A4FC51622FFA2FDA540802985A50A7
Authority key identifier: C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
Authority info access:    rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer
Subject info access:      rsync://rpki.co/repo/yuki/0/326130363a313238373a353630323a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Wed 13 Sep 2023 06:46:13 +0000
ROA not before:           Wed 13 Sep 2023 06:41:13 +0000
ROA not after:            Wed 11 Sep 2024 06:46:13 +0000
asID:                     151349
IP address blocks:        2a06:1287:5602::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:11:a3:24:a4:fc:51:62:2f:fa:2f:da:54:08:02:98:5a:50:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
        Validity
            Not Before: Sep 13 06:41:13 2023 GMT
            Not After : Sep 11 06:46:13 2024 GMT
        Subject: CN=B2C22C65255714E5ECF23C9CC396A0E44E8DFF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:ed:3c:d6:e4:18:bc:2e:c7:0a:d0:7b:e0:
                    ea:04:ba:e1:fc:c3:d9:74:3f:b7:aa:9d:cf:d5:27:
                    9f:95:8d:4f:02:0f:0d:51:df:e9:e1:c9:5b:87:0c:
                    8a:7e:b4:15:44:24:5d:32:5f:84:2e:e3:0c:27:6e:
                    71:9e:d5:df:82:46:6c:7c:ce:57:e8:d7:c6:fb:38:
                    c0:8f:ab:23:6e:4d:f7:33:b4:f1:66:f3:c9:8e:7f:
                    61:2c:03:10:f8:fc:d2:71:33:8d:fa:76:e0:56:d8:
                    23:5d:92:09:5e:83:11:da:35:81:71:92:9d:e9:84:
                    49:02:6c:f0:3e:7a:d7:46:8b:d8:e5:a4:0e:98:8a:
                    2a:22:37:67:f3:91:64:ac:5d:61:f6:f2:f3:a1:7e:
                    94:fe:cf:aa:41:1a:f1:76:32:9b:1b:56:73:de:de:
                    36:e0:64:08:a4:6a:04:77:1a:4c:0d:f9:c7:0d:0a:
                    47:03:c7:37:c2:9b:aa:70:1a:46:7b:c5:4f:14:f1:
                    f2:49:45:cb:a6:38:83:7a:9d:ba:7e:5c:67:f2:aa:
                    f8:14:e3:d0:d2:19:f2:be:73:09:79:ac:fc:12:72:
                    e6:02:de:da:97:9e:2a:cb:19:fe:2f:6f:cc:dd:34:
                    34:52:f9:79:77:a7:2b:79:4e:c3:29:30:91:f2:31:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C2:2C:65:25:57:14:E5:EC:F2:3C:9C:C3:96:A0:E4:4E:8D:FF:92
            X509v3 Authority Key Identifier:
                keyid:C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/yuki/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/yuki/0/326130363a313238373a353630323a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5602::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:00:e9:4c:df:ec:d0:ed:c6:3a:19:f1:3f:2e:2e:a9:4e:29:
         17:45:c5:43:8a:82:cd:8f:3b:bc:8f:af:62:cd:f4:0e:a8:8f:
         11:c5:6c:50:37:51:1c:48:6f:04:72:43:dd:b3:80:99:92:37:
         4b:b7:51:e9:de:39:25:0b:56:7a:f9:a3:f7:db:92:db:2b:94:
         5f:98:5c:cd:9e:91:5e:91:42:c2:1a:df:c9:5d:88:d0:7c:5b:
         ce:30:0c:29:e2:05:18:a5:02:b3:5b:9a:69:ae:35:84:0f:bc:
         99:6d:6e:6f:13:42:b6:1d:77:00:77:8e:2c:76:15:9f:4c:23:
         b1:d5:9c:11:a6:6d:57:fc:62:bf:fe:28:58:dc:2b:a0:50:2c:
         89:ee:9d:43:c6:56:88:ef:d2:8a:d0:5d:2d:f4:b7:e5:8f:31:
         04:aa:f8:b3:59:d4:74:b2:68:be:05:ca:09:16:f5:90:4a:94:
         35:49:ad:ce:91:47:65:67:56:36:70:b7:72:93:40:2d:ec:6c:
         7a:0e:bd:28:98:d3:55:68:3d:fe:12:3b:90:9b:ca:0d:46:ec:
         5b:57:80:55:bd:fa:5f:94:bd:79:04:6a:95:dc:21:f5:16:7f:
         31:02:9e:43:23:3c:16:9a:fb:82:06:49:a2:ab:4c:71:28:d8:
         01:cc:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----