Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/yuki/0/326130363a313238373a353639303a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a313238373a353639303a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          isnOIci4y/V0BkD+IV+zVpr1c5Q5Xi5VIlnZKnCcYDo=
Subject key identifier:   08:D6:B0:1B:3B:92:C7:1F:EE:74:4B:5D:24:34:73:94:1D:05:CF:24
Certificate issuer:       /CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
Certificate serial:       0BC6564D786A29498794141EAC03233E4E4CEEB3
Authority key identifier: C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
Authority info access:    rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer
Subject info access:      rsync://rpki.co/repo/yuki/0/326130363a313238373a353639303a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Wed 13 Sep 2023 06:47:49 +0000
ROA not before:           Wed 13 Sep 2023 06:42:49 +0000
ROA not after:            Wed 11 Sep 2024 06:47:49 +0000
asID:                     151349
IP address blocks:        2a06:1287:5690::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c6:56:4d:78:6a:29:49:87:94:14:1e:ac:03:23:3e:4e:4c:ee:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
        Validity
            Not Before: Sep 13 06:42:49 2023 GMT
            Not After : Sep 11 06:47:49 2024 GMT
        Subject: CN=08D6B01B3B92C71FEE744B5D243473941D05CF24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:35:6f:c4:d8:68:78:06:8e:5a:d4:89:5a:
                    13:c8:46:c3:b0:d5:c3:c0:d8:5c:6b:2b:bd:a2:ce:
                    f8:70:16:17:b2:7a:ce:1e:c1:d2:1b:9b:63:10:89:
                    48:ea:1a:cc:ec:27:a6:61:02:43:97:03:4c:d5:60:
                    26:68:c5:94:b7:6a:ab:7a:d5:aa:a7:60:f5:7d:d4:
                    6c:f1:2e:33:34:c2:a1:6d:ed:93:ec:46:35:e1:dd:
                    38:84:ea:47:cd:64:9a:2d:16:84:63:64:01:17:2b:
                    1f:cc:c1:4f:a0:c2:38:6e:78:d3:22:8e:2c:ab:57:
                    44:40:7f:7d:40:73:f1:33:24:73:b7:56:c7:2d:e7:
                    94:49:d8:39:65:d4:f9:b5:c0:99:a1:22:23:10:2b:
                    73:10:0d:e5:a1:19:6d:39:01:22:a6:34:5a:93:ba:
                    04:ff:d9:b4:06:4c:99:43:d7:73:79:2e:8d:be:e4:
                    c8:5a:dd:d8:34:24:88:4c:d9:03:48:2d:f0:f2:27:
                    b6:5c:ec:ec:01:31:fa:68:da:51:b6:9e:a6:31:23:
                    c1:23:9e:f0:de:cb:c4:48:db:ef:d4:cb:d0:73:85:
                    7e:5a:de:f0:1c:67:ea:49:c9:50:b8:b0:0a:ff:71:
                    18:fe:12:cd:d4:be:c4:05:42:cd:b5:27:cc:c5:e0:
                    10:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D6:B0:1B:3B:92:C7:1F:EE:74:4B:5D:24:34:73:94:1D:05:CF:24
            X509v3 Authority Key Identifier:
                keyid:C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/yuki/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/yuki/0/326130363a313238373a353639303a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5690::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:f4:44:13:2e:f6:91:de:1c:85:61:d0:f2:ec:f3:4d:7f:f5:
         05:24:83:72:21:b6:99:7f:46:92:31:9a:47:b1:6b:28:86:17:
         9a:bd:15:38:50:60:b5:4a:6c:9b:8b:3f:c5:0a:e8:aa:8d:0b:
         09:1c:f9:44:18:c1:de:8c:aa:93:b9:f9:6b:fa:e7:5f:8f:c8:
         7d:bd:6a:fa:56:bd:3e:bd:34:86:77:20:a5:16:af:5e:6e:f0:
         92:f0:0f:2f:7b:0a:4d:22:29:fb:89:86:6a:9b:9a:87:57:b0:
         7a:70:96:59:06:fc:ec:92:45:cf:c0:21:bc:d9:81:51:2c:52:
         f9:67:86:4e:44:22:f4:30:b5:d8:36:c6:91:71:14:56:38:84:
         30:73:9e:49:9f:43:52:9c:ee:ec:32:69:a9:cb:94:ab:80:ab:
         10:e0:fb:d1:1f:a4:26:4f:ec:54:dc:60:67:9c:a0:a4:e7:08:
         31:b3:cd:dd:2a:92:01:36:28:45:84:f1:c4:d5:61:3b:8c:3b:
         97:c7:08:3f:6d:42:aa:fd:9d:2c:39:4a:a2:d7:78:71:cf:41:
         b3:bb:15:8e:62:74:a5:4d:08:dd:9c:cd:07:0d:4a:4d:58:4c:
         3b:c1:5b:12:4b:e8:63:22:74:f6:c4:4a:15:a8:09:ce:1a:f6:
         5b:a4:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----