Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Apricot/1/326131333a646638373a623430303a3a2f33382d3338203d3e203630323233.roa
File:                     326131333a646638373a623430303a3a2f33382d3338203d3e203630323233.roa (raw, json)
Hash identifier:          zgjgDVgrrXoGLF79cBd/pc5iIf9LFMpYIttApU+OJcc=
Subject key identifier:   44:B2:0F:12:5E:21:AF:CB:3D:22:FF:32:0F:E0:F1:B8:24:BC:8B:8A
Certificate issuer:       /CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Certificate serial:       6AE178E9D511780E82990CFF60C23F6FE1EE1943
Authority key identifier: 2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject info access:      rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623430303a3a2f33382d3338203d3e203630323233.roa
Signing time:             Sun 21 Jan 2024 21:12:40 +0000
ROA not before:           Sun 21 Jan 2024 21:07:40 +0000
ROA not after:            Sun 19 Jan 2025 21:12:40 +0000
asID:                     60223
IP address blocks:        2a13:df87:b400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e1:78:e9:d5:11:78:0e:82:99:0c:ff:60:c2:3f:6f:e1:ee:19:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
        Validity
            Not Before: Jan 21 21:07:40 2024 GMT
            Not After : Jan 19 21:12:40 2025 GMT
        Subject: CN=44B20F125E21AFCB3D22FF320FE0F1B824BC8B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:09:fd:67:84:44:37:f2:8f:fa:02:7c:0a:
                    a9:b7:cc:b8:69:af:42:04:f8:c4:c0:69:a9:79:2d:
                    7b:d3:03:f9:c4:67:62:8d:23:8d:d8:5b:24:37:49:
                    76:38:6a:c3:b8:cd:5a:7f:92:55:d5:0b:ba:24:11:
                    02:cc:fe:26:4f:cb:c3:34:1b:dd:20:85:7f:95:c5:
                    36:3d:64:cb:79:6a:e4:3d:90:ab:fc:57:12:c2:3d:
                    c8:19:44:1f:47:f9:39:91:47:64:67:05:ee:e4:b2:
                    40:44:c4:1f:42:50:58:bb:84:12:05:5e:89:2d:3d:
                    a3:9f:41:9d:83:44:21:5c:49:fd:42:01:d4:71:4c:
                    4f:44:54:01:2f:28:41:1c:f8:e0:dc:31:78:3e:00:
                    dc:c1:85:57:61:be:e1:1b:d9:0d:73:d8:a3:3b:2d:
                    9e:e3:74:a7:10:1d:a4:8c:71:98:e8:b5:1a:5a:ac:
                    4b:9c:da:5d:00:94:70:25:69:77:fa:c6:f7:e0:ef:
                    53:06:d1:51:af:f3:ff:4f:32:0d:17:2a:4b:1b:ca:
                    7f:5e:76:7a:a3:81:7d:09:b9:d1:39:39:6b:b8:e9:
                    8b:ab:67:16:25:78:32:df:d7:b0:5e:00:13:25:48:
                    11:c3:4b:cf:16:b4:05:d9:6d:c4:fc:cc:0d:d5:3d:
                    1d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B2:0F:12:5E:21:AF:CB:3D:22:FF:32:0F:E0:F1:B8:24:BC:8B:8A
            X509v3 Authority Key Identifier:
                keyid:2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623430303a3a2f33382d3338203d3e203630323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:b400::/38

    Signature Algorithm: sha256WithRSAEncryption
         82:ea:d0:de:00:5b:11:68:cb:21:2a:62:6e:49:62:fb:06:8f:
         2e:b8:18:e6:6b:d3:50:cf:13:00:ef:f0:1b:58:a3:e2:da:7e:
         57:10:fd:ec:36:eb:60:7b:9e:ee:74:d9:eb:11:34:dc:08:f4:
         71:56:e9:95:2e:5e:a6:1d:5b:d0:88:0e:c0:93:df:a1:f4:c8:
         70:a7:a8:e3:57:d9:f6:5a:d4:b2:9f:aa:c0:36:b2:32:a4:5a:
         ab:06:52:a5:cd:10:a3:29:13:87:06:ed:79:6e:07:17:28:88:
         14:a1:50:ed:fc:e4:05:48:4e:e1:54:16:d4:ad:66:27:be:c1:
         8d:f0:68:8a:c5:7e:fd:93:a0:a7:52:6c:17:67:5a:3a:e3:df:
         d6:99:75:a2:ad:58:49:92:91:41:93:84:7f:41:41:71:8d:8c:
         7b:de:20:6a:f9:b8:37:c2:60:f8:0e:74:27:51:92:ea:0f:5e:
         e5:3f:47:c7:a4:9b:a6:f8:2e:f9:9f:78:25:ca:5b:d4:a3:49:
         3d:c4:fe:74:ff:43:44:75:4f:d7:a8:c8:9d:f3:ff:e2:5f:69:
         7c:23:ee:92:d6:bb:c7:fc:64:be:a1:26:eb:ec:59:39:43:71:
         58:ba:43:84:9e:85:6a:8f:80:02:6b:a0:97:78:8c:11:c8:c7:
         bd:70:33:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----