Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Apricot/1/326131333a646638373a623465313a3a2f34382d3438203d3e203630383538.roa
File:                     326131333a646638373a623465313a3a2f34382d3438203d3e203630383538.roa (raw, json)
Hash identifier:          Sflvw3g+4p/JcpLn5fis2hHARGwZTp4pI6E8wXZnwuk=
Subject key identifier:   6F:01:91:19:7D:CD:86:CB:BE:03:D8:EA:19:CD:4E:B5:70:2F:C2:42
Certificate issuer:       /CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Certificate serial:       5891C60CAB287EF979497D5DF966240611490C10
Authority key identifier: 2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject info access:      rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623465313a3a2f34382d3438203d3e203630383538.roa
Signing time:             Fri 19 Jan 2024 23:17:47 +0000
ROA not before:           Fri 19 Jan 2024 23:12:47 +0000
ROA not after:            Fri 17 Jan 2025 23:17:47 +0000
asID:                     60858
IP address blocks:        2a13:df87:b4e1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:91:c6:0c:ab:28:7e:f9:79:49:7d:5d:f9:66:24:06:11:49:0c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
        Validity
            Not Before: Jan 19 23:12:47 2024 GMT
            Not After : Jan 17 23:17:47 2025 GMT
        Subject: CN=6F0191197DCD86CBBE03D8EA19CD4EB5702FC242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:91:da:4f:46:a0:96:20:13:51:be:a5:fa:
                    b6:8d:14:54:fc:77:17:e7:fe:fc:f1:68:de:2c:72:
                    cc:53:3f:1e:32:30:d9:6a:45:81:19:72:97:e5:53:
                    ac:e3:b3:93:02:00:4e:28:85:c3:e7:7c:2d:63:55:
                    d4:d5:4e:9d:5d:2a:c8:49:23:57:98:5a:a1:b7:28:
                    fb:2f:24:93:74:06:66:00:0a:40:19:a4:c0:12:f7:
                    85:84:be:e6:f7:14:03:7e:e6:8a:b1:a2:2c:b9:54:
                    af:7f:50:71:d0:ff:9d:0c:e8:c4:4b:2e:eb:26:a7:
                    af:f2:ec:7d:38:57:f8:7a:6b:bb:e7:fe:96:b6:bb:
                    31:f7:39:17:98:54:20:61:46:ac:6b:aa:24:4c:ab:
                    41:97:a8:2c:ec:79:b1:00:31:c8:20:20:31:96:81:
                    01:5a:91:5d:0c:a6:47:86:c9:56:5b:e3:42:08:2f:
                    d6:5e:66:e0:33:ea:5e:3d:63:cd:4d:24:64:cf:0b:
                    67:03:ff:c9:72:9a:7b:d5:6c:65:d5:c1:2b:0f:32:
                    4b:43:c8:c5:36:94:aa:79:bd:4f:0e:a5:d7:af:91:
                    19:54:3b:d9:e0:55:dc:09:79:21:73:1e:3b:ed:cd:
                    44:60:ca:8b:4f:85:fa:80:c9:14:43:d0:b5:fd:21:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:01:91:19:7D:CD:86:CB:BE:03:D8:EA:19:CD:4E:B5:70:2F:C2:42
            X509v3 Authority Key Identifier:
                keyid:2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623465313a3a2f34382d3438203d3e203630383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:b4e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:90:09:fb:23:27:68:07:7d:51:52:97:02:94:c9:6d:54:c8:
         7f:3e:80:bf:7f:bf:0b:8c:25:ca:98:63:fd:5e:88:5d:d8:89:
         69:c6:7c:55:32:eb:29:86:2d:c4:1f:d4:46:3e:ee:c7:ed:20:
         6c:f4:2a:2b:03:05:d9:a2:a6:53:c9:53:69:06:2b:1c:d0:14:
         02:38:1f:b6:c8:1f:f4:9e:74:1a:79:33:1f:96:ea:cb:87:55:
         81:5f:97:9d:13:7c:f3:94:81:6f:bd:a1:e1:ad:7f:dd:03:2e:
         a8:39:dd:da:8b:b8:4f:4a:6e:78:7c:22:64:f0:e2:ab:95:83:
         eb:2c:10:26:fd:36:21:dd:2f:92:7a:a7:bd:23:63:53:b6:8f:
         d5:c1:c7:a4:9f:e7:c5:5b:c7:f5:fd:99:da:80:fc:f1:aa:05:
         83:70:a8:2b:ea:3b:4a:75:52:b1:62:f8:23:3f:3f:93:ee:62:
         53:01:b4:a2:3f:11:af:0c:aa:dc:74:9d:13:e9:25:03:b0:c3:
         ed:56:53:d5:3f:95:6f:07:24:e1:22:d3:52:59:52:ac:fb:2f:
         89:ef:e8:a8:8b:a3:f6:56:50:11:0f:8c:86:a8:99:8a:ba:d2:
         20:8a:53:e5:c1:2f:ad:4e:1d:f4:18:6c:bb:79:a4:22:37:66:
         87:92:4e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----