Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Apricot/1/326131333a646638373a623566663a3a2f34382d3438203d3e20313939303532.roa
File:                     326131333a646638373a623566663a3a2f34382d3438203d3e20313939303532.roa (raw, json)
Hash identifier:          //08YaNXyJ0H/wnsOoa3OkwIqnLYyaAxlIwcRof9NZw=
Subject key identifier:   8E:72:EC:69:45:3F:A4:A6:10:D8:00:BF:56:72:AE:FA:1B:49:37:B9
Certificate issuer:       /CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Certificate serial:       1C1EC686FFF18E8BC89BD051539FCB78F16021AA
Authority key identifier: 2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject info access:      rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623566663a3a2f34382d3438203d3e20313939303532.roa
Signing time:             Sun 14 Jan 2024 10:09:05 +0000
ROA not before:           Sun 14 Jan 2024 10:04:05 +0000
ROA not after:            Sun 12 Jan 2025 10:09:05 +0000
asID:                     199052
IP address blocks:        2a13:df87:b5ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1e:c6:86:ff:f1:8e:8b:c8:9b:d0:51:53:9f:cb:78:f1:60:21:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
        Validity
            Not Before: Jan 14 10:04:05 2024 GMT
            Not After : Jan 12 10:09:05 2025 GMT
        Subject: CN=8E72EC69453FA4A610D800BF5672AEFA1B4937B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:a3:4b:50:fe:c1:e1:ae:4f:7c:d7:e7:8d:
                    e4:55:ae:99:d0:aa:69:02:70:f2:94:f3:4a:3e:cc:
                    3b:32:8a:a2:a6:96:fa:5e:fd:6b:a9:3f:c5:06:12:
                    52:96:d8:b9:81:9a:48:9c:67:67:a2:6d:90:9d:e7:
                    e7:47:e4:73:19:db:8d:2b:36:d7:21:32:03:38:2a:
                    71:76:28:fe:f2:2a:4d:c5:ec:a6:0f:63:bb:55:a0:
                    9e:e9:0e:28:a4:7e:3f:b4:84:f2:b1:88:03:21:f9:
                    aa:1d:22:d7:a7:42:d0:5b:ae:8e:53:a4:7e:af:0d:
                    99:4a:a8:57:17:04:48:32:a8:c5:20:53:c4:52:bb:
                    92:23:30:34:98:79:b9:30:83:6a:32:5f:ba:a8:b9:
                    87:82:e8:bd:de:70:c9:73:ea:86:80:8e:bb:02:80:
                    6c:ca:45:91:39:5d:7c:e0:fa:3e:30:24:5f:73:0d:
                    bf:00:c2:33:65:39:4b:10:fa:69:4e:33:d8:89:8d:
                    5c:93:a2:44:b2:50:cd:cc:ae:cc:88:52:f8:81:9d:
                    57:16:2f:d9:8a:f6:17:9f:46:f6:84:94:29:85:f1:
                    26:8e:8b:8c:35:d5:9d:ce:5a:ef:f4:af:42:82:eb:
                    74:e4:e9:8d:15:63:8b:9c:bf:ee:22:45:67:ac:83:
                    cf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:72:EC:69:45:3F:A4:A6:10:D8:00:BF:56:72:AE:FA:1B:49:37:B9
            X509v3 Authority Key Identifier:
                keyid:2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623566663a3a2f34382d3438203d3e20313939303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:b5ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:ac:70:79:f4:4a:f9:d1:bf:1e:df:49:55:a6:bb:d1:ce:89:
         31:b3:33:1a:94:16:e4:b0:e1:32:5a:fb:c7:6f:de:68:9a:c4:
         2b:98:48:c8:fe:8b:8c:60:33:d4:b1:bb:ca:f8:ec:cd:3c:23:
         1b:29:14:ba:36:09:2b:15:60:9e:6c:a1:b5:b8:db:8d:aa:22:
         91:71:f8:96:e2:a7:7c:9a:3d:c4:0a:97:c2:18:44:f8:7e:be:
         6c:81:b1:e6:22:5e:1a:0d:37:d2:01:f4:38:cb:5c:83:b4:c0:
         78:89:a1:61:82:a2:18:be:9c:fa:0c:4e:22:67:8a:f0:da:7a:
         01:8f:25:a4:6e:69:4d:ba:ac:14:2a:dc:c7:72:52:6c:fa:0a:
         f1:fc:69:0e:b4:68:27:42:dc:88:b1:86:d2:76:3b:54:7d:1a:
         07:d2:32:cd:73:36:d7:9e:11:d3:a3:d2:b9:50:7f:60:4c:1e:
         99:90:d6:34:e2:20:50:4d:01:87:c5:89:f4:74:cd:29:73:e3:
         a9:9d:3b:45:f6:76:ea:66:de:02:00:71:4c:a9:a1:d4:2d:7e:
         12:1d:f4:d6:52:22:ee:f0:fa:ae:84:4a:86:ca:f4:6f:dd:c2:
         82:87:4b:ea:37:e3:95:bc:f4:72:7d:30:a1:c9:36:f9:ed:f0:
         66:af:b5:d3
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUHB7Ghv/xjovIm9BRU5/LePFgIaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkExQTYxNzJEQTRDMzM5RkQ3ODc0NjdFMjZGOTJBMTFF
NzVEQkJCMzAeFw0yNDAxMTQxMDA0MDVaFw0yNTAxMTIxMDA5MDVaMDMxMTAvBgNV
BAMTKDhFNzJFQzY5NDUzRkE0QTYxMEQ4MDBCRjU2NzJBRUZBMUI0OTM3QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+G6NLUP7B4a5PfNfnjeRVrpnQ
qmkCcPKU80o+zDsyiqKmlvpe/WupP8UGElKW2LmBmkicZ2eibZCd5+dH5HMZ240r
NtchMgM4KnF2KP7yKk3F7KYPY7tVoJ7pDiikfj+0hPKxiAMh+aodItenQtBbro5T
pH6vDZlKqFcXBEgyqMUgU8RSu5IjMDSYebkwg2oyX7qouYeC6L3ecMlz6oaAjrsC
gGzKRZE5XXzg+j4wJF9zDb8AwjNlOUsQ+mlOM9iJjVyTokSyUM3MrsyIUviBnVcW
L9mK9hefRvaElCmF8SaOi4w11Z3OWu/0r0KC63Tk6Y0VY4ucv+4iRWesg8+DAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUjnLsaUU/pKYQ2AC/VnKu+htJN7kwHwYDVR0j
BBgwFoAUKhphctpMM5/Xh0Z+JvkqEeddu7MwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraS5uZXRpZmFjZS5uZXQvcmVwby9BcHJp
Y290LzEvMkExQTYxNzJEQTRDMzM5RkQ3ODc0NjdFMjZGOTJBMTFFNzVEQkJCMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC8yQTFBNjE3MkRBNEMzMzlGRDc4NzQ2N0Uy
NkY5MkExMUU3NURCQkIzLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzAL
hm1yc3luYzovL3Jwa2kubmV0aWZhY2UubmV0L3JlcG8vQXByaWNvdC8xLzMyNjEz
MTMzM2E2NDY2MzgzNzNhNjIzNTY2NjYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
MTM5MzkzMDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE9+Htf8wDQYJKoZIhvcNAQELBQADggEB
AB2scHn0SvnRvx7fSVWmu9HOiTGzMxqUFuSw4TJa+8dv3miaxCuYSMj+i4xgM9Sx
u8r47M08IxspFLo2CSsVYJ5sobW4242qIpFx+Jbip3yaPcQKl8IYRPh+vmyBseYi
XhoNN9IB9DjLXIO0wHiJoWGCohi+nPoMTiJnivDaegGPJaRuaU26rBQq3MdyUmz6
CvH8aQ60aCdC3IixhtJ2O1R9GgfSMs1zNteeEdOj0rlQf2BMHpmQ1jTiIFBNAYfF
ifR0zSlz46mdO0X2dupm3gIAcUypodQtfhId9NZSIu7w+q6ESobK9G/dwoKHS+o3
45W89HJ9MKHJNvnt8GavtdM=
-----END CERTIFICATE-----