Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030313a3a2f34382d3438203d3e203630323233.roa
File:                     326131333a646638373a323030313a3a2f34382d3438203d3e203630323233.roa (raw, json)
Hash identifier:          NqzwhuWafmat60YHZpwuAZak0Z33zE146yD1VshwzbY=
Subject key identifier:   38:44:23:A8:EC:C4:0B:87:B8:6E:3D:69:6E:39:BA:BD:77:7A:89:C4
Certificate issuer:       /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial:       62863068D5F2CAE66B0D09FFE7568E57A7E83980
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject info access:      rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030313a3a2f34382d3438203d3e203630323233.roa
Signing time:             Fri 19 Jan 2024 16:29:15 +0000
ROA not before:           Fri 19 Jan 2024 16:24:15 +0000
ROA not after:            Fri 17 Jan 2025 16:29:15 +0000
asID:                     60223
IP address blocks:        2a13:df87:2001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:86:30:68:d5:f2:ca:e6:6b:0d:09:ff:e7:56:8e:57:a7:e8:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
        Validity
            Not Before: Jan 19 16:24:15 2024 GMT
            Not After : Jan 17 16:29:15 2025 GMT
        Subject: CN=384423A8ECC40B87B86E3D696E39BABD777A89C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:5c:e5:cb:74:ff:02:12:2a:5f:a3:12:59:
                    57:c0:c8:a7:4f:f9:e6:60:3d:d3:b2:fb:39:8f:0a:
                    56:27:1b:13:64:c1:b9:12:50:cc:af:93:1c:d5:75:
                    60:8b:b4:9d:2c:47:18:78:5b:00:cf:59:68:c7:ba:
                    27:fa:82:3d:72:fa:27:1b:a8:aa:e7:20:d0:45:ed:
                    74:8c:be:fe:87:88:12:e6:88:16:06:a9:a3:7d:12:
                    b0:13:18:09:81:60:00:51:e5:1c:58:98:d1:10:35:
                    46:97:43:f7:eb:61:fe:34:6d:06:2d:1e:bb:97:79:
                    21:23:bb:39:b7:87:30:d4:a3:09:50:1b:64:63:40:
                    87:e4:16:2c:ce:32:b0:b0:37:87:66:ba:73:8f:79:
                    c7:3f:a0:56:39:a2:f5:a5:24:a4:d6:7e:3c:ee:dd:
                    cf:43:d6:91:b3:d6:09:71:1b:0b:cc:15:4b:28:97:
                    5d:f3:6e:c9:4b:1f:7e:df:db:f1:cb:38:b9:56:d0:
                    98:b0:07:a8:ba:8c:6f:2c:3a:6a:b4:9a:c4:82:3e:
                    ac:87:92:74:27:fa:77:17:7e:15:2c:ad:ec:2e:c8:
                    fb:8a:cc:7a:68:c0:17:cd:5d:01:ca:92:a4:88:48:
                    ec:df:f7:31:14:f3:6a:39:2f:eb:2d:a6:d2:fd:4c:
                    e4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:44:23:A8:EC:C4:0B:87:B8:6E:3D:69:6E:39:BA:BD:77:7A:89:C4
            X509v3 Authority Key Identifier:
                keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030313a3a2f34382d3438203d3e203630323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:4f:cb:ce:e1:d8:c6:22:33:9f:d7:c8:c1:2a:84:64:ac:24:
         c1:f1:ab:23:83:49:0d:61:bd:01:04:76:d9:4e:59:8c:bf:ae:
         88:eb:05:48:86:94:d0:a5:b9:27:1a:6e:b5:92:6d:11:57:b5:
         cf:45:e0:ef:59:48:af:6f:ac:db:35:62:e4:c1:11:69:4f:97:
         ba:5d:64:be:8c:fb:97:b0:f2:6e:a0:78:2e:21:d9:c8:22:c0:
         cc:d6:90:80:26:5b:fd:a9:59:af:08:2d:cb:8d:97:a5:cd:0d:
         a3:9d:27:4f:d7:2b:53:41:c0:d7:2b:8a:3b:35:19:14:63:85:
         f5:59:e6:12:aa:99:5a:b3:a3:3e:2c:00:f8:5c:50:5e:19:e9:
         21:88:ca:31:f5:76:9a:ce:32:3e:27:7d:71:91:13:53:01:1b:
         d9:51:b5:00:d4:67:64:43:ac:cd:fb:d6:e8:55:96:b1:07:a5:
         b5:fa:d2:5c:0f:e9:7c:53:a4:2e:57:f4:63:fd:b7:6c:6d:c0:
         ef:0b:b5:72:04:6c:73:dc:aa:bb:fd:77:c6:c6:47:2a:28:4c:
         ed:7a:8d:3b:09:27:47:7b:6a:6e:bc:87:42:f3:bd:e0:8f:20:
         bf:93:2f:67:8b:28:9a:5b:b2:6f:15:12:14:ac:8d:15:5b:58:
         6e:7d:a5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----