Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030343a3a2f34382d3438203d3e203630323233.roa
File:                     326131333a646638373a323030343a3a2f34382d3438203d3e203630323233.roa (raw, json)
Hash identifier:          j31o+GZ7ljBj2XERwsN5Lbk/nt9icH7VK5x9lzlRTks=
Subject key identifier:   2F:61:46:23:F1:A5:5A:C5:73:FD:BE:35:1F:FB:7B:E2:7C:08:96:ED
Certificate issuer:       /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial:       052F289934D12FE2A863DD99EF9C9DB505840F89
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject info access:      rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030343a3a2f34382d3438203d3e203630323233.roa
Signing time:             Fri 15 Mar 2024 21:01:47 +0000
ROA not before:           Fri 15 Mar 2024 20:56:47 +0000
ROA not after:            Fri 14 Mar 2025 21:01:47 +0000
asID:                     60223
IP address blocks:        2a13:df87:2004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2f:28:99:34:d1:2f:e2:a8:63:dd:99:ef:9c:9d:b5:05:84:0f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
        Validity
            Not Before: Mar 15 20:56:47 2024 GMT
            Not After : Mar 14 21:01:47 2025 GMT
        Subject: CN=2F614623F1A55AC573FDBE351FFB7BE27C0896ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:7c:8a:c1:d5:2a:76:82:1f:44:ce:5a:24:
                    1d:51:57:2c:f5:92:5b:b4:0a:42:a0:f5:18:84:f1:
                    6f:3f:6f:c8:88:32:0c:3e:5b:c9:84:1d:c0:38:38:
                    94:21:22:ca:9d:73:2e:31:ed:1f:bb:bd:1d:26:ad:
                    53:25:21:dd:a2:31:f4:85:83:db:3c:24:da:19:33:
                    03:8b:9a:a3:96:95:cc:d5:28:3a:7d:6a:b8:67:75:
                    5b:88:88:06:61:d9:69:3f:e3:e5:6a:db:0a:c7:3e:
                    e2:8d:4f:0e:e9:ca:93:23:69:c6:96:19:96:ba:0d:
                    2d:26:16:15:bb:67:4c:8d:50:81:63:23:68:86:01:
                    46:52:47:be:0c:25:aa:7d:19:e2:60:b2:88:0f:a3:
                    3f:19:8f:83:8a:b0:5b:10:f7:32:7c:70:04:f9:e5:
                    5e:f3:1e:0d:32:75:55:f9:7c:25:9d:b0:b8:62:08:
                    86:c8:b5:fd:75:06:4f:bf:59:45:94:05:4b:93:ed:
                    9c:c7:37:08:cd:bd:24:16:7e:3b:99:ca:f1:02:07:
                    68:61:46:11:e5:23:42:89:80:d2:b0:70:b4:74:8b:
                    30:79:11:f4:5c:08:91:67:dd:c7:93:5c:d1:51:64:
                    a4:c8:e6:68:c1:a3:68:34:cf:12:eb:79:bf:2d:73:
                    cb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:61:46:23:F1:A5:5A:C5:73:FD:BE:35:1F:FB:7B:E2:7C:08:96:ED
            X509v3 Authority Key Identifier:
                keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030343a3a2f34382d3438203d3e203630323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:2004::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:70:29:c5:31:ba:b0:20:d8:8c:8d:c0:b3:79:8a:96:7b:4e:
         1d:ea:79:cc:32:69:1a:60:e3:98:e5:aa:f8:fa:28:e9:50:3d:
         cb:66:5f:5f:98:55:6f:80:5b:96:66:fe:3b:ce:7e:f1:a8:de:
         85:7f:2b:5b:65:af:94:a4:4d:76:65:19:9c:ed:4b:f7:01:2f:
         64:70:74:52:60:93:21:29:e1:f5:dc:7e:28:03:ed:14:5a:82:
         30:1d:b0:39:18:f8:98:c3:0d:6b:24:c0:52:7b:76:9b:15:83:
         d7:75:32:e7:80:3a:a5:39:86:54:e0:61:fc:87:be:48:7e:8a:
         23:db:c7:02:67:5e:12:18:16:96:07:17:98:56:f3:3c:2c:09:
         3b:66:a9:dd:48:cd:f8:06:5a:01:85:f9:c0:9f:82:03:22:22:
         67:20:a8:ab:61:fd:79:51:f4:56:d9:e3:2b:34:bc:87:31:70:
         92:6b:c9:f9:21:4a:1b:98:fa:2b:e1:6e:56:2f:bd:3b:34:60:
         42:2b:62:a9:c5:7c:54:23:25:4c:c3:c6:37:c3:74:95:51:cb:
         b7:7f:85:92:ff:b1:47:d3:ea:d8:b1:61:4a:a3:43:d9:f0:bd:
         a8:d3:64:cb:df:0d:9c:e6:df:44:b1:6e:ba:61:71:fe:45:3b:
         ce:26:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----