Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/326131333a646638373a326330303a3a2f34302d3430203d3e20313937343634.roa
File:                     326131333a646638373a326330303a3a2f34302d3430203d3e20313937343634.roa (raw, json)
Hash identifier:          dsK7l3SK37upGvOE8hdbS06W9iGW0VNhpVAaAdpFoAY=
Subject key identifier:   2D:39:57:99:D5:C4:91:70:F8:03:85:44:2C:34:15:1D:7F:6F:D7:F3
Certificate issuer:       /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial:       5E9B22FCA787370FE63744C43F836AD811B994D9
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject info access:      rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a326330303a3a2f34302d3430203d3e20313937343634.roa
Signing time:             Wed 17 Jan 2024 21:57:26 +0000
ROA not before:           Wed 17 Jan 2024 21:52:26 +0000
ROA not after:            Wed 15 Jan 2025 21:57:26 +0000
asID:                     197464
IP address blocks:        2a13:df87:2c00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9b:22:fc:a7:87:37:0f:e6:37:44:c4:3f:83:6a:d8:11:b9:94:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
        Validity
            Not Before: Jan 17 21:52:26 2024 GMT
            Not After : Jan 15 21:57:26 2025 GMT
        Subject: CN=2D395799D5C49170F80385442C34151D7F6FD7F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:21:00:90:b2:0b:b1:f0:15:5c:d1:7b:d1:
                    0d:fc:87:95:c0:d6:f6:82:bb:9c:85:ca:83:cf:68:
                    eb:f2:46:5b:17:64:8a:df:2e:e2:24:33:d3:d2:45:
                    13:9a:fd:d6:a0:f2:5e:e0:59:68:42:4a:9f:44:93:
                    4f:19:6a:dc:6e:41:fc:4e:2d:2a:7f:8e:08:90:d2:
                    e6:fa:52:f7:3a:13:50:69:51:5c:6e:45:7c:db:18:
                    f7:5e:73:fe:05:55:59:1b:e0:5c:e7:28:84:18:06:
                    f5:a5:6c:99:56:07:c7:0c:82:92:3f:29:c7:26:38:
                    1e:15:42:c5:1f:33:c9:be:17:58:0d:24:ba:b6:be:
                    4f:98:0b:71:9a:79:f6:65:0a:6e:cb:68:37:36:c2:
                    b8:bb:76:c5:89:a0:b8:22:20:38:e5:8b:cd:2e:ce:
                    d9:f8:07:0e:a1:50:29:cb:8c:13:cb:db:b6:3a:14:
                    37:99:78:a6:4c:0c:79:f5:20:c5:71:dc:2c:31:b0:
                    80:2f:86:b1:0e:1f:1d:09:a9:5a:eb:6f:91:b7:7f:
                    c5:1e:4d:41:1c:a8:72:0c:d5:ee:b4:b1:88:12:63:
                    15:e6:67:c9:3b:a4:7e:8c:19:62:51:01:00:b2:ae:
                    61:87:dc:76:c8:4c:8a:94:35:76:82:2a:eb:a0:48:
                    26:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:39:57:99:D5:C4:91:70:F8:03:85:44:2C:34:15:1D:7F:6F:D7:F3
            X509v3 Authority Key Identifier:
                keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a326330303a3a2f34302d3430203d3e20313937343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:92:c5:b5:0b:07:f9:9d:8a:3b:bb:39:a3:8b:79:9d:ed:78:
         4d:73:4a:6f:fd:a4:0b:be:09:67:83:ff:5b:1f:11:9e:19:06:
         18:9a:13:51:b8:65:a9:73:c1:df:7f:bc:27:37:35:57:4d:e7:
         d5:2e:1a:cd:db:cc:a7:ba:90:ef:23:3f:c0:7a:9d:31:59:47:
         18:0a:1e:54:85:10:fd:5a:4a:65:58:00:ec:73:a1:7e:05:f6:
         59:23:c1:d1:64:8a:98:fc:e1:1c:51:96:ec:f8:35:15:2c:ea:
         55:d2:7f:ac:b9:5c:46:71:b2:13:99:a0:26:2a:b3:7a:e6:e2:
         55:68:c5:81:da:b4:cf:02:a5:86:50:a8:11:b7:3b:50:0a:d8:
         20:14:de:a8:f7:bd:35:42:95:49:d4:13:39:ac:98:cc:10:c2:
         d1:88:c6:6c:09:9e:f8:66:2d:36:33:db:93:e2:21:0b:6e:54:
         65:0b:5e:87:ff:c7:e7:d8:39:49:75:1c:4c:ac:70:cd:e0:b1:
         03:3e:51:2e:95:59:3c:c5:9a:3d:c9:1e:12:4f:26:fc:be:13:
         f9:be:6c:22:f6:22:f7:00:fa:65:a9:ff:f9:fd:4a:4b:8f:da:
         02:4e:ee:1b:b6:2e:2e:ed:09:bc:da:60:e7:ea:a3:43:4a:b2:
         7d:17:d6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 16:12:44 2024 by rpki-client on console-fra.rpki-client.org