Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/4/326131323a386430303a3a2f32392d3239203d3e20393137.roa
File:                     326131323a386430303a3a2f32392d3239203d3e20393137.roa (raw, json)
Hash identifier:          m+vwgb7wuRm8zhtMwKZGj/F4ndOWhaYD5uLWAGA/HaI=
Subject key identifier:   99:E1:01:60:8E:C6:EF:E7:C5:45:FE:CE:38:75:9C:1A:1F:3B:5B:B7
Certificate issuer:       /CN=0e0b932d515fbad19dda69a1cea95d07985c4962
Certificate serial:       0B9C16987FE516C83FBDF5C466F2C782CDB10362
Authority key identifier: 0E:0B:93:2D:51:5F:BA:D1:9D:DA:69:A1:CE:A9:5D:07:98:5C:49:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DguTLVFfutGd2mmhzqldB5hcSWI.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/4/326131323a386430303a3a2f32392d3239203d3e20393137.roa
Signing time:             Thu 16 Jun 2022 13:25:18 +0000
ROA not before:           Thu 16 Jun 2022 13:20:18 +0000
ROA not after:            Thu 15 Jun 2023 13:25:18 +0000
asID:                     917
IP address blocks:        2a12:8d00::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9c:16:98:7f:e5:16:c8:3f:bd:f5:c4:66:f2:c7:82:cd:b1:03:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b932d515fbad19dda69a1cea95d07985c4962
        Validity
            Not Before: Jun 16 13:20:18 2022 GMT
            Not After : Jun 15 13:25:18 2023 GMT
        Subject: CN=99E101608EC6EFE7C545FECE38759C1A1F3B5BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:1c:16:63:b6:54:79:f8:4e:e8:bb:b4:02:
                    e1:56:5e:5f:aa:81:9f:7e:f6:5f:a8:3e:e8:be:cc:
                    b1:1d:d3:4b:d4:6f:94:78:4c:62:9e:fa:9f:47:63:
                    b2:54:81:1c:a2:31:12:e3:51:15:93:7e:10:a6:3c:
                    c0:98:61:41:9e:3c:4c:98:27:92:84:11:2f:48:e5:
                    38:55:bd:f8:20:08:ab:1f:61:c8:81:b9:2c:b4:01:
                    c6:7c:38:fb:71:d4:d6:26:d7:02:be:57:60:2f:43:
                    b6:46:a4:38:51:be:9d:65:1c:31:cb:cc:8d:7f:f4:
                    6a:86:b0:c9:7a:30:4f:94:e5:5c:b2:e7:a3:3c:92:
                    aa:2d:b5:7a:92:04:12:12:0e:43:6d:9e:19:e4:42:
                    8a:d0:62:f6:a1:85:55:6c:68:ac:7e:ac:63:69:3e:
                    38:9f:cf:82:be:64:19:4a:08:69:96:44:d1:88:ec:
                    30:40:af:11:9f:bd:3a:33:a6:1b:a6:55:2b:ae:ee:
                    4f:05:03:52:7f:b1:9a:d1:54:29:ca:da:a0:6d:f7:
                    e7:65:79:f2:48:b1:b8:29:75:0e:45:86:ef:db:bf:
                    2d:53:73:ff:8e:cc:f2:b6:c0:ae:4b:4f:8c:00:ed:
                    d8:ae:b5:ab:12:e3:97:ac:e1:d8:aa:17:73:f0:8c:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E1:01:60:8E:C6:EF:E7:C5:45:FE:CE:38:75:9C:1A:1F:3B:5B:B7
            X509v3 Authority Key Identifier:
                keyid:0E:0B:93:2D:51:5F:BA:D1:9D:DA:69:A1:CE:A9:5D:07:98:5C:49:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/4/0E0B932D515FBAD19DDA69A1CEA95D07985C4962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DguTLVFfutGd2mmhzqldB5hcSWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/4/326131323a386430303a3a2f32392d3239203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         72:c2:8b:60:d2:07:1a:ff:26:08:cf:c6:0c:42:9e:1a:04:50:
         f4:e7:c5:d3:1f:4e:37:da:88:f5:c9:3b:89:a2:33:ad:dd:66:
         41:c3:df:1f:75:a0:c2:95:01:18:e1:78:c2:2d:2c:6b:72:bd:
         1f:f4:5f:a4:c0:73:c1:7f:ad:ab:b2:9f:95:9a:1b:ba:98:f1:
         0b:86:6a:c0:09:d0:0e:92:20:fb:4b:2a:ea:3b:81:3c:f2:ff:
         c8:f3:18:09:57:23:f1:cc:4f:54:f3:37:d9:5b:53:9d:01:bd:
         42:cc:a7:8d:74:25:0a:5f:a4:d5:67:df:0f:26:3f:af:30:ff:
         18:72:50:26:91:d5:e5:7a:c5:a2:87:24:7d:90:ea:66:c5:e6:
         55:f5:4e:4b:0f:ff:75:a5:14:ae:bf:e4:fe:29:70:f5:c4:88:
         70:83:37:58:8b:ac:a6:d7:df:79:98:a2:8f:e0:7d:00:fd:99:
         9a:9a:a6:e8:00:39:b5:3d:34:c3:2f:f4:5a:56:aa:a6:fe:eb:
         23:0e:88:cf:ab:4f:65:21:e2:64:16:75:bf:ae:8e:67:70:30:
         4b:ec:a6:aa:e9:57:e5:92:2f:80:ac:ae:83:88:17:63:6d:81:
         db:2d:0c:94:63:6c:ad:d7:5b:57:a0:46:5b:99:d0:5d:9a:25:
         52:6f:55:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----