Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/1/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa
File:                     326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa (raw, json)
Hash identifier:          51PRRn5HAdyGjNg2AHmytE///hcs6ykm+PiNuruQDHc=
Subject key identifier:   B5:77:31:B2:05:6F:48:A6:13:31:37:CD:88:A0:B3:D7:E1:67:8B:3A
Certificate issuer:       /CN=84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E
Certificate serial:       4C0A4D31B6F9930E49EA5A8417AAF0E1E55C5434
Authority key identifier: 84:BD:F3:82:3F:3D:A1:A5:4B:8B:B9:AF:61:56:F4:E5:A1:DB:17:0E
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/1/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa
Signing time:             Sun 16 Apr 2023 09:53:28 +0000
ROA not before:           Sun 16 Apr 2023 09:48:28 +0000
ROA not after:            Sun 14 Apr 2024 09:53:28 +0000
asID:                     49975
IP address blocks:        2a0a:6040:6d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0a:4d:31:b6:f9:93:0e:49:ea:5a:84:17:aa:f0:e1:e5:5c:54:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E
        Validity
            Not Before: Apr 16 09:48:28 2023 GMT
            Not After : Apr 14 09:53:28 2024 GMT
        Subject: CN=B57731B2056F48A6133137CD88A0B3D7E1678B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:42:da:91:85:97:c1:17:d3:54:36:4b:cd:
                    db:d0:08:5c:22:f3:65:95:39:f1:21:d7:f7:82:e2:
                    4c:3f:56:3f:c4:b7:fc:ed:02:18:b0:6a:15:cd:08:
                    ca:53:2f:cc:9c:03:04:ec:22:21:10:90:41:ed:f5:
                    9a:a3:0e:c6:96:60:1c:ff:32:d5:0e:7b:fc:87:98:
                    47:a7:e8:e9:14:66:96:4f:1b:aa:eb:36:4e:00:fd:
                    ed:8c:fe:b9:03:64:fd:da:01:45:12:16:92:2e:27:
                    2c:7f:86:7f:b5:1f:dd:a5:50:c6:cf:28:b1:bf:34:
                    57:e1:32:25:8e:e5:e6:aa:aa:33:f3:bb:d5:83:a9:
                    5a:a8:99:b9:81:df:8c:ff:a8:4b:6b:b4:25:40:68:
                    76:bc:37:dd:33:72:bb:8e:45:81:b0:98:83:ea:ca:
                    7f:fb:30:d2:ad:9e:b5:e2:63:31:87:db:96:1c:41:
                    b2:dc:6e:bf:d4:cf:21:64:d3:53:92:fb:73:9a:ac:
                    e2:5f:27:75:36:a6:26:ff:48:53:d0:f5:4f:76:f4:
                    b0:55:84:14:aa:e8:44:2f:d8:0f:05:42:52:99:aa:
                    13:06:17:d1:b9:35:95:03:85:77:87:26:79:3d:b8:
                    15:99:5b:b1:76:71:9d:86:61:a6:9a:e8:29:87:b2:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:77:31:B2:05:6F:48:A6:13:31:37:CD:88:A0:B3:D7:E1:67:8B:3A
            X509v3 Authority Key Identifier:
                keyid:84:BD:F3:82:3F:3D:A1:A5:4B:8B:B9:AF:61:56:F4:E5:A1:DB:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/1/84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/1/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:c2:24:db:be:39:dd:b5:8e:ec:91:c7:49:77:b4:ab:ee:24:
         be:9c:ab:15:10:02:65:e4:c8:9d:44:15:f8:b2:36:97:f5:75:
         ad:d4:43:d6:d3:8e:75:61:60:13:dd:5c:c7:27:4b:24:93:10:
         fe:2e:b2:c7:a8:75:4b:aa:c5:9e:91:ee:e7:49:d5:8e:29:42:
         d7:62:b5:49:5d:45:00:e6:2e:db:87:71:76:4e:09:c4:cd:6c:
         aa:46:60:e7:34:5a:5e:f6:f9:86:b8:6b:54:a7:4e:85:c3:c8:
         1d:e9:73:5c:28:7e:f2:5e:ab:e1:a2:1d:30:15:1d:70:26:0c:
         a6:ca:e5:b8:2d:2e:be:91:86:38:d5:4f:3b:7f:56:46:2a:ca:
         35:51:0c:12:d0:32:bc:ab:19:d1:b3:11:5a:a6:69:05:78:42:
         7e:91:da:f7:83:bb:c6:a6:65:ce:1a:bf:e1:b8:db:02:9e:99:
         7b:3d:a9:8a:5f:b8:d7:45:1f:2b:b7:46:09:da:7d:f6:a8:62:
         11:72:2d:45:46:14:ec:57:1d:dd:04:7b:85:a1:71:a4:3e:bb:
         12:4e:f8:0a:61:97:ec:79:cd:25:a1:e2:7c:1c:2f:30:70:8e:
         7c:d4:c7:b4:15:a0:44:4e:38:4f:c5:4c:ed:a9:38:a2:9e:45:
         73:a8:49:6a
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUTApNMbb5kw5J6lqEF6rw4eVcVDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRCREYzODIzRjNEQTFBNTRCOEJCOUFGNjE1NkY0RTVB
MURCMTcwRTAeFw0yMzA0MTYwOTQ4MjhaFw0yNDA0MTQwOTUzMjhaMDMxMTAvBgNV
BAMTKEI1NzczMUIyMDU2RjQ4QTYxMzMxMzdDRDg4QTBCM0Q3RTE2NzhCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCriULakYWXwRfTVDZLzdvQCFwi
82WVOfEh1/eC4kw/Vj/Et/ztAhiwahXNCMpTL8ycAwTsIiEQkEHt9ZqjDsaWYBz/
MtUOe/yHmEen6OkUZpZPG6rrNk4A/e2M/rkDZP3aAUUSFpIuJyx/hn+1H92lUMbP
KLG/NFfhMiWO5eaqqjPzu9WDqVqombmB34z/qEtrtCVAaHa8N90zcruORYGwmIPq
yn/7MNKtnrXiYzGH25YcQbLcbr/UzyFk01OS+3OarOJfJ3U2pib/SFPQ9U929LBV
hBSq6EQv2A8FQlKZqhMGF9G5NZUDhXeHJnk9uBWZW7F2cZ2GYaaa6CmHsgRpAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUtXcxsgVvSKYTMTfNiKCz1+FnizowHwYDVR0j
BBgwFoAUhL3zgj89oaVLi7mvYVb05aHbFw4wDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzEvODRCREYzODIzRjNEQTFBNTRC
OEJCOUFGNjE1NkY0RTVBMURCMTcwRS5jcmwwegYIKwYBBQUHAQEEbjBsMGoGCCsG
AQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VE
SUUtUlBLSS8wLzg0QkRGMzgyM0YzREExQTU0QjhCQjlBRjYxNTZGNEU1QTFEQjE3
MEUuY2VyMIGjBggrBgEFBQcBCwSBljCBkzCBkAYIKwYBBQUHMAuGgYNyc3luYzov
L2tyaWxsLmFjY3VyaXN0ZWNobm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hu
b2xvZ2llcy8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzY2NDMwMzAzYTNhMmYzNDMw
MmQzNDMwMjAzZDNlMjAzNDM5MzkzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQG0wDQYJKoZI
hvcNAQELBQADggEBACXCJNu+Od21juyRx0l3tKvuJL6cqxUQAmXkyJ1EFfiyNpf1
da3UQ9bTjnVhYBPdXMcnSySTEP4usseodUuqxZ6R7udJ1Y4pQtditUldRQDmLtuH
cXZOCcTNbKpGYOc0Wl72+Ya4a1SnToXDyB3pc1wofvJeq+GiHTAVHXAmDKbK5bgt
Lr6RhjjVTzt/VkYqyjVRDBLQMryrGdGzEVqmaQV4Qn6R2veDu8amZc4av+G42wKe
mXs9qYpfuNdFHyu3RgnaffaoYhFyLUVGFOxXHd0Ee4WhcaQ+uxJO+Aphl+x5zSWh
4nwcLzBwjnzUx7QVoEROOE/FTO2pOKKeRXOoSWo=
-----END CERTIFICATE-----