Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/1/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
File:                     326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa (raw, json)
Hash identifier:          mppJWjpqTHJWhYTFiZ3dHNrkwHXFSlWx4qJWq5ZL5D0=
Subject key identifier:   06:CF:26:F8:95:13:C0:6A:6E:9C:67:96:CF:57:61:DA:38:71:42:C1
Certificate issuer:       /CN=84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E
Certificate serial:       129F6393B5EF24FD828136950A6458F84A5E22D9
Authority key identifier: 84:BD:F3:82:3F:3D:A1:A5:4B:8B:B9:AF:61:56:F4:E5:A1:DB:17:0E
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/1/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
Signing time:             Sun 16 Apr 2023 09:53:28 +0000
ROA not before:           Sun 16 Apr 2023 09:48:28 +0000
ROA not after:            Sun 14 Apr 2024 09:53:28 +0000
asID:                     52210
IP address blocks:        2a0a:6040:c500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9f:63:93:b5:ef:24:fd:82:81:36:95:0a:64:58:f8:4a:5e:22:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E
        Validity
            Not Before: Apr 16 09:48:28 2023 GMT
            Not After : Apr 14 09:53:28 2024 GMT
        Subject: CN=06CF26F89513C06A6E9C6796CF5761DA387142C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:9c:5c:89:17:a0:64:7b:aa:01:0c:98:d4:
                    e3:34:e5:00:4c:e8:5b:9c:43:d9:42:e1:a9:18:43:
                    02:1c:64:82:aa:86:8b:f8:e4:8a:93:b6:f9:73:ba:
                    60:55:bf:08:01:d2:e0:84:91:b1:4d:90:ce:43:15:
                    f9:8d:f9:e3:22:ff:64:fc:98:ba:30:9c:ac:4f:75:
                    31:82:79:60:3e:0e:ca:f7:ff:88:09:8e:7c:e7:e7:
                    60:d9:d6:7f:9f:b3:c0:d8:5b:37:89:48:70:97:76:
                    ed:50:d7:76:83:02:49:6e:1a:dc:8e:db:c3:d0:c8:
                    48:ba:1a:44:0d:83:1b:d0:36:c4:f2:81:21:99:7e:
                    28:ee:c0:bc:7b:8c:f6:6b:cc:f3:d2:d2:a1:e2:86:
                    dd:61:a5:9a:30:6a:d6:4a:d3:64:91:4e:80:e7:a1:
                    4c:02:d7:f1:1d:ee:7e:90:88:c4:4f:7f:6d:d3:5e:
                    1a:88:58:a5:0b:4c:69:98:f9:53:85:34:f2:0b:4e:
                    07:3f:ee:bf:2f:26:0d:7d:9d:bb:8d:de:b4:44:29:
                    35:11:01:63:46:d4:f0:0b:f6:2c:17:0e:f7:c8:05:
                    f8:fb:c8:50:de:bf:49:62:5a:17:1c:33:39:d4:d5:
                    2b:ab:ce:59:bb:1f:af:a0:31:90:12:2c:a7:52:f8:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CF:26:F8:95:13:C0:6A:6E:9C:67:96:CF:57:61:DA:38:71:42:C1
            X509v3 Authority Key Identifier:
                keyid:84:BD:F3:82:3F:3D:A1:A5:4B:8B:B9:AF:61:56:F4:E5:A1:DB:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/1/84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/84BDF3823F3DA1A54B8BB9AF6156F4E5A1DB170E.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/1/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:30:d3:b5:7d:48:a5:38:b4:24:b0:b0:33:ae:c5:f2:57:77:
         72:20:75:9c:12:1a:e9:5c:24:90:c9:e1:93:df:30:45:c1:a0:
         e6:35:bc:49:f3:25:3d:7a:96:4a:7f:7f:ee:3c:7e:eb:ac:25:
         0e:07:7f:3c:0a:d7:10:d1:e1:20:9d:6b:7d:2c:28:88:4f:00:
         b3:c8:e7:1e:6b:0b:84:eb:a7:b7:0a:69:41:01:34:a2:2f:56:
         fa:d3:6f:e9:f4:b7:bc:7a:4c:4a:c7:f8:6b:f4:e6:2a:bc:d6:
         d9:ab:a9:ab:0c:95:1e:c2:04:e3:a5:17:f2:ba:db:05:b6:cd:
         fb:20:f4:98:37:37:52:07:8d:c1:30:8f:95:b0:91:fa:d1:08:
         0c:4c:e1:b7:f6:39:ba:86:05:cf:aa:89:b1:09:68:55:9a:fa:
         60:af:87:5d:8a:87:c6:c7:7b:26:9c:22:fd:1d:46:42:ca:54:
         2a:d9:67:25:3d:e7:32:49:fe:4e:46:69:34:ca:d8:9c:f4:c9:
         03:78:7c:50:38:4e:a8:bf:22:df:3d:66:86:7e:97:7e:c8:93:
         81:98:d8:2f:44:aa:c1:10:e2:66:ef:89:be:74:ef:e9:79:14:
         ec:27:5c:c9:ab:20:89:24:4e:ea:84:3a:5c:b3:3a:77:92:49:
         b8:f9:e5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----