Route Origin Authorization

$ rpki-client -vvf parent.rov.koenvanhove.nl/repo/KoenvanHove/0/326130343a623930353a326130343a623930353a326130343a623930353a326130343a623930352f3132382d313238203d3e20323131333231.roa
File:                     326130343a623930353a326130343a623930353a326130343a623930353a326130343a623930352f3132382d313238203d3e20323131333231.roa (raw, json)
Hash identifier:          SrpbunE7J7HLDN+kA3BuStohG4r8ryZWQYsaCNE1AVs=
Subject key identifier:   AF:1B:4C:48:3C:0B:9B:D3:B8:80:47:A9:76:DF:18:0E:05:26:3A:62
Certificate issuer:       /CN=7773ED99C6A9084BD4E42AFA0DA15D17F86A2571
Certificate serial:       7FF1BC9E482F2CEDA1F978C35344291146D3E092
Authority key identifier: 77:73:ED:99:C6:A9:08:4B:D4:E4:2A:FA:0D:A1:5D:17:F8:6A:25:71
Authority info access:    rsync://rsync.krill.cloud/repo/nlnetlabs/1/7773ED99C6A9084BD4E42AFA0DA15D17F86A2571.cer
Subject info access:      rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/0/326130343a623930353a326130343a623930353a326130343a623930353a326130343a623930352f3132382d313238203d3e20323131333231.roa
Signing time:             Wed 22 Jun 2022 15:20:56 +0000
ROA not before:           Wed 22 Jun 2022 15:15:56 +0000
ROA not after:            Wed 21 Jun 2023 15:20:56 +0000
asID:                     211321
IP address blocks:        2a04:b905:2a04:b905:2a04:b905:2a04:b905/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f1:bc:9e:48:2f:2c:ed:a1:f9:78:c3:53:44:29:11:46:d3:e0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7773ED99C6A9084BD4E42AFA0DA15D17F86A2571
        Validity
            Not Before: Jun 22 15:15:56 2022 GMT
            Not After : Jun 21 15:20:56 2023 GMT
        Subject: CN=AF1B4C483C0B9BD3B88047A976DF180E05263A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4a:d3:5d:79:25:80:98:bb:6c:fb:e8:72:fe:
                    12:b5:8f:03:8c:03:97:67:ce:37:fa:9c:55:59:60:
                    a4:c9:75:a4:6f:b3:47:f5:76:63:df:47:09:d0:47:
                    96:09:ff:81:cd:9a:04:a3:2b:74:e5:61:27:88:88:
                    3e:11:c0:d7:ae:5f:01:56:04:a6:08:7a:3a:2b:8a:
                    75:1c:4a:78:93:f2:a2:ca:8a:72:fc:71:72:72:89:
                    c3:2a:b5:42:11:dc:9c:79:b1:10:33:8d:80:5d:ee:
                    8e:e0:f3:81:a7:63:ac:bb:ef:6b:03:34:d0:1e:fc:
                    33:38:12:33:aa:f5:09:a8:30:21:1c:b4:a9:5f:c3:
                    81:1a:76:0b:d0:a8:de:a0:df:ba:4f:34:a2:2d:46:
                    59:1a:75:8f:ab:00:1e:d3:e2:b8:18:c4:20:b1:aa:
                    12:14:90:80:42:64:85:fb:e8:0a:62:23:cb:0c:90:
                    04:1f:50:93:18:f7:29:b5:cd:48:a5:5e:7a:87:d7:
                    f1:a0:d8:fa:74:14:2e:af:ce:02:54:e7:f7:b2:70:
                    d8:b4:88:99:a1:90:3d:1b:bb:fa:17:e4:8d:ad:2b:
                    5b:a0:ec:69:9f:f3:89:40:8a:b5:24:d3:d2:9f:2d:
                    86:23:d4:8b:ec:19:4f:fd:c5:64:e5:6b:ad:ae:ed:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1B:4C:48:3C:0B:9B:D3:B8:80:47:A9:76:DF:18:0E:05:26:3A:62
            X509v3 Authority Key Identifier:
                keyid:77:73:ED:99:C6:A9:08:4B:D4:E4:2A:FA:0D:A1:5D:17:F8:6A:25:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/0/7773ED99C6A9084BD4E42AFA0DA15D17F86A2571.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/7773ED99C6A9084BD4E42AFA0DA15D17F86A2571.cer

            Subject Information Access:
                Signed Object - URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/0/326130343a623930353a326130343a623930353a326130343a623930353a326130343a623930352f3132382d313238203d3e20323131333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:b905:2a04:b905:2a04:b905:2a04:b905/128

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:aa:d0:93:b1:f7:3a:40:8c:94:43:08:53:f1:1e:80:34:
         b5:32:b6:8a:7e:2e:71:1e:7f:8c:a4:8d:43:f1:5a:af:5a:45:
         68:a0:08:4c:52:34:91:d7:85:dd:c1:91:7e:e0:c8:be:0c:05:
         ed:f7:ad:58:e7:78:e0:b1:54:21:44:0a:49:49:3b:a5:ef:62:
         ac:f0:28:2c:75:b5:2b:be:84:6f:41:25:a2:d6:37:bb:a1:b4:
         3b:be:15:0e:eb:aa:e4:86:a2:96:80:ae:05:5e:89:5c:b8:c4:
         61:64:33:7d:1e:d9:51:83:c0:0c:11:68:3e:5e:48:90:6f:b4:
         30:75:a6:6e:57:7c:7b:95:1e:f7:ea:e1:57:5e:24:7e:19:b5:
         a4:66:e9:b4:0e:a5:f0:d3:a0:2a:16:8b:fe:45:e8:35:a0:ac:
         47:b7:03:d7:cc:3e:76:64:ce:39:6a:17:4a:3c:ca:d7:2b:d9:
         a2:51:73:8c:f6:5b:2e:bb:5a:f0:27:4b:e6:b5:29:41:a4:37:
         22:eb:44:23:45:1a:be:73:d3:25:c0:a6:8f:86:43:c5:f1:8c:
         b0:08:c5:28:fb:07:ce:6e:56:7c:1c:f3:eb:70:97:92:10:bd:
         be:34:d6:62:ed:29:d9:96:44:04:c3:7c:45:43:ee:2c:f0:e6:
         1a:cc:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----