Route Origin Authorization

$ rpki-client -vvf parent.rov.koenvanhove.nl/repo/KoenvanHove/1/3230332e3131392e32312e302f32342d3234203d3e2030.roa
File:                     3230332e3131392e32312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          GtFR9kW8ZRDxDc83ncK/EMpFKXk/T6xV96+3xSDe2go=
Subject key identifier:   ED:4A:5D:65:72:31:1E:8F:CA:87:89:38:3D:49:2F:77:99:D4:AE:60
Certificate issuer:       /CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
Certificate serial:       629CA3BE8415E987AAEE04865D65392C6D490D87
Authority key identifier: C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer
Subject info access:      rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/3230332e3131392e32312e302f32342d3234203d3e2030.roa
Signing time:             Fri 15 Jul 2022 14:56:08 +0000
ROA not before:           Fri 15 Jul 2022 14:51:08 +0000
ROA not after:            Fri 14 Jul 2023 14:56:08 +0000
asID:                     0
IP address blocks:        203.119.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9c:a3:be:84:15:e9:87:aa:ee:04:86:5d:65:39:2c:6d:49:0d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
        Validity
            Not Before: Jul 15 14:51:08 2022 GMT
            Not After : Jul 14 14:56:08 2023 GMT
        Subject: CN=ED4A5D6572311E8FCA8789383D492F7799D4AE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:1e:f4:1b:db:1b:2d:e4:f3:67:c0:97:f5:
                    cb:b7:40:ba:e1:72:4d:c5:e4:cc:eb:3f:04:1e:35:
                    28:f2:92:74:0e:7f:f5:4c:ef:48:cd:27:a6:7d:6e:
                    28:53:57:0b:47:f2:86:80:82:bc:b9:7c:ae:30:a9:
                    e7:27:b2:cf:df:3b:f6:62:48:21:78:ac:89:30:70:
                    23:02:d9:a7:61:29:15:cf:b5:fc:e6:e0:02:61:ca:
                    69:ef:31:f3:ea:5d:c5:c8:f2:2b:0f:02:bf:13:e6:
                    b4:ad:8c:96:a6:de:5f:de:fc:06:40:4f:95:10:d8:
                    72:b2:fb:64:9c:16:31:0b:9a:fd:7c:69:99:a1:fe:
                    dd:0d:f5:1a:10:87:36:b6:90:46:f2:99:25:82:6b:
                    04:ac:cc:51:39:1b:3f:95:c3:02:38:e4:c2:1c:cc:
                    48:19:65:e1:c9:b1:db:d8:24:85:4b:a2:cd:2b:98:
                    2e:94:6c:b6:f8:b4:b2:99:76:92:4b:46:8e:65:cd:
                    f6:b7:ce:7e:42:4c:e2:e6:f2:c3:b1:b5:81:5f:f9:
                    ff:f7:f8:86:86:41:4f:7c:6e:46:27:46:11:24:de:
                    4b:cf:a7:16:b7:2d:36:95:32:a7:58:3d:ab:e4:e5:
                    92:3c:a6:5c:b2:e3:3e:07:41:c0:48:b5:c2:f1:ec:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4A:5D:65:72:31:1E:8F:CA:87:89:38:3D:49:2F:77:99:D4:AE:60
            X509v3 Authority Key Identifier:
                keyid:C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/C1F7424F77FBF669FB750C6DC7B649C5969DCD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/3230332e3131392e32312e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:85:ac:9d:b9:5f:2b:8f:55:75:bc:26:90:5e:98:0c:19:63:
         08:1d:72:5c:14:e7:0d:5c:b6:ec:93:15:2f:e4:39:8f:7a:09:
         4a:d1:c2:e6:85:29:0f:b9:15:e3:07:8c:01:f2:0d:25:05:18:
         68:a2:d2:aa:65:23:60:52:21:30:eb:75:b9:18:77:49:85:40:
         80:84:eb:44:c4:7e:36:2e:54:11:ee:91:db:16:29:69:51:15:
         f0:c2:90:0a:d5:eb:33:67:1f:59:c8:18:67:49:87:8e:a4:9b:
         5d:0e:23:fc:7b:ad:70:8a:d3:24:55:17:7e:51:ac:66:5f:f6:
         68:66:ea:19:65:88:7e:59:ce:6c:41:a8:fd:d9:5c:95:84:38:
         58:6a:6b:b1:ae:d7:a4:f0:c9:55:be:fd:39:88:bb:79:c5:c3:
         3c:3f:08:f3:0e:98:6f:b7:c7:26:94:fe:3a:0d:79:15:6b:3d:
         49:9d:ff:f8:fa:09:95:67:3e:94:61:ca:3e:5f:63:a7:df:fd:
         f9:96:7e:92:50:10:b9:b4:7c:a0:a7:48:f6:2e:c3:45:42:2a:
         02:72:d0:c9:a9:71:73:e0:dc:fc:69:da:c2:5d:e3:7e:14:b7:
         63:16:75:f0:1e:6a:80:c1:2e:74:69:c2:92:18:35:1a:3d:9f:
         ba:9f:e8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----