Route Origin Authorization

$ rpki-client -vvf parent.rov.koenvanhove.nl/repo/KoenvanHove/1/3230332e3131392e32322e302f32332d3233203d3e20323131333231.roa
File:                     3230332e3131392e32322e302f32332d3233203d3e20323131333231.roa (raw, json)
Hash identifier:          3v6exAPwiG4OE3WNabPns2kKD1lU5+9tEx+sE4O1ZUI=
Subject key identifier:   88:0B:26:4E:D3:0B:39:23:63:5D:69:78:BA:43:CA:E3:B7:C3:46:81
Certificate issuer:       /CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
Certificate serial:       0A51DC68F79199846567301C27039A6F5C2FACAA
Authority key identifier: C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer
Subject info access:      rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/3230332e3131392e32322e302f32332d3233203d3e20323131333231.roa
Signing time:             Wed 13 Jul 2022 09:33:34 +0000
ROA not before:           Wed 13 Jul 2022 09:28:34 +0000
ROA not after:            Wed 12 Jul 2023 09:33:34 +0000
asID:                     211321
IP address blocks:        203.119.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:51:dc:68:f7:91:99:84:65:67:30:1c:27:03:9a:6f:5c:2f:ac:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
        Validity
            Not Before: Jul 13 09:28:34 2022 GMT
            Not After : Jul 12 09:33:34 2023 GMT
        Subject: CN=880B264ED30B3923635D6978BA43CAE3B7C34681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:08:48:9b:dc:03:7a:5d:f3:5e:52:57:29:
                    de:59:56:0e:25:b2:f8:0b:97:67:bc:71:92:23:a3:
                    fe:d0:52:11:31:b6:25:12:df:81:03:ec:e9:e2:f3:
                    ea:3d:70:63:07:7f:e4:40:d9:ad:d4:94:5f:f6:60:
                    3c:d6:f9:79:18:5f:86:49:76:3f:4b:38:35:dd:15:
                    ed:2a:e2:dd:df:81:9e:2f:8b:1b:23:5a:e0:d8:4e:
                    f1:b3:e7:e3:56:b0:aa:86:bb:f4:21:15:93:27:c2:
                    13:b3:12:74:e1:9a:11:e0:fa:14:3f:44:c4:c4:e0:
                    ba:d7:5d:e1:16:42:9b:61:f9:7c:69:ed:30:41:ba:
                    fd:81:15:7f:c6:27:b1:9e:90:52:0c:2c:d8:67:99:
                    61:d5:84:ad:44:d4:fd:48:ae:fd:e1:d7:30:fe:f8:
                    f7:c5:f4:6d:d6:8a:a7:c4:b6:f9:ec:83:14:1a:e5:
                    f2:a7:bf:f3:6b:f1:9b:d0:d5:cd:73:d4:f1:67:f2:
                    49:f6:08:e7:a1:e6:b2:3f:ff:95:72:56:8f:70:98:
                    83:f1:8e:3d:49:48:f0:5f:80:0a:97:97:e1:0e:7d:
                    26:5c:85:fa:f1:61:cf:59:f3:e0:39:17:f1:03:ba:
                    12:c9:f7:ef:a6:23:bf:13:fe:73:3b:43:56:d1:e4:
                    e3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0B:26:4E:D3:0B:39:23:63:5D:69:78:BA:43:CA:E3:B7:C3:46:81
            X509v3 Authority Key Identifier:
                keyid:C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/C1F7424F77FBF669FB750C6DC7B649C5969DCD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/3230332e3131392e32322e302f32332d3233203d3e20323131333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:e3:42:79:e7:5d:91:36:d6:73:8b:06:03:04:33:ee:81:56:
         90:30:0b:61:fe:a9:46:57:cf:e0:e2:f6:3e:77:71:6e:a8:c6:
         4f:64:c0:a9:4c:57:bf:84:78:fa:8b:40:26:14:33:67:e5:b5:
         f2:c9:75:da:ef:59:bb:95:de:f4:6c:32:11:03:09:fa:3c:0a:
         ac:e5:b3:dc:33:7e:78:5b:9a:30:ad:53:f4:cc:a7:bd:50:b9:
         01:f0:71:3e:62:a1:c3:ab:eb:03:47:30:10:1f:24:a3:8d:29:
         53:ef:19:ce:94:56:fa:1e:68:b6:28:ba:69:7f:3a:35:80:95:
         9a:0a:43:7e:55:d7:6a:a6:13:48:88:f4:cb:12:72:a1:6e:e9:
         78:1c:fa:e9:ae:4e:34:39:d7:a7:1d:df:67:3a:3a:11:8f:3a:
         7d:33:54:68:0e:27:9e:00:ea:92:b5:27:09:ca:1e:3d:25:fe:
         9a:63:2f:9d:ac:f5:17:47:25:6c:3f:58:79:00:d0:45:25:76:
         15:b7:b0:6e:4a:29:c6:32:63:89:80:39:9d:34:ff:3e:da:47:
         31:ef:bf:6e:68:7e:97:ab:42:b2:18:c7:06:c3:7e:06:5d:ec:
         c8:76:8e:d1:90:54:d2:4a:ec:28:96:35:e7:f5:29:5d:49:ab:
         41:e5:a5:68
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUClHcaPeRmYRlZzAcJwOab1wvrKowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxREE2MTMwMDAwMTEwLwYDVQQFEyhDMUY3NDI0Rjc3
RkJGNjY5RkI3NTBDNkRDN0I2NDlDNTk2OURDRDU1MB4XDTIyMDcxMzA5MjgzNFoX
DTIzMDcxMjA5MzMzNFowMzExMC8GA1UEAxMoODgwQjI2NEVEMzBCMzkyMzYzNUQ2
OTc4QkE0M0NBRTNCN0MzNDY4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMnhCEib3AN6XfNeUlcp3llWDiWy+AuXZ7xxkiOj/tBSETG2JRLfgQPs6eLz
6j1wYwd/5EDZrdSUX/ZgPNb5eRhfhkl2P0s4Nd0V7Sri3d+Bni+LGyNa4NhO8bPn
41awqoa79CEVkyfCE7MSdOGaEeD6FD9ExMTgutdd4RZCm2H5fGntMEG6/YEVf8Yn
sZ6QUgws2GeZYdWErUTU/Uiu/eHXMP7498X0bdaKp8S2+eyDFBrl8qe/82vxm9DV
zXPU8WfySfYI56Hmsj//lXJWj3CYg/GOPUlI8F+ACpeX4Q59JlyF+vFhz1nz4DkX
8QO6Esn376YjvxP+cztDVtHk4wECAwEAAaOCAhQwggIQMB0GA1UdDgQWBBSICyZO
0ws5I2NdaXi6Q8rjt8NGgTAfBgNVHSMEGDAWgBTB90JPd/v2aft1DG3HtknFlp3N
VTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9wYXJl
bnQucm92LmtvZW52YW5ob3ZlLm5sL3JlcG8vS29lbnZhbkhvdmUvMS9DMUY3NDI0
Rjc3RkJGNjY5RkI3NTBDNkRDN0I2NDlDNTk2OURDRDU1LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi93ZmRDVDNmNzlt
bjdkUXh0eDdaSnhaYWR6VlUuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3BhcmVudC5yb3Yua29lbnZhbmhvdmUubmwvcmVwby9Lb2Vu
dmFuSG92ZS8xLzMyMzAzMzJlMzEzMTM5MmUzMjMyMmUzMDJmMzIzMzJkMzIzMzIw
M2QzZTIwMzIzMTMxMzMzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy3cWMA0GCSqGSIb3DQEBCwUA
A4IBAQBl40J5512RNtZziwYDBDPugVaQMAth/qlGV8/g4vY+d3FuqMZPZMCpTFe/
hHj6i0AmFDNn5bXyyXXa71m7ld70bDIRAwn6PAqs5bPcM354W5owrVP0zKe9ULkB
8HE+YqHDq+sDRzAQHySjjSlT7xnOlFb6Hmi2KLppfzo1gJWaCkN+VddqphNIiPTL
EnKhbul4HPrprk40OdenHd9nOjoRjzp9M1RoDieeAOqStScJyh49Jf6aYy+drPUX
RyVsP1h5ANBFJXYVt7BuSinGMmOJgDmdNP8+2kcx779uaH6Xq0KyGMcGw34GXezI
do7RkFTSSuwoljXn9SldSatB5aVo
-----END CERTIFICATE-----