Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/323430373a396538303a3a2f33322d3332203d3e203634323937.roa
File:                     323430373a396538303a3a2f33322d3332203d3e203634323937.roa (raw, json)
Hash identifier:          MKuGnpZ60DSK/b5WEF/hr8uWY44ucZ99U8eaS+KudvM=
Subject key identifier:   D1:A3:02:60:AE:5E:65:F5:FD:7B:34:8F:7C:CD:BB:36:D1:4C:31:B7
Certificate issuer:       /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial:       1AAB2D1E25D53C2D0FD152A0DCA894FFD6B12C9E
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/323430373a396538303a3a2f33322d3332203d3e203634323937.roa
Signing time:             Mon 15 Jul 2024 04:39:46 +0000
ROA not before:           Mon 15 Jul 2024 04:34:46 +0000
ROA not after:            Mon 14 Jul 2025 04:39:46 +0000
asID:                     64297
IP address blocks:        2407:9e80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ab:2d:1e:25:d5:3c:2d:0f:d1:52:a0:dc:a8:94:ff:d6:b1:2c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
        Validity
            Not Before: Jul 15 04:34:46 2024 GMT
            Not After : Jul 14 04:39:46 2025 GMT
        Subject: CN=D1A30260AE5E65F5FD7B348F7CCDBB36D14C31B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0e:c2:df:7b:ee:35:c6:11:b2:ce:f7:68:d8:
                    cd:c7:4e:a8:ed:38:31:b3:3e:db:70:d5:07:6b:ed:
                    2d:6d:8e:fe:16:6b:57:99:8f:cb:e3:26:28:fd:5f:
                    31:7e:3c:4d:2f:87:2f:da:dd:d0:32:2b:54:cb:2a:
                    3c:c9:f0:92:f3:b1:11:90:c6:71:6f:c5:74:e1:de:
                    92:d5:20:2d:aa:99:1d:08:a0:49:4a:26:ab:4e:d9:
                    71:12:3b:b7:40:94:df:5e:2a:ca:9b:f4:48:08:e3:
                    ff:e7:57:a0:88:f7:14:27:09:be:bc:5e:e0:72:aa:
                    5f:30:6a:75:d1:21:0a:01:7b:b3:5e:6c:39:16:ee:
                    4c:c4:7a:b2:1d:ec:6f:94:7f:03:24:98:98:4b:75:
                    39:5e:16:f7:fe:f9:0a:79:68:d1:45:d5:96:8d:e5:
                    61:f9:21:d3:d5:26:81:bb:46:4f:c7:a8:1c:45:23:
                    24:28:7f:40:1b:9a:77:e8:4e:62:af:6f:43:ae:1d:
                    cb:2b:be:4a:35:ad:f8:0c:c9:a0:30:ff:05:24:3a:
                    81:9c:37:31:e0:1f:ba:1a:18:fa:82:59:33:c7:84:
                    64:e3:35:8d:a0:c3:5c:ea:a3:a1:72:b7:ca:35:bd:
                    5b:f4:d4:2a:f4:22:7a:87:41:b1:29:8f:36:ce:57:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A3:02:60:AE:5E:65:F5:FD:7B:34:8F:7C:CD:BB:36:D1:4C:31:B7
            X509v3 Authority Key Identifier:
                keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/323430373a396538303a3a2f33322d3332203d3e203634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:b6:c7:f5:84:31:cd:64:90:0f:61:a5:9a:75:54:fb:65:b1:
         e8:ce:e7:9c:d7:08:bf:a2:ec:4c:37:94:0b:7e:02:b3:82:52:
         ff:0a:04:e9:94:ab:bc:5c:57:a3:9e:0b:e9:f6:d5:42:18:31:
         fd:63:1f:52:6b:f7:c2:d3:86:7b:c6:f9:77:ee:fd:9a:e6:b9:
         7a:e0:10:c7:ca:32:6f:27:c0:e8:f0:f4:36:5f:1e:c6:88:66:
         1c:46:bb:07:39:fc:81:3c:21:81:15:91:ef:22:ca:13:7a:7d:
         39:dc:e7:1e:10:bd:dd:4e:0b:33:b1:c0:aa:52:51:39:6e:4a:
         6c:a8:6e:22:4b:09:9f:01:f4:64:bf:64:12:b9:f3:6d:e4:ab:
         06:5a:38:36:e1:dd:70:21:7f:ad:69:50:75:47:f0:fa:f0:e7:
         e6:41:6e:db:a9:c2:35:32:d8:91:da:88:18:b1:4a:6c:0c:51:
         cf:a1:81:9f:04:41:eb:d5:0e:c0:fe:9e:b5:a8:4d:ab:9e:59:
         4d:10:9e:bb:33:89:eb:95:a3:d0:47:69:02:ec:70:dd:d6:bb:
         54:94:aa:01:9d:54:22:de:6f:29:f2:04:cc:cb:d4:07:21:a2:
         a4:65:c3:e1:d9:fb:e5:3d:f6:84:c4:95:43:73:82:72:bf:59:
         5a:a6:52:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----