Route Origin Authorization

$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa
File:                     326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier:          g1At5H1WGB9pJd143T4S3ULq7iOWiXWKs6MoqCgmWaY=
Subject key identifier:   18:BC:E6:9F:46:8C:E1:BC:17:A0:C7:2C:F1:3F:F0:6A:4F:A7:FE:19
Certificate issuer:       /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial:       287108896EE6F599209907C5F89CC9E21BBCF6D5
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Authority info access:    rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access:      rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa
Signing time:             Mon 11 Mar 2024 07:12:22 +0000
ROA not before:           Mon 11 Mar 2024 07:07:22 +0000
ROA not after:            Mon 10 Mar 2025 07:12:22 +0000
asID:                     50555
IP address blocks:        2a12:dd47:860e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:71:08:89:6e:e6:f5:99:20:99:07:c5:f8:9c:c9:e2:1b:bc:f6:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
        Validity
            Not Before: Mar 11 07:07:22 2024 GMT
            Not After : Mar 10 07:12:22 2025 GMT
        Subject: CN=18BCE69F468CE1BC17A0C72CF13FF06A4FA7FE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d4:f1:68:1f:9b:ca:73:14:0a:51:2f:9d:4e:
                    85:2b:6d:e9:8a:22:39:5d:19:fd:89:bb:07:fc:ec:
                    94:59:18:0e:47:e7:fc:ef:b0:63:c7:bd:2c:45:96:
                    02:86:9e:8e:01:74:d4:b5:b9:6d:0c:bb:e8:29:ba:
                    d6:3e:4b:4a:fe:41:e8:20:59:fb:bf:2f:d0:8b:72:
                    b1:5d:60:c2:1c:55:2f:93:66:1a:e2:d1:a1:36:ce:
                    b1:98:6a:99:ac:c7:3f:93:85:1a:3b:6d:96:34:f8:
                    bd:02:a9:fb:72:d7:fb:17:eb:21:4e:7d:dd:a1:fd:
                    8a:86:03:db:b9:e3:c7:8d:a5:b9:e0:56:9d:08:6a:
                    45:6a:a1:9b:7b:1b:f2:aa:fb:20:85:19:c8:6f:24:
                    e6:dc:96:59:58:3a:44:5e:62:31:b4:cd:4c:de:2b:
                    9a:f4:d3:33:69:ff:83:07:63:77:5b:bc:9a:14:f9:
                    11:99:c9:8c:57:d2:65:aa:7f:73:30:2d:8f:55:a1:
                    b9:29:cd:74:c5:32:06:70:26:4d:35:04:a8:ce:7c:
                    18:3a:fa:11:88:52:23:a0:1d:fa:30:61:26:56:60:
                    cc:f1:9f:7b:13:f7:d6:33:01:07:79:c3:cb:2a:ec:
                    79:bc:dc:8f:96:4c:f7:c5:90:2a:88:af:07:7f:18:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BC:E6:9F:46:8C:E1:BC:17:A0:C7:2C:F1:3F:F0:6A:4F:A7:FE:19
            X509v3 Authority Key Identifier:
                keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:860e::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:59:19:a2:67:ee:0d:ff:6c:6d:91:bd:ae:b1:e4:71:ab:60:
         22:d8:aa:33:b2:7c:47:41:57:ef:9d:d7:b7:64:a5:c6:c8:9a:
         72:2d:74:12:6a:da:e5:5e:f8:bb:8e:93:94:57:1b:08:10:a9:
         83:b5:dd:4c:de:f4:df:93:e5:cd:7b:97:2f:66:76:b0:09:ea:
         12:df:b9:4b:bf:c1:9d:2a:83:5c:01:f9:3a:fa:25:f9:b7:69:
         4f:67:65:32:fb:35:7a:b7:47:49:61:ea:08:51:d3:98:04:6f:
         1e:1a:f1:a9:36:46:6c:e5:55:fb:4d:85:70:24:47:68:26:2d:
         a4:a2:70:0e:0f:b1:66:9b:ad:1e:cd:d6:40:f0:52:09:9b:ae:
         8c:ce:9f:28:2a:0d:70:ca:75:95:f5:77:c2:09:36:b4:84:c8:
         fe:77:bf:40:b4:8d:6f:af:7a:6d:47:a9:e4:d8:a7:6b:41:78:
         3c:c6:b9:99:3e:9d:25:51:ee:f6:58:31:a4:04:7e:48:15:de:
         05:4d:57:d2:b8:32:1c:91:20:12:52:81:d1:8c:64:22:24:7a:
         87:9e:42:99:63:78:58:4e:55:60:6f:21:17:63:ee:ef:bb:f4:
         a3:08:86:c1:93:1b:e1:77:4a:87:43:d4:74:60:3d:e5:cf:2d:
         d1:4f:ea:e4
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUKHEIiW7m9ZkgmQfF+JzJ4hu89tUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI4NzZDMTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZDRkFD
RENDNThBMzAeFw0yNDAzMTEwNzA3MjJaFw0yNTAzMTAwNzEyMjJaMDMxMTAvBgNV
BAMTKDE4QkNFNjlGNDY4Q0UxQkMxN0EwQzcyQ0YxM0ZGMDZBNEZBN0ZFMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11PFoH5vKcxQKUS+dToUrbemK
IjldGf2Juwf87JRZGA5H5/zvsGPHvSxFlgKGno4BdNS1uW0Mu+gputY+S0r+Qegg
Wfu/L9CLcrFdYMIcVS+TZhri0aE2zrGYapmsxz+ThRo7bZY0+L0Cqfty1/sX6yFO
fd2h/YqGA9u548eNpbngVp0IakVqoZt7G/Kq+yCFGchvJObclllYOkReYjG0zUze
K5r00zNp/4MHY3dbvJoU+RGZyYxX0mWqf3MwLY9VobkpzXTFMgZwJk01BKjOfBg6
+hGIUiOgHfowYSZWYMzxn3sT99YzAQd5w8sq7Hm83I+WTPfFkCqIrwd/GBihAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUGLzmn0aM4bwXoMcs8T/wak+n/hkwHwYDVR0j
BBgwFoAUAodsEZJMvaAb4a05oyBs+s3MWKMwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdM
YWlyLVRFU1QvMS8wMjg3NkMxMTkyNENCREEwMUJFMUFEMzlBMzIwNkNGQUNEQ0M1
OEEzLmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBr
aS5jby9yZXBvL0FTOTQ1LzEvMDI4NzZDMTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZD
RkFDRENDNThBMy5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJz
eW5jOi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdMYWlyLVRFU1QvMS8zMjYx
MzEzMjNhNjQ2NDM0MzczYTM4MzYzMDY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMDM1MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeGDjANBgkqhkiG9w0BAQsFAAOCAQEA
HFkZomfuDf9sbZG9rrHkcatgItiqM7J8R0FX753Xt2Slxsiaci10Emra5V74u46T
lFcbCBCpg7XdTN7035PlzXuXL2Z2sAnqEt+5S7/BnSqDXAH5Ovol+bdpT2dlMvs1
erdHSWHqCFHTmARvHhrxqTZGbOVV+02FcCRHaCYtpKJwDg+xZputHs3WQPBSCZuu
jM6fKCoNcMp1lfV3wgk2tITI/ne/QLSNb696bUep5Nina0F4PMa5mT6dJVHu9lgx
pAR+SBXeBU1X0rgyHJEgElKB0YxkIiR6h55CmWN4WE5VYG8hF2Pu77v0owiGwZMb
4XdKh0PUdGA95c8t0U/q5A==
-----END CERTIFICATE-----