Route Origin Authorization

$ rpki-client -vvf repo1.rpki.qs.nu/repo/cynthia-ca1/0/323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa
File:                     323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (raw, json)
Hash identifier:          jlR8QvxGKE4oFqVzZ+wfZvQByV0NzMlSHAnI1rbt8cc=
Subject key identifier:   AD:B5:E7:C7:D3:5F:D8:EC:0C:B8:95:44:25:2F:CE:95:25:8F:49:46
Certificate issuer:       /CN=4587accbdb6bc11f2a0a1fcb3d7dabe2278f5de9
Certificate serial:       7A8D47CE122DFD1B52913181C904C17D19877683
Authority key identifier: 45:87:AC:CB:DB:6B:C1:1F:2A:0A:1F:CB:3D:7D:AB:E2:27:8F:5D:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYesy9trwR8qCh_LPX2r4iePXek.cer
Subject info access:      rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/0/323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa
Signing time:             Mon 30 May 2022 13:00:00 +0000
ROA not before:           Mon 30 May 2022 12:55:00 +0000
ROA not after:            Mon 29 May 2023 13:00:00 +0000
asID:                     210089
IP address blocks:        2001:67c:1190::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8d:47:ce:12:2d:fd:1b:52:91:31:81:c9:04:c1:7d:19:87:76:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4587accbdb6bc11f2a0a1fcb3d7dabe2278f5de9
        Validity
            Not Before: May 30 12:55:00 2022 GMT
            Not After : May 29 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:40:88:b8:04:fa:55:8b:14:3a:37:da:06:2a:
                    b0:cb:13:b2:89:9d:71:77:4f:ed:81:51:4f:fd:06:
                    31:73:2c:83:7e:d2:2b:8b:f0:ce:c6:58:8b:af:8f:
                    44:21:3b:ad:1b:a8:6e:d8:6f:78:45:2f:7c:20:d0:
                    b3:ab:28:71:83:db:6b:bc:d5:85:38:fd:73:c0:e2:
                    8c:e8:98:c7:7a:92:dc:9f:39:12:51:b1:e9:55:ee:
                    25:fa:6b:96:e7:3d:8f:93:40:dc:2c:62:be:c3:a9:
                    dd:c7:14:6f:13:03:4f:8e:75:e4:fb:a2:ba:12:34:
                    ef:04:ed:ed:97:da:f0:fb:34:4d:c5:57:ad:a2:cb:
                    0f:12:13:5d:23:ed:6e:f3:52:8f:fc:c2:a3:1a:82:
                    a4:cc:c5:3a:d5:a2:4a:42:2e:29:dd:31:bc:cf:99:
                    ba:44:89:2f:ad:cb:fd:85:22:1e:a5:f7:56:d3:7a:
                    01:a0:cf:e5:d4:48:f2:67:b4:d8:88:6f:82:c3:04:
                    11:da:9e:46:58:66:fb:7a:42:5b:5c:5a:8b:1b:55:
                    7a:25:83:9c:95:77:ef:de:c9:cf:96:ad:5f:d3:22:
                    fd:58:0b:f4:61:e8:b9:d5:10:b1:50:84:ef:4c:6a:
                    3b:f6:42:e9:08:82:d8:8a:ba:ca:b3:cd:2d:a1:be:
                    b6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B5:E7:C7:D3:5F:D8:EC:0C:B8:95:44:25:2F:CE:95:25:8F:49:46
            X509v3 Authority Key Identifier:
                keyid:45:87:AC:CB:DB:6B:C1:1F:2A:0A:1F:CB:3D:7D:AB:E2:27:8F:5D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/0/4587ACCBDB6BC11F2A0A1FCB3D7DABE2278F5DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYesy9trwR8qCh_LPX2r4iePXek.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/0/323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1190::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:fa:46:af:c2:85:85:92:f8:98:58:10:ef:23:32:b6:97:07:
         3c:fc:f6:f9:5e:75:76:a5:90:ed:4c:20:4a:a7:5e:6d:8a:80:
         0e:ce:69:0c:92:e4:34:8c:97:e2:e3:cf:f5:56:54:17:2b:da:
         0f:d3:1b:1b:a1:7c:c9:e9:40:86:9b:97:09:09:75:28:0b:5f:
         52:e3:db:b0:0a:c6:58:f6:8e:4b:cc:fe:f9:f4:2f:88:c6:d4:
         6f:db:ec:71:58:11:13:b2:88:e1:62:25:f3:8f:8c:81:e3:28:
         ab:92:21:ed:80:3e:a0:2a:f8:41:be:8c:08:1c:f9:cc:4b:9f:
         36:11:f4:f2:35:2e:cc:e2:98:48:62:a1:50:ac:df:1a:e4:0d:
         c9:94:68:6d:96:6c:bd:19:48:29:c0:bc:19:30:7f:79:85:1b:
         19:aa:c9:5f:2a:3f:1b:bb:2d:f2:f6:57:94:ee:73:1c:7c:e3:
         bc:45:7f:df:67:c8:91:0d:46:d0:bb:00:e5:20:2a:07:83:e8:
         45:da:98:c9:ee:cc:c6:56:be:25:5e:a9:3c:a5:ba:9e:7c:e6:
         0c:a6:6a:fa:2b:9a:5b:ad:f1:5e:4b:46:c2:dd:2a:7d:5c:96:
         18:37:65:1a:9b:77:19:b6:7b:60:32:fb:da:e4:5d:b7:48:ab:
         a8:d2:bc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----