Route Origin Authorization

$ rpki-client -vvf repo1.rpki.qs.nu/repo/cynthia-ca1/0/323030313a3637633a313139303a3a2f34382d3438203d3e203537373832.roa
File:                     323030313a3637633a313139303a3a2f34382d3438203d3e203537373832.roa (raw, json)
Hash identifier:          1apMGEVD6JW7Le7prTFzbhWKHls1cjc+O1QDAcmqAGs=
Subject key identifier:   1C:10:38:DB:A1:3C:05:3B:C5:9E:1A:0B:43:2A:CB:FB:E1:97:16:89
Certificate issuer:       /CN=4587accbdb6bc11f2a0a1fcb3d7dabe2278f5de9
Certificate serial:       3B13CB4C12CCD449187C873B7AF3060948DEFB10
Authority key identifier: 45:87:AC:CB:DB:6B:C1:1F:2A:0A:1F:CB:3D:7D:AB:E2:27:8F:5D:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYesy9trwR8qCh_LPX2r4iePXek.cer
Subject info access:      rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/0/323030313a3637633a313139303a3a2f34382d3438203d3e203537373832.roa
Signing time:             Mon 30 May 2022 13:00:00 +0000
ROA not before:           Mon 30 May 2022 12:55:00 +0000
ROA not after:            Mon 29 May 2023 13:00:00 +0000
asID:                     57782
IP address blocks:        2001:67c:1190::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:13:cb:4c:12:cc:d4:49:18:7c:87:3b:7a:f3:06:09:48:de:fb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4587accbdb6bc11f2a0a1fcb3d7dabe2278f5de9
        Validity
            Not Before: May 30 12:55:00 2022 GMT
            Not After : May 29 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:f6:64:82:22:2b:50:c1:98:7f:54:80:fc:
                    c6:a0:d3:01:f5:c5:17:d7:ab:cb:7c:48:11:7c:7c:
                    5f:a0:fe:5e:4e:a5:47:ec:7c:52:d7:23:26:72:55:
                    98:b3:d5:df:f3:8e:dd:85:da:7a:5d:c8:a1:2d:88:
                    6b:f8:14:86:75:e0:cc:2d:43:74:1a:64:2d:08:45:
                    a4:4b:51:0d:65:cf:07:a7:95:96:85:8d:30:d5:16:
                    a6:e3:4c:55:7d:70:a2:d4:72:e1:1b:9e:35:0b:33:
                    70:06:42:98:e8:45:f9:1a:95:51:18:26:a0:46:e4:
                    7f:57:7a:e2:e2:dc:82:85:a6:a4:2a:fb:2e:be:ce:
                    84:17:43:bb:e0:55:04:7d:81:0d:28:15:0b:77:45:
                    0a:73:5a:60:e1:26:eb:2d:df:ec:45:47:37:17:55:
                    ec:e6:45:e7:0f:3d:46:9a:d6:1a:30:b5:61:9c:01:
                    3c:e4:19:68:e2:d9:aa:29:d4:8e:7f:69:d4:15:25:
                    2c:51:85:f2:d6:cd:0d:9a:64:35:e4:d0:fe:0d:8f:
                    84:35:c8:f5:79:32:d9:0e:2f:48:27:94:36:14:8f:
                    0d:f3:d4:46:b4:06:d9:6b:5e:56:e2:18:68:22:24:
                    3d:77:f0:b3:d3:c5:6a:a6:04:cd:14:16:f4:34:f0:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:10:38:DB:A1:3C:05:3B:C5:9E:1A:0B:43:2A:CB:FB:E1:97:16:89
            X509v3 Authority Key Identifier:
                keyid:45:87:AC:CB:DB:6B:C1:1F:2A:0A:1F:CB:3D:7D:AB:E2:27:8F:5D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/0/4587ACCBDB6BC11F2A0A1FCB3D7DABE2278F5DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYesy9trwR8qCh_LPX2r4iePXek.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo1.rpki.qs.nu/repo/cynthia-ca1/0/323030313a3637633a313139303a3a2f34382d3438203d3e203537373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1190::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:31:d5:d5:3f:0e:d1:ed:4e:0f:f0:9a:24:47:d1:17:c5:
         b9:fe:38:09:c4:a9:4a:2a:55:98:32:8c:70:24:29:e1:8c:18:
         46:df:64:d8:1a:0b:4f:9b:6c:9f:85:9d:09:ea:e7:13:4a:ce:
         6d:7f:ec:4a:3a:8d:77:54:f7:0f:20:da:49:83:72:a7:d3:33:
         e5:fb:18:18:0b:ba:78:f9:de:fb:8a:8f:e8:8a:18:5d:2a:87:
         99:df:7f:23:8b:b8:b5:41:2a:4c:bd:7e:0e:8a:65:01:a1:42:
         08:cf:df:28:fd:52:f7:f6:ae:b4:a7:93:bb:ba:0b:2c:1b:e2:
         d4:08:b3:0b:bd:a9:07:2a:60:5c:03:95:68:55:bc:63:34:e4:
         e2:c1:cd:57:24:b5:48:09:14:ab:a7:9b:c4:86:92:8a:72:82:
         66:2d:52:56:4a:6d:7d:36:f0:5a:8c:a2:4c:45:d3:cf:06:af:
         87:c5:e4:95:db:e8:b7:70:5e:64:db:82:9f:49:18:bf:70:ef:
         95:66:f9:9c:73:83:bd:0e:89:9e:bf:a5:ce:e2:c3:aa:a2:2f:
         ce:8c:dc:fa:4f:e0:0e:9b:ab:0b:9a:f5:58:78:f1:d9:ca:6c:
         f3:d4:46:9e:e8:46:41:f0:03:f6:1d:e0:12:64:23:2d:34:ef:
         04:62:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----