Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa
File:                     326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa (raw, json)
Hash identifier:          1RcX+vPz68P6jYlgRwwqkxsrTxoW4aJbqZL8aaSF4ko=
Subject key identifier:   8F:68:04:6E:3F:75:A2:54:4B:B4:29:B1:5E:25:27:B7:6F:07:CF:44
Certificate issuer:       /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial:       31AF6AF435AE1B85867A6A1B39C914C8E98E6BB3
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa
Signing time:             Tue 06 Dec 2022 14:47:14 +0000
ROA not before:           Tue 06 Dec 2022 14:42:14 +0000
ROA not after:            Tue 05 Dec 2023 14:47:14 +0000
asID:                     210563
IP address blocks:        2a11:f2c0:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:af:6a:f4:35:ae:1b:85:86:7a:6a:1b:39:c9:14:c8:e9:8e:6b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
        Validity
            Not Before: Dec  6 14:42:14 2022 GMT
            Not After : Dec  5 14:47:14 2023 GMT
        Subject: CN=8F68046E3F75A2544BB429B15E2527B76F07CF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:e7:32:e2:04:6d:5f:95:bd:d2:70:4d:19:
                    6e:44:61:fd:c6:a7:5c:b3:4a:39:e2:f1:22:0a:3e:
                    d0:94:cb:61:ae:4e:32:f0:12:ce:19:51:ce:72:e3:
                    85:ef:20:e3:40:8a:9c:1b:f2:04:d2:07:48:e3:a1:
                    ba:9b:da:34:07:ef:29:b8:38:f2:0c:5b:e3:f7:a7:
                    96:e0:67:41:09:d5:7e:e1:8e:f1:4d:39:9f:3b:b2:
                    a7:d8:f6:93:12:4a:6c:02:68:37:11:47:88:7a:ba:
                    76:36:a3:8f:2d:8e:6b:ed:ef:8f:3a:51:ce:4c:d3:
                    dc:e0:0d:16:f3:4b:c0:73:39:11:e6:87:de:48:5b:
                    10:fa:a4:06:6a:14:6b:21:36:d3:1b:55:71:f4:61:
                    1e:1d:a8:c0:a8:02:2b:ba:d3:74:b9:62:0f:c6:b5:
                    82:9c:5e:50:e0:33:e1:e2:db:0f:2a:9a:df:52:23:
                    cc:b7:8b:5c:85:ce:eb:2f:f9:e5:ec:62:df:1d:31:
                    73:f2:8e:f5:ef:c3:62:da:01:92:45:7f:d5:af:96:
                    af:c0:91:f6:60:8b:a5:32:1a:27:6d:32:1f:9f:8f:
                    54:14:51:33:53:83:85:35:ed:db:ec:70:77:5f:f0:
                    dd:a2:0f:9f:d9:d1:3f:20:3d:51:8f:a1:23:ec:18:
                    4b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:68:04:6E:3F:75:A2:54:4B:B4:29:B1:5E:25:27:B7:6F:07:CF:44
            X509v3 Authority Key Identifier:
                keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:bf:96:7e:4e:4d:97:29:6b:49:a6:aa:b1:1e:59:f2:f2:
         35:c7:3c:ab:17:6a:6f:97:ff:cb:5e:4e:83:b2:05:cb:a5:7c:
         fd:8b:7a:6c:d7:db:c7:03:dd:5d:56:61:0e:f6:f9:fe:f2:2e:
         24:d4:1f:e6:ca:b8:27:8d:19:0e:4e:16:c4:e9:45:0e:52:c1:
         21:a1:78:5b:da:c6:c3:6a:7c:bd:6d:37:b2:d6:ca:18:a5:3c:
         a6:23:9f:dd:8e:5d:f7:a5:d8:bd:38:1b:2e:7a:9f:79:91:22:
         71:83:cf:cf:41:8b:f7:84:2b:1f:4d:8a:ec:52:15:0c:19:cf:
         8f:9f:89:06:4a:e3:15:f5:ec:17:dc:10:5c:58:87:b2:81:4a:
         49:80:e8:0e:84:21:51:ae:df:4c:95:7f:9b:aa:ec:46:f2:02:
         84:f1:ca:a0:b5:e0:0a:cd:91:94:cb:81:fd:61:4f:00:11:21:
         97:80:b8:c5:78:95:8f:ec:6c:4b:ec:d3:5e:df:e7:9b:07:4c:
         48:42:79:64:52:10:a7:9a:30:c7:08:bf:59:c3:26:cb:84:5d:
         11:58:b0:4d:5d:cb:0b:e0:10:58:6e:e8:33:f9:b4:05:32:11:
         51:f4:6c:75:14:c1:e6:6c:7e:6c:5e:aa:27:d9:8f:78:e6:5e:
         23:43:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----