Route Origin Authorization

$ rpki-client -vvf rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa
File:                     326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier:          JeCKzET+twdTutrlmRsl0OOaYxpit3D88yzGB2y0Rrk=
Subject key identifier:   DD:33:43:CB:E7:89:C5:04:71:F9:63:75:17:9D:C2:BD:E7:40:C6:34
Certificate issuer:       /CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
Certificate serial:       6060D2EB4886BB87E321687EBC7D57FCA88CFE2A
Authority key identifier: 48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9
Authority info access:    rsync://rpki.august.tw/repo/localname/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer
Subject info access:      rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa
Signing time:             Sat 23 Jul 2022 18:26:07 +0000
ROA not before:           Sat 23 Jul 2022 18:21:07 +0000
ROA not after:            Sat 22 Jul 2023 18:26:07 +0000
asID:                     50555
IP address blocks:        2a12:dd47:860c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:60:d2:eb:48:86:bb:87:e3:21:68:7e:bc:7d:57:fc:a8:8c:fe:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
        Validity
            Not Before: Jul 23 18:21:07 2022 GMT
            Not After : Jul 22 18:26:07 2023 GMT
        Subject: CN=DD3343CBE789C50471F96375179DC2BDE740C634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:65:04:bb:55:e8:ca:f9:02:5b:1c:c9:74:
                    49:f2:8f:de:c2:11:eb:d5:c6:8a:ea:b9:3d:ce:28:
                    9c:f6:38:43:8b:14:71:f2:30:90:34:92:aa:dd:2d:
                    a7:70:c9:37:18:ce:63:60:12:95:f9:78:66:ea:72:
                    71:f8:0a:c1:a2:bd:1c:f6:36:7d:8e:97:48:eb:9e:
                    ce:c2:a9:0b:03:02:bf:30:96:2a:30:ed:2a:78:6c:
                    be:0f:ed:c0:38:8e:4f:c2:7d:1d:a1:a1:83:89:ff:
                    75:8d:9b:9b:fd:a8:bb:ee:0e:20:7b:09:7d:12:e8:
                    9b:29:a6:df:91:61:96:9e:9d:f7:3c:fd:04:29:01:
                    b3:1a:56:6b:0d:b0:90:38:12:db:d9:14:fe:35:d3:
                    97:d7:3f:03:43:65:63:55:f8:b0:f1:fc:ee:f3:d4:
                    16:9c:c6:74:b8:e0:e4:8e:cd:04:5d:18:29:4a:20:
                    9f:7b:89:64:cd:06:dd:2c:74:7c:97:fd:28:a3:0f:
                    1a:c1:8e:02:4d:11:fc:3f:a3:76:f4:a9:0d:a0:3d:
                    7a:54:80:9b:45:49:e5:c5:29:dc:0b:89:f2:93:0e:
                    bb:df:64:56:49:c3:d3:d1:71:15:6a:06:04:b2:e1:
                    f2:04:66:e8:5b:70:c6:14:84:d1:10:c7:e2:79:6c:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:33:43:CB:E7:89:C5:04:71:F9:63:75:17:9D:C2:BD:E7:40:C6:34
            X509v3 Authority Key Identifier:
                keyid:48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/localname/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:860c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:a2:ae:3b:71:0d:e2:fd:9b:85:13:6e:b5:34:ee:74:49:44:
         a9:26:c8:bf:1f:b4:59:52:3c:1f:1c:94:23:9a:21:a3:53:85:
         0e:a5:77:06:bb:de:a5:88:20:ee:bb:cd:6c:18:cb:6c:22:64:
         26:be:50:54:74:c1:59:c7:10:0a:54:37:f4:02:cc:3d:d1:58:
         8c:ce:b3:e9:93:d8:35:98:fa:a3:a4:54:a6:0d:96:91:b3:f4:
         72:30:86:8a:9b:60:34:8e:68:b5:2e:6a:6b:91:f5:a4:8b:0d:
         6b:b0:9f:fd:7a:f2:3d:b2:23:fe:eb:6c:81:5a:5d:39:7a:18:
         76:f9:4b:79:b8:1e:6e:13:53:cf:bb:a4:34:f3:b2:ed:bd:a3:
         fa:46:00:c8:2e:7e:c6:da:af:69:12:fd:67:3e:91:10:d2:ef:
         f5:3d:59:7c:33:62:91:60:7f:47:3c:70:ec:5e:8a:18:62:0b:
         bb:c9:d8:94:09:1e:9f:43:cc:56:e3:e8:12:64:45:98:3b:b9:
         cf:aa:f5:9e:69:1f:00:67:55:c6:fe:64:ec:78:40:6f:43:8e:
         ee:64:17:1e:ce:6e:d8:fb:b6:65:92:7c:4b:7c:86:91:36:86:
         dc:36:6a:6d:3a:36:15:b4:d8:0b:75:ff:d7:4d:ac:da:a1:88:
         c7:8e:df:3c
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIUYGDS60iGu4fjIWh+vH1X/KiM/iowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQTAyQjY1NkVFMEMzRTcyNjM1QkRFQUQzMTE0QUI3
NDYxQTJFOTAeFw0yMjA3MjMxODIxMDdaFw0yMzA3MjIxODI2MDdaMDMxMTAvBgNV
BAMTKEREMzM0M0NCRTc4OUM1MDQ3MUY5NjM3NTE3OURDMkJERTc0MEM2MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClj2UEu1XoyvkCWxzJdEnyj97C
EevVxorquT3OKJz2OEOLFHHyMJA0kqrdLadwyTcYzmNgEpX5eGbqcnH4CsGivRz2
Nn2Ol0jrns7CqQsDAr8wliow7Sp4bL4P7cA4jk/CfR2hoYOJ/3WNm5v9qLvuDiB7
CX0S6Jsppt+RYZaenfc8/QQpAbMaVmsNsJA4EtvZFP4105fXPwNDZWNV+LDx/O7z
1BacxnS44OSOzQRdGClKIJ97iWTNBt0sdHyX/SijDxrBjgJNEfw/o3b0qQ2gPXpU
gJtFSeXFKdwLifKTDrvfZFZJw9PRcRVqBgSy4fIEZuhbcMYUhNEQx+J5bAITAgMB
AAGjggIqMIICJjAdBgNVHQ4EFgQU3TNDy+eJxQRx+WN1F53CvedAxjQwHwYDVR0j
BBgwFoAUSBoCtlbuDD5yY1verTEUq3RhoukwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8vcnBraS10ZXN0LXJlcG8ubmV0LmthZ2wubWUv
cmVwby9LZWF0b25BR0xhaXItUlBLSS1URVNULzEvNDgxQTAyQjY1NkVFMEMzRTcy
NjM1QkRFQUQzMTE0QUI3NDYxQTJFOS5jcmwwcAYIKwYBBQUHAQEEZDBiMGAGCCsG
AQUFBzAChlRyc3luYzovL3Jwa2kuYXVndXN0LnR3L3JlcG8vbG9jYWxuYW1lLzYv
NDgxQTAyQjY1NkVFMEMzRTcyNjM1QkRFQUQzMTE0QUI3NDYxQTJFOS5jZXIwgaMG
CCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5jOi8vcnBraS10ZXN0
LXJlcG8ubmV0LmthZ2wubWUvcmVwby9LZWF0b25BR0xhaXItUlBLSS1URVNULzEv
MzI2MTMxMzIzYTY0NjQzNDM3M2EzODM2MzA2MzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM1MzAzNTM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HhgwwDQYJKoZIhvcNAQELBQAD
ggEBAH6irjtxDeL9m4UTbrU07nRJRKkmyL8ftFlSPB8clCOaIaNThQ6ldwa73qWI
IO67zWwYy2wiZCa+UFR0wVnHEApUN/QCzD3RWIzOs+mT2DWY+qOkVKYNlpGz9HIw
hoqbYDSOaLUuamuR9aSLDWuwn/168j2yI/7rbIFaXTl6GHb5S3m4Hm4TU8+7pDTz
su29o/pGAMgufsbar2kS/Wc+kRDS7/U9WXwzYpFgf0c8cOxeihhiC7vJ2JQJHp9D
zFbj6BJkRZg7uc+q9Z5pHwBnVcb+ZOx4QG9Dju5kFx7Obtj7tmWSfEt8hpE2htw2
am06NhW02At1/9dNrNqhiMeO3zw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:04 2024 by rpki-client on console-fra.rpki-client.org