Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202939/1/326130363a313238373a616330303a3a2f33392d3438203d3e20323032393339.roa
File:                     326130363a313238373a616330303a3a2f33392d3438203d3e20323032393339.roa (raw, json)
Hash identifier:          DQo5LUFeAQLQxky6gpnzMbzW3Z1RhvqZDtI+T8rtT1Q=
Subject key identifier:   93:AA:9F:AE:6F:01:A0:DC:17:04:75:0F:0D:43:B1:DD:B7:B1:B9:E3
Certificate issuer:       /CN=5751DFEFDB738B2721C5210F09368B7D6BBED611
Certificate serial:       36DEE2794E20D4C2059BE8F5F6D9094307BC1889
Authority key identifier: 57:51:DF:EF:DB:73:8B:27:21:C5:21:0F:09:36:8B:7D:6B:BE:D6:11
Authority info access:    rsync://rpki.co/repo/AS205432/0/5751DFEFDB738B2721C5210F09368B7D6BBED611.cer
Subject info access:      rsync://rpki.co/repo/AS202939/1/326130363a313238373a616330303a3a2f33392d3438203d3e20323032393339.roa
Signing time:             Sun 14 May 2023 03:23:20 +0000
ROA not before:           Sun 14 May 2023 03:18:20 +0000
ROA not after:            Sun 12 May 2024 03:23:20 +0000
asID:                     202939
IP address blocks:        2a06:1287:ac00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:de:e2:79:4e:20:d4:c2:05:9b:e8:f5:f6:d9:09:43:07:bc:18:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5751DFEFDB738B2721C5210F09368B7D6BBED611
        Validity
            Not Before: May 14 03:18:20 2023 GMT
            Not After : May 12 03:23:20 2024 GMT
        Subject: CN=93AA9FAE6F01A0DC1704750F0D43B1DDB7B1B9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:7f:55:6b:99:4f:0a:eb:2b:fd:11:f8:da:
                    29:0a:8f:8c:4c:28:23:94:0a:b1:69:61:4a:3e:ba:
                    b4:f6:1b:70:46:ba:00:e6:a2:77:ea:28:bd:c8:e6:
                    09:18:45:55:c4:a9:90:9c:b0:56:08:18:2a:44:5f:
                    94:37:2a:a2:81:48:9f:fe:f6:b6:22:99:5d:12:e8:
                    8e:38:f7:d2:51:b0:ab:81:87:c5:7f:60:80:87:e4:
                    8e:15:18:47:2c:f4:35:13:5c:a4:dd:81:c7:0f:57:
                    0f:d4:d6:33:f8:03:b8:bf:52:c4:d7:f4:eb:b4:a9:
                    78:82:f5:46:5c:c2:ac:31:62:08:9d:1d:a3:d6:5a:
                    ec:e6:42:21:0b:44:56:9b:5f:f9:75:61:84:fe:09:
                    6f:99:af:ae:d0:da:f0:a8:96:46:7a:03:12:42:32:
                    18:f7:f5:41:14:39:7a:0e:62:72:93:86:1a:5c:d4:
                    02:1e:72:16:9d:a7:e4:90:d0:ac:fd:4b:bb:94:05:
                    24:c4:e1:be:33:de:ef:a7:9a:fb:80:bb:eb:f6:3d:
                    80:8a:5b:02:c1:ad:39:2c:51:56:88:aa:ca:9f:a7:
                    b1:9b:f8:87:2e:95:7c:f3:9f:59:4a:90:f8:84:3e:
                    ef:4a:6d:8a:80:85:ad:3b:4c:5b:99:d5:ab:12:28:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AA:9F:AE:6F:01:A0:DC:17:04:75:0F:0D:43:B1:DD:B7:B1:B9:E3
            X509v3 Authority Key Identifier:
                keyid:57:51:DF:EF:DB:73:8B:27:21:C5:21:0F:09:36:8B:7D:6B:BE:D6:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202939/1/5751DFEFDB738B2721C5210F09368B7D6BBED611.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/5751DFEFDB738B2721C5210F09368B7D6BBED611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202939/1/326130363a313238373a616330303a3a2f33392d3438203d3e20323032393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:ac00::/39

    Signature Algorithm: sha256WithRSAEncryption
         1d:9c:fe:e6:8b:9b:14:ea:07:82:9a:c1:f1:45:75:6c:f8:f4:
         e4:25:9a:db:cd:33:23:dc:8b:51:98:1e:43:69:b2:1d:b1:8a:
         63:50:87:81:36:b4:e7:56:bc:b6:d5:ed:41:06:06:a7:49:0d:
         28:db:aa:61:e3:00:2a:9b:53:8b:88:a1:fc:e4:ad:08:d3:f2:
         0e:e6:ac:d2:98:26:9e:d5:c4:0e:6c:92:5c:34:29:04:21:4b:
         a4:00:d7:12:df:f7:c5:4c:0b:31:83:90:67:61:75:ab:32:76:
         bc:69:7e:26:61:34:8b:96:11:81:c0:cd:46:47:85:61:4f:29:
         65:4d:db:5b:06:e0:5b:7c:e9:e9:ce:fe:6d:58:c0:5a:c5:06:
         52:ba:b4:0e:94:bf:cf:ca:58:0d:bf:f7:62:99:fa:21:b1:2c:
         31:a1:fe:79:f8:60:b8:9c:00:e8:94:d9:63:8b:34:c0:f0:52:
         10:5e:a9:ae:6c:36:a6:81:77:03:79:03:48:94:17:9b:8e:a1:
         72:53:7b:55:3d:92:dd:af:c7:39:19:89:5b:b3:69:be:54:f5:
         6f:a1:16:e5:19:4f:52:34:5d:dc:ee:0c:fe:44:9b:53:77:ce:
         33:00:c9:6d:97:5f:47:f4:7a:d1:22:a3:ce:bd:c5:c6:fd:0d:
         2e:c6:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----