Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/32332e3133392e34302e302f32332d3233203d3e203530303538.roa
File:                     32332e3133392e34302e302f32332d3233203d3e203530303538.roa (raw, json)
Hash identifier:          AeXTcnDBmK6vmnDuuAHDyP6QNDRyhg4NXCqEKw+so8Q=
Subject key identifier:   C9:0C:8E:19:1B:3E:0B:0D:15:B5:8F:06:2D:6F:A3:E2:C1:2E:79:52
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       1BC50C0A17B54270D226EA724FDD1615F86A94E0
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/32332e3133392e34302e302f32332d3233203d3e203530303538.roa
Signing time:             Fri 07 Jul 2023 04:25:35 +0000
ROA not before:           Fri 07 Jul 2023 04:20:35 +0000
ROA not after:            Fri 05 Jul 2024 04:25:35 +0000
asID:                     50058
IP address blocks:        23.139.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c5:0c:0a:17:b5:42:70:d2:26:ea:72:4f:dd:16:15:f8:6a:94:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Jul  7 04:20:35 2023 GMT
            Not After : Jul  5 04:25:35 2024 GMT
        Subject: CN=C90C8E191B3E0B0D15B58F062D6FA3E2C12E7952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:6d:75:7d:97:de:68:f2:db:4c:f7:c3:a7:
                    bc:7d:72:d7:37:6b:5c:7b:0c:49:19:70:57:2f:e0:
                    2c:d8:d9:32:72:e8:e1:1a:dc:ca:96:fd:c0:f2:03:
                    bc:af:3f:73:d9:b2:4d:80:09:66:3d:41:cd:35:66:
                    70:34:e1:28:3d:e6:2f:8e:21:54:1b:9e:ad:ae:c4:
                    d1:0f:ce:3d:30:bc:c4:c2:b0:1e:a9:9e:ed:73:6f:
                    1b:db:36:1f:fc:16:6e:5a:1f:e5:92:b6:c6:2e:10:
                    bb:85:f2:5f:92:22:79:70:94:f4:7c:ed:cf:73:20:
                    4b:ec:84:4e:cd:5a:d8:62:c5:f3:81:e9:28:38:3a:
                    3f:6c:a9:a0:d3:af:98:37:4d:ea:ec:2a:4d:6c:53:
                    a2:b9:3c:31:69:71:60:4d:33:73:49:0f:04:8d:50:
                    88:d0:4b:de:6f:68:3d:70:80:6a:04:1d:c9:ab:70:
                    67:0c:f3:6d:69:dd:e4:d5:11:1d:ea:59:68:dc:cc:
                    49:e6:86:9d:50:92:01:93:77:bc:06:9b:c2:aa:f4:
                    ad:47:d2:99:6f:35:32:43:8f:50:40:1b:2e:fb:84:
                    ce:91:d7:f3:77:e2:b2:98:ce:b8:bd:40:54:ef:fd:
                    f1:d7:d0:9c:2a:d0:cd:03:9d:fa:16:4b:6e:49:cc:
                    a0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:8E:19:1B:3E:0B:0D:15:B5:8F:06:2D:6F:A3:E2:C1:2E:79:52
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/32332e3133392e34302e302f32332d3233203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:5c:2a:d1:44:70:ab:6a:a0:87:48:88:82:d0:5a:07:ad:8b:
         4d:31:79:66:04:bc:40:2b:79:d2:81:62:b8:39:e0:d4:be:20:
         c1:28:ac:92:b2:2d:88:98:d3:60:a4:fa:65:95:6d:95:96:1f:
         4a:52:6b:f2:75:0a:0b:2e:a4:69:7f:57:df:07:f5:9d:04:fe:
         b1:37:17:52:55:a0:aa:48:1b:d6:dc:9f:42:e6:57:a6:8f:37:
         30:dc:97:85:d6:bd:f3:1f:65:dc:41:10:81:d2:22:c7:df:08:
         e7:9f:fa:73:14:10:e9:2f:ec:cb:f3:4f:22:36:bc:ae:19:bb:
         c7:bb:47:75:cf:f0:ea:f1:bc:3c:99:81:a1:3d:49:62:49:09:
         9b:a9:3d:86:5b:c7:98:f9:bc:dc:71:f7:c2:41:4d:ae:95:eb:
         83:bb:bb:00:a9:0d:9a:dd:4d:88:ac:08:06:e0:de:df:30:56:
         9a:fd:2c:8f:1a:83:cf:c6:87:6c:e7:05:30:5c:1c:47:19:b7:
         51:69:c8:1f:d7:44:98:85:f4:d3:b2:77:8a:6f:c8:7c:a8:c5:
         5a:7f:5f:d5:fb:ed:56:df:96:91:fc:43:7e:08:68:c8:48:3b:
         f0:d4:f0:45:0a:42:ea:d4:66:ee:22:78:eb:82:f9:b2:48:ca:
         e2:56:7d:51
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUG8UMChe1QnDSJupyT90WFfhqlOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1
NUVCNEUzQTAeFw0yMzA3MDcwNDIwMzVaFw0yNDA3MDUwNDI1MzVaMDMxMTAvBgNV
BAMTKEM5MEM4RTE5MUIzRTBCMEQxNUI1OEYwNjJENkZBM0UyQzEyRTc5NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtG11fZfeaPLbTPfDp7x9ctc3
a1x7DEkZcFcv4CzY2TJy6OEa3MqW/cDyA7yvP3PZsk2ACWY9Qc01ZnA04Sg95i+O
IVQbnq2uxNEPzj0wvMTCsB6pnu1zbxvbNh/8Fm5aH+WStsYuELuF8l+SInlwlPR8
7c9zIEvshE7NWthixfOB6Sg4Oj9sqaDTr5g3TersKk1sU6K5PDFpcWBNM3NJDwSN
UIjQS95vaD1wgGoEHcmrcGcM821p3eTVER3qWWjczEnmhp1QkgGTd7wGm8Kq9K1H
0plvNTJDj1BAGy77hM6R1/N34rKYzri9QFTv/fHX0Jwq0M0DnfoWS25JzKCDAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUyQyOGRs+Cw0VtY8GLW+j4sEueVIwHwYDVR0j
BBgwFoAUmla2AMRGbhfUaz24AwZlilXrTjowDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEwLzlBNTZC
NjAwQzQ0NjZFMTdENDZCM0RCODAzMDY2NThBNTVFQjRFM0EuY3JsMGYGCCsGAQUF
BwEBBFowWDBWBggrBgEFBQcwAoZKcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0
LzYvOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1NUVCNEUzQS5jZXIw
cgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kuY28vcmVw
by9BUzk0NS8xMC8zMjMzMmUzMTMzMzkyZTM0MzAyZTMwMmYzMjMzMmQzMjMzMjAz
ZDNlMjAzNTMwMzAzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF4soMA0GCSqGSIb3DQEBCwUAA4IB
AQCaXCrRRHCraqCHSIiC0FoHrYtNMXlmBLxAK3nSgWK4OeDUviDBKKySsi2ImNNg
pPpllW2Vlh9KUmvydQoLLqRpf1ffB/WdBP6xNxdSVaCqSBvW3J9C5lemjzcw3JeF
1r3zH2XcQRCB0iLH3wjnn/pzFBDpL+zL808iNryuGbvHu0d1z/Dq8bw8mYGhPUli
SQmbqT2GW8eY+bzccffCQU2uleuDu7sAqQ2a3U2IrAgG4N7fMFaa/SyPGoPPxods
5wUwXBxHGbdRacgf10SYhfTTsneKb8h8qMVaf1/V++1W35aR/EN+CGjISDvw1PBF
CkLq1GbuInjrgvmySMriVn1R
-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:49 2023 by rpki-client on console-ams.rpki-client.org