Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/32332e3133392e34302e302f32342d3234203d3e203630333236.roa
File:                     32332e3133392e34302e302f32342d3234203d3e203630333236.roa (raw, json)
Hash identifier:          e2+UgibhSU9sNoRJUKqGwTdvfUompTNp1A+Gd2glz8k=
Subject key identifier:   C4:B9:E1:B9:23:5D:7A:94:AC:50:F5:35:F5:05:98:C8:E4:5D:60:31
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       1C2022767CDB3CF1DCFF423B5DE9C793D113079F
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/32332e3133392e34302e302f32342d3234203d3e203630333236.roa
Signing time:             Mon 10 Apr 2023 03:31:28 +0000
ROA not before:           Mon 10 Apr 2023 03:26:28 +0000
ROA not after:            Mon 08 Apr 2024 03:31:28 +0000
asID:                     60326
IP address blocks:        23.139.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:20:22:76:7c:db:3c:f1:dc:ff:42:3b:5d:e9:c7:93:d1:13:07:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Apr 10 03:26:28 2023 GMT
            Not After : Apr  8 03:31:28 2024 GMT
        Subject: CN=C4B9E1B9235D7A94AC50F535F50598C8E45D6031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:84:55:04:ae:ae:ac:15:d8:b9:b4:8c:e5:
                    3b:a7:c2:32:c9:13:5f:39:71:43:31:ad:fc:ae:87:
                    46:5e:82:41:5c:52:a0:e6:cb:3b:51:72:92:1d:db:
                    a2:ce:be:6e:85:67:ff:6f:83:86:a8:93:43:14:56:
                    21:9a:d1:dc:0b:a5:29:5d:c5:c5:b6:32:04:98:ad:
                    e0:0d:13:e4:e2:46:ae:ad:e6:62:85:cc:31:55:f8:
                    87:9e:b2:26:20:ff:f1:59:55:3f:2b:be:f7:06:ae:
                    c3:86:a7:bf:2b:79:d6:f5:36:16:8d:63:01:8b:dc:
                    c9:7a:8d:89:34:04:3c:d3:de:0c:ce:5a:5b:8c:14:
                    7c:1f:99:31:b5:69:a8:f0:b1:cc:70:f3:ee:0c:78:
                    cc:dd:45:80:8f:d0:e1:f7:6f:d2:eb:8c:56:d1:bc:
                    5e:5e:63:d2:a3:b9:aa:43:42:4c:13:a9:c5:c8:e4:
                    87:3f:b4:b7:9a:c1:63:49:0a:a1:b2:13:b6:c2:8a:
                    ae:94:bc:22:28:ff:b0:0d:3a:2c:09:98:8e:d0:85:
                    ed:28:5b:4a:c1:c6:73:2b:72:0f:8c:47:e3:ac:8b:
                    8f:d6:ba:df:e2:d2:6d:34:0e:d9:a5:ee:39:13:22:
                    4c:15:5b:16:d2:bb:ec:4e:82:65:ce:40:53:66:72:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B9:E1:B9:23:5D:7A:94:AC:50:F5:35:F5:05:98:C8:E4:5D:60:31
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/32332e3133392e34302e302f32342d3234203d3e203630333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:27:9f:57:29:48:f3:a9:27:bf:99:e2:03:52:7a:88:d7:50:
         ff:83:3a:2c:33:04:0a:a4:6b:cb:bc:c5:2a:e8:51:2f:98:35:
         26:5d:2f:ba:09:6a:74:73:47:2d:8f:d3:fc:b0:fa:72:b1:d6:
         8e:cc:2a:ea:a7:90:1b:d0:60:3f:4a:71:b3:bb:09:33:84:73:
         3b:9c:2f:a8:c6:fd:68:81:13:27:c4:d1:da:c8:d5:81:95:d5:
         40:13:9b:2f:9b:2e:f0:00:35:30:b5:05:dc:ad:02:3d:cc:9b:
         84:57:9f:c3:6a:bf:8e:d4:4b:9c:9b:38:b9:f2:76:dc:b9:f0:
         88:c4:b8:96:36:1d:02:d1:fa:99:98:fd:95:71:fe:f1:43:c1:
         ae:6b:17:17:b7:d0:d9:db:6b:75:40:5a:13:04:a7:1e:15:89:
         8b:e5:33:66:2e:35:9d:70:ee:69:54:0b:7f:e8:29:1d:46:70:
         0f:71:fc:c8:08:36:05:f0:49:9d:af:ad:b8:1e:09:0a:f3:c7:
         4f:5d:bd:6d:37:2c:11:a6:ad:0e:32:62:5d:b7:60:b6:e1:5c:
         e1:0b:50:9e:d3:b5:c5:cb:99:2c:92:f8:cf:71:37:8a:ac:61:
         90:4a:46:b9:88:c2:75:16:2d:84:eb:55:89:4f:fd:7d:70:9c:
         a0:24:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 17:29:05 2024 by rpki-client on console-fra.rpki-client.org