Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/32332e3134392e3233322e302f32342d3234203d3e203530303538.roa
File:                     32332e3134392e3233322e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier:          N3LU1vsMP1nz4eKOz80gzigQHExiBVz1laY5zeZWUYk=
Subject key identifier:   B0:86:FE:E7:F5:24:02:9E:E4:1B:3E:41:B7:51:93:7F:7F:11:B8:CF
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       71A1FF39FF15FFB9E3A7E363ACCA78EEC707E4D9
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/32332e3134392e3233322e302f32342d3234203d3e203530303538.roa
Signing time:             Mon 10 Apr 2023 03:31:29 +0000
ROA not before:           Mon 10 Apr 2023 03:26:29 +0000
ROA not after:            Mon 08 Apr 2024 03:31:29 +0000
asID:                     50058
IP address blocks:        23.149.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a1:ff:39:ff:15:ff:b9:e3:a7:e3:63:ac:ca:78:ee:c7:07:e4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Apr 10 03:26:29 2023 GMT
            Not After : Apr  8 03:31:29 2024 GMT
        Subject: CN=B086FEE7F524029EE41B3E41B751937F7F11B8CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:3e:8a:f1:35:d8:49:16:c7:2f:02:3e:31:
                    29:e3:27:26:80:19:74:7c:0a:5b:0d:5f:10:17:31:
                    4c:43:2d:da:af:9a:0e:a9:17:98:26:2c:14:a8:ce:
                    c5:01:0e:25:88:45:64:17:4e:e4:01:fe:e0:c4:c8:
                    cf:c0:7c:e2:d4:0e:4d:1c:e8:18:6a:ab:f2:73:25:
                    de:13:f8:07:8b:1d:d2:47:3d:1e:51:94:2a:2b:08:
                    08:01:2e:21:1c:91:58:7c:93:36:c4:cd:4c:c8:71:
                    f4:b9:9e:ba:4d:93:8a:fb:8d:28:c9:29:6b:90:65:
                    06:e9:1d:5c:51:77:44:3b:42:d6:ff:cb:44:81:22:
                    b7:65:1b:c3:40:ec:70:12:74:81:f3:9e:ec:f4:8c:
                    91:2e:5a:a6:a6:80:6a:8a:43:1b:a5:6c:f7:2f:c4:
                    22:64:5e:61:e2:e2:92:5a:ab:72:22:90:1b:97:61:
                    c6:b3:be:bd:d6:9e:2e:cc:9d:f5:f0:8e:7c:cc:a2:
                    b3:72:71:16:55:ea:5a:f6:15:17:85:3a:3b:44:f6:
                    35:df:fe:f5:2e:3a:f3:e4:84:a3:88:25:85:12:40:
                    b9:29:ab:4e:97:65:3f:90:50:fd:41:fc:7e:57:ac:
                    66:89:c5:87:85:c8:a5:5f:6f:24:77:2f:98:58:f4:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:86:FE:E7:F5:24:02:9E:E4:1B:3E:41:B7:51:93:7F:7F:11:B8:CF
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/32332e3134392e3233322e302f32342d3234203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:da:6c:aa:27:54:6b:c5:42:59:b5:e9:6c:45:38:2a:e7:dc:
         76:a8:c3:83:f4:e2:1d:2e:31:6d:22:67:04:da:52:8f:36:8f:
         b8:e0:6b:b4:5c:35:e4:51:6f:35:10:61:d6:a5:76:44:01:cf:
         3d:2f:c2:34:ba:42:c1:e9:30:5a:4c:33:53:9d:b8:3e:7a:d4:
         38:83:4a:13:a8:ac:d4:f4:0d:c0:44:bd:9d:74:9e:3c:b9:90:
         83:5e:02:a0:7e:58:49:e3:c3:9b:74:46:ec:9d:70:2e:50:ff:
         87:6e:79:bf:bb:65:09:72:1f:e7:9b:7b:e5:69:28:6f:54:d4:
         f7:0b:ed:ac:9d:de:b4:0d:c1:ab:ab:1f:d7:75:3c:d0:f2:c7:
         76:57:87:df:16:14:cb:72:db:b9:6f:b1:25:ac:71:87:c1:5c:
         5d:ec:6d:b8:b3:85:48:5f:35:71:b3:0d:ab:4f:89:a8:32:d1:
         a2:27:92:e0:7d:98:fd:f5:a9:ce:0c:b3:44:17:0c:93:41:b8:
         62:2f:bc:35:fd:15:21:84:8f:2b:3d:cf:90:3a:c7:30:a8:db:
         4a:18:0f:d0:0b:cb:94:7d:72:22:c3:37:84:57:c4:83:d9:90:
         2d:01:bd:2a:4c:69:60:b6:06:66:f9:02:93:02:59:89:8d:ee:
         f1:28:c1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:10:48 2023 by rpki-client on console-fra.rpki-client.org