Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa
File:                     323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa (raw, json)
Hash identifier:          0E+sXMslHSoTzzp9mPRmg8jgr19jUS88RazDEz42m/I=
Subject key identifier:   4D:06:9F:4F:80:C4:A5:1D:15:A0:1F:B9:3C:93:C9:2A:30:67:A9:B4
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       21949E7D7D1ECD48BA58FDE9E0283766BC874881
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa
Signing time:             Mon 10 Apr 2023 03:31:29 +0000
ROA not before:           Mon 10 Apr 2023 03:26:29 +0000
ROA not after:            Mon 08 Apr 2024 03:31:29 +0000
asID:                     57481
IP address blocks:        2602:fc23:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:94:9e:7d:7d:1e:cd:48:ba:58:fd:e9:e0:28:37:66:bc:87:48:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Apr 10 03:26:29 2023 GMT
            Not After : Apr  8 03:31:29 2024 GMT
        Subject: CN=4D069F4F80C4A51D15A01FB93C93C92A3067A9B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:b0:b4:6e:44:ba:4f:47:ac:23:49:a8:0e:
                    41:de:56:1d:29:f2:12:2e:7a:c4:96:b1:c8:f3:48:
                    ea:08:52:2c:9e:2b:3f:1f:ee:9e:c4:78:11:75:ac:
                    39:3e:1b:48:bc:3e:dd:74:73:7d:d9:46:5d:08:25:
                    cd:fa:85:52:00:d0:33:73:f5:cd:89:f3:ff:07:38:
                    38:5f:99:f9:29:2e:15:13:d3:fb:ea:0a:a0:3b:33:
                    b0:63:0a:13:68:b8:8a:2c:22:73:78:42:7b:62:0c:
                    45:e9:9d:df:02:34:d5:cf:df:cb:84:7b:fe:87:f2:
                    50:00:4e:9f:f7:4b:51:9e:05:e5:2e:d6:8b:13:fe:
                    08:51:67:9d:38:6d:3d:e4:07:c7:94:8a:1b:5f:d8:
                    cf:30:40:40:67:31:20:92:04:de:eb:2c:24:ed:fc:
                    16:19:dd:07:61:80:06:d9:26:47:ae:2e:cf:0d:49:
                    0f:f6:fa:1e:41:03:89:85:39:f8:d2:12:e3:a5:e0:
                    7a:74:00:d5:57:7b:8c:d8:f1:68:b6:4c:30:a7:c8:
                    77:c3:3f:9f:9d:fa:48:57:3f:a7:56:b2:b4:0f:db:
                    86:b4:48:cc:6d:9c:98:43:ab:ce:5e:3e:df:0c:07:
                    48:fa:96:94:b8:38:92:62:b4:ee:27:5f:e6:bc:a1:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:06:9F:4F:80:C4:A5:1D:15:A0:1F:B9:3C:93:C9:2A:30:67:A9:B4
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:58:06:a4:cb:10:0c:78:f2:56:ec:b0:4c:70:64:b8:52:
         7d:5f:07:25:7b:69:fd:0c:03:c7:82:39:13:32:17:6e:ba:40:
         6e:ef:31:2b:05:06:41:9f:38:ba:d7:e6:0f:65:45:42:08:2d:
         f1:22:e9:af:d5:a4:b1:3f:66:60:77:b2:83:01:9d:d9:05:7b:
         4c:66:a3:bb:77:b7:f2:b6:04:0a:0e:3d:08:6c:cf:a7:d0:d5:
         75:c7:0c:5e:49:c8:12:33:44:62:3a:4a:61:a2:96:11:b9:31:
         53:50:6b:c0:95:f3:e1:a1:5e:c5:e0:29:78:89:8d:ef:1a:8b:
         a9:e6:15:a3:c5:e7:17:9c:b9:4e:37:33:7d:16:63:a5:e1:f8:
         68:7f:97:32:20:92:14:e9:df:f3:d8:65:55:89:15:2a:c8:9a:
         39:90:59:af:9e:e0:83:54:d5:53:29:a4:9a:d6:ff:45:e2:a2:
         e4:51:46:cc:61:4d:99:ac:5b:3b:8a:4d:9a:94:a5:71:70:8a:
         cc:5c:f0:8d:78:10:f2:9d:a2:4b:da:8c:df:9a:63:c5:33:bb:
         19:40:7a:a4:c4:96:dc:2d:73:f5:36:6f:0c:df:44:3a:43:fc:
         5d:ea:69:34:01:fb:bb:db:78:42:17:7a:c0:57:bb:ed:15:5c:
         a2:3e:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 18:47:08 2023 by rpki-client on console-fra.rpki-client.org