Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa
File:                     326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa (raw, json)
Hash identifier:          AUaf47cIJyQHz2WyFYkRZZVwrOlohwtGLQLlGF6X8sE=
Subject key identifier:   CB:58:DC:57:00:57:D6:6F:B7:F9:CF:A0:4A:E6:1A:84:09:F2:DF:0E
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       30E3E804928AD57C4CAFFBDC7901292F52E5AB67
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa
Signing time:             Mon 10 Apr 2023 03:31:21 +0000
ROA not before:           Mon 10 Apr 2023 03:26:21 +0000
ROA not after:            Mon 08 Apr 2024 03:31:21 +0000
asID:                     59486
IP address blocks:        2a13:c000:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e3:e8:04:92:8a:d5:7c:4c:af:fb:dc:79:01:29:2f:52:e5:ab:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:21 2023 GMT
            Not After : Apr  8 03:31:21 2024 GMT
        Subject: CN=CB58DC570057D66FB7F9CFA04AE61A8409F2DF0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:d8:29:03:11:5f:c8:54:39:5c:ad:43:cd:
                    c6:89:14:e6:f5:d0:7f:6f:56:ff:0b:d1:46:5b:30:
                    22:9e:4e:a6:b4:ca:07:7b:07:1e:a8:91:e3:3b:5e:
                    e2:45:fa:51:52:04:8f:6a:b1:b5:6d:11:48:bc:48:
                    8f:e6:1d:08:97:28:2d:f1:f4:a7:a9:ab:58:7d:4f:
                    f2:9d:47:4e:75:3e:4a:2b:68:2d:2c:46:06:0d:7a:
                    51:77:11:fe:d0:03:88:3b:1e:d6:5a:e9:cc:b4:e1:
                    ba:d3:16:67:06:ce:a3:da:46:09:36:57:7f:b8:3f:
                    5b:6b:c1:db:90:9a:48:a5:23:55:69:85:7d:7b:05:
                    63:a8:95:2e:0e:01:70:31:d6:bf:9f:9d:c5:5b:7f:
                    51:d2:7b:cc:c5:d5:cc:b8:55:d5:8f:c2:62:fd:6f:
                    80:21:f5:9e:b0:cd:11:84:b1:36:74:28:8a:30:6c:
                    86:a1:79:98:aa:78:cb:d9:b8:5f:37:fd:79:f9:1b:
                    f8:43:1a:38:7f:7b:ab:cd:a8:2c:a7:e7:6c:38:59:
                    4a:ff:7a:22:2f:53:5c:bd:49:09:69:89:18:92:03:
                    1c:4b:59:57:d3:ec:df:c5:ba:65:7e:bf:85:58:75:
                    60:c1:1a:d0:68:1d:06:ad:57:cb:db:38:ea:1f:bd:
                    b6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:58:DC:57:00:57:D6:6F:B7:F9:CF:A0:4A:E6:1A:84:09:F2:DF:0E
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:92:91:0c:b8:20:f7:38:17:68:f7:29:ef:d7:fe:83:21:50:
         27:de:f8:fe:19:d0:1c:f5:9d:22:d1:cc:a7:67:72:e9:49:8d:
         4c:a3:93:25:43:24:b1:75:94:ed:11:ad:a5:ef:4c:26:00:9a:
         54:81:15:31:15:e7:f6:b8:bc:91:35:cb:68:fc:25:ba:35:4e:
         d4:9a:99:61:eb:ac:3a:30:02:45:8c:1c:e0:6a:ab:c6:57:6a:
         a2:da:11:b1:5c:73:82:ef:b8:e1:a5:09:ad:96:e7:99:9b:c6:
         44:73:17:a7:4d:51:5d:cf:02:ce:15:ac:de:f3:a8:dd:9a:2a:
         f3:68:63:45:e8:b3:bd:82:40:f4:e8:84:8d:3f:79:1a:22:d2:
         51:63:48:02:a7:52:69:1a:90:fa:6d:da:74:93:96:51:ac:b3:
         5f:83:43:d3:a8:32:38:a4:07:6e:2f:68:8b:d8:49:38:05:72:
         e3:09:08:18:24:6a:59:ce:45:ec:f3:5e:6e:eb:30:6e:5a:2c:
         f1:1d:66:4c:5d:3c:51:3e:70:69:95:4e:f5:fc:c3:7f:0d:32:
         fd:3d:da:63:43:0f:1b:84:e4:e1:3f:de:db:ab:a9:49:df:20:
         cd:10:c6:e3:05:88:cd:55:4c:34:28:c9:59:3a:87:fb:41:98:
         99:df:17:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----