Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa
File:                     326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa (raw, json)
Hash identifier:          kerEQutFPpd32xXSmHlXzIhElBVdESgGGh2yGCQu5AU=
Subject key identifier:   21:53:CB:53:7F:4B:3A:44:A0:09:18:BF:CF:01:FA:04:9F:7F:57:24
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       354396F933FA2F025C5B5B19F343774E894FBA6B
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa
Signing time:             Fri 15 Sep 2023 03:07:55 +0000
ROA not before:           Fri 15 Sep 2023 03:02:55 +0000
ROA not after:            Fri 13 Sep 2024 03:07:55 +0000
asID:                     7719
IP address blocks:        2a13:c000:2000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:43:96:f9:33:fa:2f:02:5c:5b:5b:19:f3:43:77:4e:89:4f:ba:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Sep 15 03:02:55 2023 GMT
            Not After : Sep 13 03:07:55 2024 GMT
        Subject: CN=2153CB537F4B3A44A00918BFCF01FA049F7F5724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:c2:1f:40:20:81:69:b2:52:63:95:09:1a:
                    e7:b8:82:02:ac:98:72:38:d1:d1:58:31:ba:9c:20:
                    5e:8f:0b:3a:2b:a0:39:97:ec:14:8f:9b:ab:d7:4c:
                    b7:a1:2a:65:8b:6b:37:86:a8:66:8c:ed:59:56:b5:
                    2a:61:1c:7e:af:89:9f:0c:38:52:1e:53:7f:a7:55:
                    57:a1:30:ad:5f:1c:a9:d7:f6:86:8e:21:11:c5:8c:
                    94:35:7f:b5:f5:ff:19:3d:57:0b:22:c8:6e:f9:54:
                    69:b7:93:88:03:6c:ef:8f:95:93:37:d3:f3:86:47:
                    e2:e1:a9:4c:5f:f3:40:e8:53:a6:8f:00:24:dc:77:
                    4b:c4:77:d7:a7:9a:6f:e6:0d:8b:3d:b7:44:8d:0a:
                    98:5a:34:f8:be:2a:df:00:74:d3:7f:d6:6c:00:7d:
                    bc:86:4a:79:86:5c:3e:c8:01:80:b8:46:a6:99:a1:
                    97:a5:2a:b1:66:c2:d6:03:48:a0:0f:5a:c4:94:64:
                    12:6b:9e:03:7a:98:bd:a7:03:19:da:f4:e3:9a:cf:
                    f4:a6:91:82:f8:f5:d6:3d:81:74:20:95:55:06:20:
                    1d:66:4e:31:ad:29:c2:83:3b:e0:ba:40:f9:21:bf:
                    e1:72:2e:bd:09:6c:7b:e0:8a:0d:7f:ff:7c:c1:13:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:53:CB:53:7F:4B:3A:44:A0:09:18:BF:CF:01:FA:04:9F:7F:57:24
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:23:8a:20:69:df:05:56:e0:a6:2f:c5:29:7e:b6:ca:ea:9b:
         68:fc:35:5f:85:fb:c1:97:ae:33:a6:7b:45:72:c0:94:32:1c:
         eb:6d:ff:e6:c1:0d:ea:35:3a:e4:f1:1e:68:fc:d1:c2:da:c0:
         84:6b:16:fa:3b:c4:98:d7:f3:04:03:78:40:df:4c:c2:d3:9b:
         a6:46:55:6e:65:bf:5d:71:99:1a:2a:91:29:dc:9f:91:44:fe:
         7d:66:22:34:5e:d4:fb:24:aa:75:d1:5f:86:33:20:85:f5:68:
         7e:0b:52:58:83:27:11:3e:7f:62:a7:b4:00:39:8c:e4:10:41:
         b2:d7:9a:8c:2c:73:2e:7d:97:fc:6a:24:41:cc:7b:44:78:ed:
         f5:59:86:a0:6d:55:df:7f:27:7b:f5:8a:c2:6a:6e:35:00:ed:
         80:56:bc:7f:8a:6e:f5:97:68:0c:b3:89:56:44:6c:73:8d:c3:
         7d:42:fb:15:ea:38:e7:11:49:89:99:1a:58:26:ce:4e:cf:19:
         39:08:10:4c:e1:2b:c6:0d:50:04:f5:13:49:58:a2:51:b6:3e:
         74:17:b2:1b:82:71:00:29:aa:aa:ef:f6:20:5f:92:12:54:77:
         6e:36:b6:18:ae:35:95:10:44:43:51:ce:b2:f8:16:bb:ae:f0:
         84:93:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----