Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f34342d3434203d3e203133353836.roa
File:                     326131333a633030303a323030303a3a2f34342d3434203d3e203133353836.roa (raw, json)
Hash identifier:          ZuIg8H6ukZvCOMWXSPJ1kzQ3WWGEvnDdTua3n2MSyn0=
Subject key identifier:   BA:C6:45:48:73:C1:93:DA:9B:CB:C1:C3:4E:76:D1:03:DD:31:98:76
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       707CC8DC925DBBAC3A578033F7DDD68213B1CE1B
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f34342d3434203d3e203133353836.roa
Signing time:             Sat 06 May 2023 22:43:25 +0000
ROA not before:           Sat 06 May 2023 22:38:25 +0000
ROA not after:            Sat 04 May 2024 22:43:25 +0000
asID:                     13586
IP address blocks:        2a13:c000:2000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7c:c8:dc:92:5d:bb:ac:3a:57:80:33:f7:dd:d6:82:13:b1:ce:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: May  6 22:38:25 2023 GMT
            Not After : May  4 22:43:25 2024 GMT
        Subject: CN=BAC6454873C193DA9BCBC1C34E76D103DD319876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:e4:01:f1:f3:67:eb:61:65:09:79:6f:62:
                    33:39:a8:69:94:81:55:57:60:6b:d9:c4:3a:2d:5a:
                    dd:45:c6:35:b3:a3:29:17:80:0f:17:56:48:11:52:
                    ee:b0:ab:1a:db:24:19:3f:db:41:77:01:0c:13:28:
                    cc:42:58:6e:3d:b4:83:4e:a2:1f:33:46:52:cc:8b:
                    78:1a:df:bf:ee:53:38:c8:80:2a:a7:b1:15:19:ab:
                    34:9d:a2:89:fd:bf:1b:87:40:9e:d0:9b:d3:cd:03:
                    7c:51:45:03:ce:9d:3f:05:48:2f:c8:6c:bc:a8:12:
                    bf:1f:2e:6b:6f:55:f1:83:fb:1d:39:66:a0:70:b4:
                    22:de:be:5d:7b:2e:c6:f2:c0:c1:c1:2f:b5:b5:44:
                    96:c1:63:e2:82:25:a5:84:ce:63:81:73:fc:d7:8f:
                    8a:a1:c1:9d:10:07:8d:af:38:6b:26:8e:1b:cb:b2:
                    1f:7e:8f:e4:64:33:69:d4:12:c6:b1:a3:32:c9:0f:
                    21:0a:ee:d8:92:db:3a:15:f7:4a:f5:38:39:25:e4:
                    e6:c0:87:68:0f:57:a0:de:e6:d8:c1:b5:e8:ab:5c:
                    0e:00:87:cb:4c:47:90:a7:1a:a0:10:76:8c:ed:35:
                    b9:17:1c:00:e8:28:8f:4b:99:6c:4c:20:17:d4:88:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C6:45:48:73:C1:93:DA:9B:CB:C1:C3:4E:76:D1:03:DD:31:98:76
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f34342d3434203d3e203133353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000:2000::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:45:66:cc:f2:c9:f0:23:24:01:7a:0f:11:10:46:cd:c4:23:
         0e:6c:43:99:e3:08:ff:9b:80:2e:e0:cb:71:14:3e:4b:9e:25:
         a5:0c:41:3a:f8:d0:1a:04:ea:3f:51:d7:ae:50:70:1d:2d:7d:
         ff:a6:d0:88:3b:d7:b6:f4:26:c1:21:e5:0a:26:70:e7:94:99:
         95:60:79:ab:8c:c9:c1:f7:56:ea:7a:a9:cf:ed:c7:06:fb:2c:
         8c:79:1b:71:14:7a:d6:91:3c:31:34:c4:5a:dd:e2:a5:2f:e8:
         b7:f5:74:07:9b:96:2e:d3:81:45:8a:68:96:79:ca:9f:4a:62:
         7f:c5:c7:74:b4:f6:2f:20:fb:8c:7f:03:a9:3d:f2:ce:08:e5:
         5c:89:af:5c:99:95:ab:be:9f:8d:22:08:91:ce:fc:db:61:f5:
         b3:2c:e9:ea:95:06:dd:ea:b0:9f:da:9c:f7:69:89:ec:1d:1f:
         f3:00:4f:fa:eb:8a:c4:d9:00:03:56:d2:62:1a:41:11:27:cf:
         55:db:30:0a:ab:e6:2c:a7:12:5d:4f:12:09:e2:d7:84:79:66:
         38:fb:a4:88:cd:7f:fe:e8:5e:ba:3e:ee:dd:29:4e:e2:4f:0c:
         64:86:09:8b:3b:0d:4f:81:3e:e2:94:a0:3c:ca:6d:18:1e:01:
         81:da:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 18:47:08 2023 by rpki-client on console-fra.rpki-client.org