Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f34382d3438203d3e203632383533.roa
File:                     326131333a633030303a323030303a3a2f34382d3438203d3e203632383533.roa (raw, json)
Hash identifier:          y6//sYI5HGY2ql/TZdHWTiyboK/UL08KxogNhshfhIw=
Subject key identifier:   66:D3:70:26:BE:E3:CE:0A:87:3B:28:0C:BA:CD:D1:F0:EC:76:EF:32
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       0687C5883750EAD936A5933E70D48F43ED56AD07
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f34382d3438203d3e203632383533.roa
Signing time:             Sun 14 May 2023 22:30:15 +0000
ROA not before:           Sun 14 May 2023 22:25:15 +0000
ROA not after:            Sun 12 May 2024 22:30:15 +0000
asID:                     62853
IP address blocks:        2a13:c000:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:87:c5:88:37:50:ea:d9:36:a5:93:3e:70:d4:8f:43:ed:56:ad:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: May 14 22:25:15 2023 GMT
            Not After : May 12 22:30:15 2024 GMT
        Subject: CN=66D37026BEE3CE0A873B280CBACDD1F0EC76EF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0e:73:7c:c5:80:3f:74:2f:dc:49:5e:38:f6:
                    af:ac:a3:26:55:fa:d3:33:37:23:6d:97:7f:46:11:
                    5f:e4:84:1a:60:00:21:e6:d6:dc:42:bf:4d:fb:96:
                    23:26:49:49:4d:e2:91:8a:5d:b1:27:58:62:e8:2e:
                    30:3b:e6:ac:31:a9:49:43:32:e7:ef:d9:94:1c:18:
                    a4:14:39:ae:cb:a4:85:68:e8:a6:76:4f:82:ea:4b:
                    45:13:03:b5:7f:f5:53:66:43:6b:fa:3b:44:52:79:
                    df:0a:82:4a:c6:57:33:be:4f:fa:e9:81:f7:ac:bd:
                    6e:92:2b:90:91:52:2d:2b:23:c9:88:e8:f2:f8:aa:
                    0f:18:e7:da:15:2d:76:98:02:19:a2:18:4e:49:61:
                    90:79:ad:e7:95:ab:85:10:91:41:20:5f:07:83:a1:
                    eb:6d:6a:39:5c:98:40:c2:a0:f2:4d:5b:d5:73:11:
                    33:04:8d:6e:3b:e6:38:0f:bb:99:d7:b3:33:04:11:
                    c8:bd:a9:fb:6d:a1:f4:ef:36:b8:06:44:3d:bc:6d:
                    86:d4:be:0a:ba:e3:86:ad:11:e9:d0:75:a9:08:54:
                    f1:60:0d:e7:d9:42:ee:f1:0c:9f:b0:71:f6:db:1d:
                    eb:84:74:f2:25:82:bc:e9:16:f8:b6:09:33:38:aa:
                    33:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D3:70:26:BE:E3:CE:0A:87:3B:28:0C:BA:CD:D1:F0:EC:76:EF:32
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030303a323030303a3a2f34382d3438203d3e203632383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:c3:95:8d:60:2b:95:0b:3d:29:ad:99:33:d0:9c:3c:50:94:
         7a:e5:8c:84:aa:60:be:b6:9d:37:cc:03:7c:94:74:9c:4c:a0:
         97:53:46:c0:b6:42:7a:3f:e3:cb:15:13:12:61:e2:1e:b4:43:
         c2:07:2b:03:9f:9e:f7:c1:e5:73:8a:d7:e5:ab:d3:2a:cd:04:
         ce:2a:8a:04:59:8a:a0:c7:75:ba:2b:b7:6b:8a:e3:7e:ff:50:
         16:3e:1c:86:55:4f:84:84:58:dc:ea:16:61:7a:9f:fc:06:e9:
         c0:62:67:78:6c:b3:b0:7b:a9:63:82:c5:f5:29:27:82:67:6f:
         f7:37:39:9d:4a:69:d3:27:77:5d:49:49:1d:3e:bf:b6:e6:08:
         22:cd:7d:78:ea:46:92:78:44:ca:8d:1d:9c:25:23:a3:e5:a6:
         4c:c3:d5:52:53:a5:59:b0:f4:80:39:9e:fb:22:8b:a9:8f:4b:
         04:56:a8:3a:a9:dd:b4:73:78:3f:1e:8f:67:eb:96:e7:d0:5e:
         c8:98:3f:30:42:ce:67:6f:5f:ff:c3:c5:ff:c8:75:ef:58:28:
         93:47:27:34:15:93:c1:c7:e9:3a:9a:21:9b:77:35:51:d6:be:
         59:dd:b0:50:1c:7f:53:34:40:23:cb:ab:d6:46:7f:f4:c9:68:
         44:ed:cd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 18:47:08 2023 by rpki-client on console-fra.rpki-client.org