Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030303a3a2f32392d3239203d3e203530303538.roa
File:                     326131333a633030303a3a2f32392d3239203d3e203530303538.roa (raw, json)
Hash identifier:          a/qmVhRUB3+r+/gfMu5mgF7aYDzzgzjsgUSSXpTdxoU=
Subject key identifier:   65:7F:B1:83:19:36:E3:0F:80:B2:D3:F2:7C:40:FA:AB:37:70:F6:D0
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       1D2245DB278108BF58AAED0667257B21C9D3AD10
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030303a3a2f32392d3239203d3e203530303538.roa
Signing time:             Mon 10 Apr 2023 03:31:19 +0000
ROA not before:           Mon 10 Apr 2023 03:26:19 +0000
ROA not after:            Mon 08 Apr 2024 03:31:19 +0000
asID:                     50058
IP address blocks:        2a13:c000::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:22:45:db:27:81:08:bf:58:aa:ed:06:67:25:7b:21:c9:d3:ad:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:19 2023 GMT
            Not After : Apr  8 03:31:19 2024 GMT
        Subject: CN=657FB1831936E30F80B2D3F27C40FAAB3770F6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:21:36:16:d4:10:85:a1:b3:c6:67:27:ce:
                    94:00:b0:b9:3b:45:de:7a:e5:97:e0:50:e3:4a:78:
                    ed:0a:d2:f5:e1:27:e5:54:fd:c8:4f:1f:92:9e:62:
                    88:97:c0:41:06:96:c7:0c:16:d1:c2:00:57:81:ed:
                    8f:1a:62:d3:91:4c:a5:80:ab:fe:8e:ff:d2:70:3c:
                    35:b5:6d:e8:36:5b:0f:c9:c7:12:0d:da:3c:d5:36:
                    6f:a3:fb:06:5a:dc:82:8f:56:9c:b5:f0:b0:72:62:
                    c5:8c:2b:00:ce:47:35:d2:ae:bd:e7:7a:1a:f0:45:
                    21:a1:b5:0e:fe:69:38:76:63:1c:39:1a:6a:ad:c6:
                    9e:fa:79:f3:56:69:2a:92:69:be:29:c6:5a:66:a5:
                    42:f2:66:23:9a:ed:f3:e8:2a:2f:4c:be:3e:0b:43:
                    7c:51:3e:23:54:16:33:3d:62:fe:4b:e0:93:97:bc:
                    64:09:3f:24:2e:b4:7c:81:5d:e9:0f:b7:5e:df:17:
                    34:f2:8e:b2:8e:94:3a:de:d3:d2:22:4f:69:4c:78:
                    41:ba:ac:b3:56:ac:05:45:12:49:e7:41:ef:95:dd:
                    f0:40:03:0c:bf:fd:23:fd:16:77:99:46:c8:d8:51:
                    5a:fc:20:93:7c:da:f4:46:80:06:4b:fa:dd:cb:a0:
                    5d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7F:B1:83:19:36:E3:0F:80:B2:D3:F2:7C:40:FA:AB:37:70:F6:D0
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030303a3a2f32392d3239203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000::/29

    Signature Algorithm: sha256WithRSAEncryption
         12:cd:52:b9:4d:bf:c2:6c:4f:4b:ea:7e:09:c4:44:2b:63:0a:
         24:32:f8:f6:2e:8b:94:7a:6a:17:30:3f:d5:8e:96:ed:1f:ff:
         6f:6b:9e:fe:cc:75:c2:c1:f2:6c:24:52:48:99:4b:24:40:4b:
         15:44:b8:c2:87:b4:8f:7a:44:f2:f9:45:48:33:7c:e9:8f:76:
         6e:71:e0:aa:bf:1e:e1:7d:fd:12:a2:b2:a3:3a:5a:58:e9:33:
         d0:91:9a:7a:6e:3f:99:57:be:44:79:a6:7e:50:df:92:19:0b:
         5b:76:e7:38:0f:f2:57:cc:86:41:61:a7:be:7c:eb:f2:02:41:
         bf:5c:20:75:1e:7b:34:97:21:96:d7:5d:03:72:38:ff:4c:5a:
         b0:92:9a:de:f3:89:60:4d:c1:7c:e2:9a:51:94:6c:e3:a3:0a:
         be:c2:74:57:a4:48:c0:f1:bc:d9:12:e6:95:ac:26:28:6c:48:
         86:bf:d1:f8:9e:d9:43:79:69:87:82:d1:0e:4b:b8:02:6c:0c:
         a7:38:d2:ae:4a:e3:94:15:25:78:c9:41:c4:7f:3a:25:3e:d5:
         d9:ac:ad:66:bb:58:8c:62:29:d5:fb:71:44:11:b9:5f:09:53:
         64:14:81:a1:dc:b9:70:aa:bc:51:a2:c6:ab:58:53:69:46:76:
         0c:30:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----