Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa
File:                     326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa (raw, json)
Hash identifier:          ywkLNcMGAkgFl2iiRxmJe0+BcsWoJ6yoaZEObMGy4dM=
Subject key identifier:   03:B5:7B:90:04:2C:BE:BE:4F:F3:CD:5C:3F:0B:CF:05:6A:1D:39:51
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       2B159D3F53B9E2B355A046D3090B7A33E289569F
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa
Signing time:             Mon 10 Apr 2023 03:31:25 +0000
ROA not before:           Mon 10 Apr 2023 03:26:25 +0000
ROA not after:            Mon 08 Apr 2024 03:31:25 +0000
asID:                     199331
IP address blocks:        2a13:c007:8013::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:15:9d:3f:53:b9:e2:b3:55:a0:46:d3:09:0b:7a:33:e2:89:56:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:25 2023 GMT
            Not After : Apr  8 03:31:25 2024 GMT
        Subject: CN=03B57B90042CBEBE4FF3CD5C3F0BCF056A1D3951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:6d:7a:f5:14:30:90:17:cb:24:60:65:22:
                    d5:08:e1:fe:1e:03:fe:73:0a:0a:7e:cc:ce:f9:9f:
                    4e:7d:ac:6a:7d:27:f6:13:e1:ac:16:e1:e6:c3:9d:
                    dc:57:85:ff:20:68:6c:88:cf:40:52:d1:53:a3:38:
                    bd:02:aa:75:c9:a1:ef:4a:59:ce:20:6c:11:b1:36:
                    56:5b:80:6a:e7:2b:27:cf:2f:a7:97:42:3c:7f:d1:
                    67:06:da:e3:63:ef:72:6c:bb:33:de:68:68:c6:6c:
                    87:37:f6:a7:36:a6:57:bc:79:94:53:e0:18:6b:99:
                    eb:f7:0e:10:b2:39:01:dd:c7:a3:ca:00:91:84:b7:
                    61:d4:9f:1d:f7:91:1d:9e:6c:b6:29:98:3b:9c:8f:
                    b5:c3:0c:10:3a:81:ca:fb:d1:c9:3e:c7:d6:45:d5:
                    84:da:c1:c7:5a:2f:f2:bf:97:dd:06:31:b1:4c:1e:
                    64:9a:9f:de:27:2b:bf:69:99:87:fb:0f:e1:a0:d0:
                    e9:72:a5:d5:ba:b8:86:04:b2:f7:4c:87:2a:1f:2c:
                    d8:9e:b7:4c:d6:1b:da:4a:65:43:33:f4:00:1c:20:
                    3d:9c:9d:6d:a8:b5:77:51:b7:01:bd:8e:32:7f:66:
                    f7:f6:7c:12:fd:43:b0:f4:b4:aa:61:bd:b5:2f:df:
                    1b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B5:7B:90:04:2C:BE:BE:4F:F3:CD:5C:3F:0B:CF:05:6A:1D:39:51
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8013::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:17:54:f3:62:ff:c3:1f:ab:6e:0d:98:db:4a:23:e0:a3:85:
         fa:e6:c2:62:1d:0c:de:30:86:a0:51:eb:3a:5f:00:b9:c0:1d:
         36:57:e9:14:b5:d6:36:77:b0:b8:7d:ec:79:31:f2:1b:2d:9c:
         36:fd:63:fe:be:5f:77:45:2d:5c:6c:19:29:b2:a6:d2:46:9c:
         6f:69:ad:d5:8e:93:b1:26:1d:2b:c1:cf:2b:52:b7:ad:0c:00:
         79:83:fe:72:ae:6a:5d:80:99:08:8a:05:da:7f:de:22:4c:84:
         5d:a0:21:8f:c4:f0:01:29:31:00:cd:8d:2b:55:85:58:d5:04:
         8b:bd:ac:81:75:bb:e8:0d:50:77:32:20:fc:5a:0a:5a:5e:5f:
         b9:22:c3:b1:02:9f:7f:84:31:2f:8d:ed:66:d5:42:40:e2:f6:
         5e:67:cb:93:d7:df:de:7d:b9:b9:6b:cb:f4:4e:82:76:bc:21:
         e0:36:cc:18:f5:e5:5d:e1:ff:42:31:3f:0c:f7:70:14:86:b7:
         80:3c:ce:54:f1:17:ea:ba:35:99:fa:f2:e5:8f:21:ea:cb:3b:
         ed:a4:d8:4f:b3:09:ed:5a:fd:c4:49:b2:2e:8c:76:db:e1:1c:
         b1:64:ed:d5:d5:d8:72:38:0d:0c:00:16:4c:d9:fa:73:30:d2:
         54:64:4b:9a
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUKxWdP1O54rNVoEbTCQt6M+KJVp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ0QTIyNEE5NTY1RjY3RTQ5MTRFNkY4QzJCM0MzNDMw
M0M5Qzg3NTAeFw0yMzA0MTAwMzI2MjVaFw0yNDA0MDgwMzMxMjVaMDMxMTAvBgNV
BAMTKDAzQjU3QjkwMDQyQ0JFQkU0RkYzQ0Q1QzNGMEJDRjA1NkExRDM5NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tm169RQwkBfLJGBlItUI4f4e
A/5zCgp+zM75n059rGp9J/YT4awW4ebDndxXhf8gaGyIz0BS0VOjOL0CqnXJoe9K
Wc4gbBGxNlZbgGrnKyfPL6eXQjx/0WcG2uNj73JsuzPeaGjGbIc39qc2ple8eZRT
4Bhrmev3DhCyOQHdx6PKAJGEt2HUnx33kR2ebLYpmDucj7XDDBA6gcr70ck+x9ZF
1YTawcdaL/K/l90GMbFMHmSan94nK79pmYf7D+Gg0OlypdW6uIYEsvdMhyofLNie
t0zWG9pKZUMz9AAcID2cnW2otXdRtwG9jjJ/Zvf2fBL9Q7D0tKphvbUv3xsFAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQUA7V7kAQsvr5P881cPwvPBWodOVEwHwYDVR0j
BBgwFoAUrUoiSpVl9n5JFOb4wrPDQwPJyHUwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzUvQUQ0QTIy
NEE5NTY1RjY3RTQ5MTRFNkY4QzJCM0MzNDMwM0M5Qzg3NS5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
MS9BRDRBMjI0QTk1NjVGNjdFNDkxNEU2RjhDMkIzQzM0MzAzQzlDODc1LmNlcjB9
BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzUvMzI2MTMxMzMzYTYzMzAzMDM3M2EzODMwMzEzMzNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzkzOTMzMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoTwAeAEzANBgkq
hkiG9w0BAQsFAAOCAQEABBdU82L/wx+rbg2Y20oj4KOF+ubCYh0M3jCGoFHrOl8A
ucAdNlfpFLXWNnewuH3seTHyGy2cNv1j/r5fd0UtXGwZKbKm0kacb2mt1Y6TsSYd
K8HPK1K3rQwAeYP+cq5qXYCZCIoF2n/eIkyEXaAhj8TwASkxAM2NK1WFWNUEi72s
gXW76A1QdzIg/FoKWl5fuSLDsQKff4QxL43tZtVCQOL2XmfLk9ff3n25uWvL9E6C
drwh4DbMGPXlXeH/QjE/DPdwFIa3gDzOVPEX6ro1mfry5Y8h6ss77aTYT7MJ7Vr9
xEmyLox22+EcsWTt1dXYcjgNDAAWTNn6czDSVGRLmg==
-----END CERTIFICATE-----