Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa
File:                     326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa (raw, json)
Hash identifier:          ea4mn05mH/9dnPF/avPGhCHlXFpvHyvLCuy5XDJCvWA=
Subject key identifier:   F2:52:BC:EA:02:DB:55:B6:B1:44:60:EB:08:91:8C:4A:39:B2:43:7C
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       015E1A0FD75592CC2FA8A9EC41653AA976679EDB
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa
Signing time:             Mon 10 Apr 2023 03:31:20 +0000
ROA not before:           Mon 10 Apr 2023 03:26:20 +0000
ROA not after:            Mon 08 Apr 2024 03:31:20 +0000
asID:                     199327
IP address blocks:        2a13:c007:8050::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5e:1a:0f:d7:55:92:cc:2f:a8:a9:ec:41:65:3a:a9:76:67:9e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:20 2023 GMT
            Not After : Apr  8 03:31:20 2024 GMT
        Subject: CN=F252BCEA02DB55B6B14460EB08918C4A39B2437C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bb:ed:8a:2f:8d:57:81:d5:2b:22:ce:ee:b1:
                    0c:1c:aa:db:c4:54:e0:b9:eb:d8:47:a4:bc:d8:7b:
                    a6:fc:3b:e4:9f:7f:74:6b:e0:be:6c:ea:af:f6:f8:
                    97:c3:5c:42:6d:fc:8d:3f:38:63:c0:38:40:cf:97:
                    71:d0:42:61:d8:ad:e3:62:58:ee:8e:38:12:40:d7:
                    eb:cb:6b:b0:ca:d8:a2:25:42:40:b7:9d:cb:6f:71:
                    ef:bc:58:49:11:0d:4d:bf:4d:8b:1a:c3:e8:16:e9:
                    e1:38:db:78:ae:4f:45:d7:a0:49:67:50:0c:c3:d1:
                    77:6c:b3:ba:65:43:d9:77:f8:a1:aa:45:67:a8:bc:
                    dc:f9:63:59:80:32:63:0a:b5:5d:e8:1e:c7:59:b8:
                    33:ed:08:25:46:e0:0a:64:73:74:a1:f5:b9:9e:69:
                    23:e5:e2:c3:ec:c0:15:74:c0:ea:2d:72:d2:79:95:
                    57:7a:f3:9f:c0:f7:cb:58:9c:0a:f8:79:63:01:92:
                    3f:ab:ea:f6:c0:fc:4d:67:63:67:2d:10:ce:19:57:
                    0b:37:8e:8d:33:76:07:05:f3:9e:3d:fe:00:48:e0:
                    c5:ea:f5:2f:7d:d2:23:0b:f5:7c:96:cd:f0:5c:07:
                    34:61:b1:35:a0:d6:60:ab:62:2b:f6:bf:71:a5:81:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:52:BC:EA:02:DB:55:B6:B1:44:60:EB:08:91:8C:4A:39:B2:43:7C
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8050::/44

    Signature Algorithm: sha256WithRSAEncryption
         a2:35:fe:6f:77:f8:bf:d7:5c:d3:21:99:2d:57:6e:ae:54:a7:
         b2:5a:47:c5:af:fe:5f:ec:da:4c:35:b2:e1:da:6f:d9:f8:2c:
         ad:af:a6:4b:dd:5e:49:ca:43:c2:5a:26:94:10:b3:45:23:ee:
         ac:66:f3:76:4f:a1:58:08:32:d2:94:5d:4c:fa:48:96:41:00:
         de:a5:a3:5a:b4:8b:96:e6:cc:82:47:53:fd:51:d9:76:a4:6b:
         e1:ce:07:72:eb:0c:f4:93:5c:18:41:4f:9e:b1:92:6f:e4:0a:
         54:be:e0:8a:e8:cf:22:bb:df:a8:d9:1d:16:d6:73:60:c2:d4:
         2c:1d:b4:15:8f:df:36:65:15:2f:89:b9:5b:28:bb:51:d4:24:
         16:10:e7:32:5d:fa:c7:53:c2:98:14:ed:e4:b4:e2:ac:6e:4b:
         7f:5f:de:bc:b6:e6:b4:d8:74:78:b9:71:85:b4:84:49:b7:da:
         cf:bd:68:8c:94:c7:69:06:3c:2b:77:5c:f8:93:64:70:fd:71:
         80:f2:4d:d0:9d:16:27:d3:d4:61:51:55:80:91:72:d0:12:31:
         c8:ad:b7:1f:02:93:97:64:71:67:00:bf:bd:ef:b3:39:96:23:
         17:eb:5b:94:43:1e:0b:ba:8d:4e:45:55:83:d5:eb:40:a5:3c:
         65:1d:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----