Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383037303a3a2f34342d3434203d3e203231373338.roa
File:                     326131333a633030373a383037303a3a2f34342d3434203d3e203231373338.roa (raw, json)
Hash identifier:          dqExioUBC5PQEOP7PMqe/iBP4nOmn6yXF2C7KgDpaNI=
Subject key identifier:   A7:6D:AC:37:A2:E8:D7:D9:34:C9:5E:F9:84:D8:7E:24:FB:A7:63:DB
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       5F9385041B41513332D91B2DB4C539B4AF1CEBD1
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383037303a3a2f34342d3434203d3e203231373338.roa
Signing time:             Mon 10 Apr 2023 03:31:21 +0000
ROA not before:           Mon 10 Apr 2023 03:26:21 +0000
ROA not after:            Mon 08 Apr 2024 03:31:21 +0000
asID:                     21738
IP address blocks:        2a13:c007:8070::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:93:85:04:1b:41:51:33:32:d9:1b:2d:b4:c5:39:b4:af:1c:eb:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:21 2023 GMT
            Not After : Apr  8 03:31:21 2024 GMT
        Subject: CN=A76DAC37A2E8D7D934C95EF984D87E24FBA763DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:fa:07:be:86:83:48:3c:42:79:a5:25:b6:
                    e2:0b:4a:a7:4b:2a:61:f3:fe:52:c1:4a:9c:75:96:
                    05:fe:94:62:d4:0e:70:2f:5e:8b:9d:6c:dd:b1:5e:
                    7e:18:85:bb:48:5c:7d:ce:b8:b1:b2:cd:34:17:4a:
                    49:71:de:9d:43:96:6c:5d:98:85:68:91:24:cc:32:
                    74:c2:4c:11:f6:01:5e:f7:71:20:79:2c:b8:6c:bc:
                    d6:b6:e8:fd:28:45:75:ef:e9:16:c8:9e:1f:0f:e6:
                    e5:5d:0b:31:6b:22:09:28:3a:0e:75:fc:51:d1:ee:
                    6b:01:97:fb:5f:a5:fb:a5:51:5d:09:8a:85:ee:04:
                    55:3b:ad:34:4c:73:45:90:d7:c6:8d:d0:38:9c:8e:
                    65:6a:c2:ff:cb:71:8d:8e:62:ce:16:7c:15:34:46:
                    3e:c6:2c:6a:fe:04:08:6d:3d:12:8a:17:3f:c4:b7:
                    0f:e9:59:01:df:46:bc:e6:90:57:db:a5:3f:13:ab:
                    4d:be:aa:0c:80:19:78:48:2e:c1:7c:72:e0:a2:ec:
                    44:d9:ef:82:eb:e4:76:28:4a:48:c9:1c:c4:90:0f:
                    ee:3e:ed:32:d2:04:a5:f8:84:4e:4f:59:2c:cc:7e:
                    bc:a8:6f:15:47:52:49:08:d8:2e:72:ad:db:1f:7f:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6D:AC:37:A2:E8:D7:D9:34:C9:5E:F9:84:D8:7E:24:FB:A7:63:DB
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383037303a3a2f34342d3434203d3e203231373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8070::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:d7:d3:5c:36:55:2d:ce:6d:1d:83:47:e6:53:74:17:f0:90:
         0c:8b:7e:cd:62:f5:11:a5:8a:32:bf:0d:b5:68:96:fa:d2:ba:
         34:64:a8:82:0d:35:e7:d0:74:cf:5d:12:a5:66:0d:6c:57:f0:
         66:3c:f5:fe:e5:e4:78:1b:85:19:3b:7f:99:61:e1:96:e3:d3:
         fe:15:53:29:16:ee:8c:c8:22:94:14:1b:a7:bc:49:b9:84:f4:
         18:f2:de:9b:dd:05:51:34:ac:cc:79:ef:4a:46:16:cf:45:fa:
         b7:51:e7:34:62:14:ab:08:0f:57:d7:52:8f:39:1d:79:70:f5:
         b5:db:66:26:3e:99:1a:c5:d5:37:e3:74:6b:2e:be:31:49:1e:
         27:12:9c:71:5e:4e:03:60:54:00:bd:95:be:bc:9b:9d:11:7e:
         55:97:ad:d9:a6:38:35:ab:df:56:5d:7a:9f:9f:3f:b8:34:2d:
         18:e5:ca:59:9d:3d:3f:79:d9:7f:ee:10:e7:4d:4b:53:6b:f6:
         1b:a4:e3:f6:b8:e3:b1:0e:9f:f1:ab:a3:8c:e7:f5:46:35:fe:
         dc:d0:80:07:83:f2:09:5d:2e:d8:f5:f3:a2:ad:e5:0e:37:ac:
         ba:b6:50:42:cf:d2:af:ba:58:8c:cc:5b:34:6d:69:f1:b5:4f:
         ce:81:0e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----