Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383038303a3a2f34342d3438203d3e20313938303537.roa
File:                     326131333a633030373a383038303a3a2f34342d3438203d3e20313938303537.roa (raw, json)
Hash identifier:          LQkXLkbuTLscm7Ni2K9vfRH5NjYMcaI7PkhDRGRGMGM=
Subject key identifier:   FB:3D:66:A0:92:03:9E:9B:33:63:42:F4:74:9F:84:C5:72:11:3E:D6
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       03503AE36F3294424C08DF7C7475E9FB49D4E206
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383038303a3a2f34342d3438203d3e20313938303537.roa
Signing time:             Thu 27 Jul 2023 07:45:09 +0000
ROA not before:           Thu 27 Jul 2023 07:40:09 +0000
ROA not after:            Thu 25 Jul 2024 07:45:09 +0000
asID:                     198057
IP address blocks:        2a13:c007:8080::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:50:3a:e3:6f:32:94:42:4c:08:df:7c:74:75:e9:fb:49:d4:e2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Jul 27 07:40:09 2023 GMT
            Not After : Jul 25 07:45:09 2024 GMT
        Subject: CN=FB3D66A092039E9B336342F4749F84C572113ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:ab:b9:b4:c1:2b:e9:c0:59:d9:23:50:b5:
                    27:64:3d:20:89:b5:16:5e:84:ef:11:52:17:5d:22:
                    e4:c1:84:09:84:63:0d:5a:3f:88:bf:d0:25:00:26:
                    d2:3f:f8:6d:54:b8:bb:f4:b0:a3:69:24:6f:cc:06:
                    a6:01:f4:b8:68:c5:6d:ba:08:d7:b5:ba:24:6a:58:
                    b5:0c:52:30:ed:2f:ad:7b:f5:c8:e0:b1:97:74:8d:
                    e3:43:a3:e6:1b:43:b6:0a:e3:35:6c:67:89:d9:bf:
                    bb:e8:b8:ed:72:28:98:70:03:3a:ff:70:d5:24:2f:
                    d7:4f:8c:4f:d9:d3:45:cc:d0:28:d4:84:47:c7:46:
                    e2:bc:82:8b:94:8c:89:6c:a0:b2:b1:c5:49:dd:f4:
                    e5:96:26:80:35:da:4c:b5:e9:22:68:cc:0b:1d:e2:
                    8a:a7:ca:c7:02:b0:ea:a3:1a:28:2f:9d:3e:97:6e:
                    30:89:72:82:04:d4:63:3e:6d:be:89:bc:dd:27:65:
                    ad:87:8e:58:4e:ad:17:19:4f:7e:48:41:94:f9:97:
                    fa:2c:1f:e4:d3:83:40:58:27:9b:1d:32:1a:40:73:
                    57:00:00:0f:39:5a:2d:c9:35:35:b4:4e:06:8d:42:
                    b6:39:dd:0b:fa:cf:4b:2d:da:a5:68:02:dc:eb:18:
                    fa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3D:66:A0:92:03:9E:9B:33:63:42:F4:74:9F:84:C5:72:11:3E:D6
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383038303a3a2f34342d3438203d3e20313938303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8080::/44

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:b7:cd:4b:23:00:cb:4e:fa:3d:1d:9a:66:6d:03:46:ba:
         f1:99:26:c5:00:01:1d:45:ab:5f:3b:ef:11:b0:ee:4a:ca:91:
         8f:ca:b8:5b:44:11:63:1f:cc:9c:53:cc:94:4f:9a:04:69:04:
         4b:a0:8c:89:f7:37:36:a3:9d:5d:ee:bf:2f:64:25:55:4c:98:
         92:4d:58:7c:29:a1:c0:62:c7:3f:8c:7f:0a:ac:b3:77:5c:a6:
         03:07:94:b2:40:fa:ca:e6:81:61:86:dc:c5:c2:5b:10:7f:d4:
         77:9c:6b:3c:74:5f:05:fe:5c:a5:03:ae:3d:e0:5c:ad:b7:b7:
         3c:ee:c6:65:57:18:d8:2c:ac:ab:20:43:58:7e:b3:cb:e5:6a:
         fe:ad:8f:c7:40:11:36:87:af:ba:54:51:2d:65:48:9a:dc:77:
         15:76:2f:86:e1:f8:1c:9a:74:3f:2b:00:cb:29:db:8f:3b:2b:
         b9:7f:32:a2:d0:cb:93:07:ae:63:fc:b0:91:6c:b2:29:cb:7a:
         98:85:ef:a4:1a:df:b3:22:b8:bf:0c:0b:2a:c7:eb:ce:32:e5:
         c0:64:03:b2:35:5f:d1:3f:97:89:79:00:e7:b6:15:cd:f9:92:
         2e:c6:32:59:29:41:62:f4:e3:85:a2:09:dd:03:cf:8d:18:c6:
         c1:24:cb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----