Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/8/323630363a623063303a3a2f33322d3332203d3e203530303538.roa
File:                     323630363a623063303a3a2f33322d3332203d3e203530303538.roa (raw, json)
Hash identifier:          nQFtuwxOXZpIkq6gqaiwGSU36ON7gDTfKlWihyOERx8=
Subject key identifier:   32:C5:C4:E6:98:B1:34:0A:5B:94:23:FB:6D:A7:7C:75:65:A3:6D:16
Certificate issuer:       /CN=381C7A4E80F50F1F7F8CE0819134F3836A8C389C
Certificate serial:       3BA73BAB59E7A44DB656D20DED7EE4057D17480D
Authority key identifier: 38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C
Authority info access:    rsync://rpki.co/repo/August/4/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer
Subject info access:      rsync://rpki.co/repo/AS945/8/323630363a623063303a3a2f33322d3332203d3e203530303538.roa
Signing time:             Mon 10 Apr 2023 03:31:52 +0000
ROA not before:           Mon 10 Apr 2023 03:26:52 +0000
ROA not after:            Mon 08 Apr 2024 03:31:52 +0000
asID:                     50058
IP address blocks:        2606:b0c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a7:3b:ab:59:e7:a4:4d:b6:56:d2:0d:ed:7e:e4:05:7d:17:48:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381C7A4E80F50F1F7F8CE0819134F3836A8C389C
        Validity
            Not Before: Apr 10 03:26:52 2023 GMT
            Not After : Apr  8 03:31:52 2024 GMT
        Subject: CN=32C5C4E698B1340A5B9423FB6DA77C7565A36D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:20:e7:57:29:67:b1:63:61:e2:50:ca:7e:49:
                    7f:33:d5:61:35:5b:bc:70:e9:40:78:1b:78:32:cf:
                    72:4e:be:3c:71:1d:45:d8:f2:e3:03:22:5e:28:32:
                    43:48:bb:3f:ca:83:be:1f:82:82:cd:71:88:eb:7d:
                    75:fc:2c:eb:3d:39:46:2c:65:a0:e4:b0:e6:33:47:
                    90:ed:fc:e9:78:71:a8:b5:f2:59:62:5a:5e:40:61:
                    19:8c:d0:0e:70:e3:0a:ef:1c:be:57:06:e0:fc:61:
                    b8:fd:b4:e9:8f:8e:65:5f:90:ee:8c:7f:b7:ab:c0:
                    ef:0c:d0:31:b9:be:20:eb:07:74:69:b7:62:c6:f1:
                    7f:7e:00:ce:d2:5a:25:9e:27:14:0c:fb:b2:44:8f:
                    a8:34:b3:87:94:8d:71:71:fa:e1:c2:e1:f7:66:3e:
                    ad:46:85:e4:5b:3a:e0:69:9a:27:71:4f:be:b8:f3:
                    ca:93:36:a7:e1:ec:ef:b3:4e:16:59:ba:e9:36:d4:
                    92:51:0f:15:b5:e5:1c:a1:0f:91:c0:c0:90:5b:89:
                    19:1c:c6:0e:0a:c9:b3:c4:3f:77:03:08:08:59:bd:
                    b1:b7:cb:f2:6d:6e:79:65:8e:2a:03:2e:75:98:28:
                    20:f1:d4:81:41:c0:42:36:d2:3f:8e:45:84:a0:b7:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C5:C4:E6:98:B1:34:0A:5B:94:23:FB:6D:A7:7C:75:65:A3:6D:16
            X509v3 Authority Key Identifier:
                keyid:38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/8/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/4/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/8/323630363a623063303a3a2f33322d3332203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:3e:f4:e6:58:1c:ee:16:4b:0c:8d:d8:ad:d1:48:60:d4:e1:
         24:d7:6c:42:e8:a6:9b:7c:3f:a4:7a:d8:6a:64:34:20:17:56:
         40:b1:5e:76:97:c3:a4:1d:ae:c8:41:f2:b6:c8:7e:a8:5d:2c:
         02:10:c8:45:06:13:85:95:db:5f:01:77:71:19:5b:6c:f4:69:
         c7:c2:5d:8c:65:1a:58:21:33:83:24:41:5a:d2:ec:bf:58:ee:
         24:fb:fa:0c:96:bb:1f:d0:4c:f2:6a:eb:54:5a:61:af:ab:74:
         c7:d9:1e:00:cb:84:17:6a:cd:fb:bf:83:0f:47:bc:fb:16:d6:
         03:eb:2d:b0:96:7d:61:e8:f7:a3:69:2c:a7:93:26:f6:c0:f9:
         72:9f:e4:7e:df:70:3d:da:d4:66:3b:f0:a8:fc:5d:df:07:c6:
         41:a2:df:78:2a:7d:69:03:c4:3d:38:29:7d:8e:c8:dc:e4:c6:
         c7:a1:27:4a:1d:fe:2b:08:fc:4e:0e:d5:98:5f:ea:a8:86:3d:
         f1:2d:6d:d9:4a:03:bf:4f:83:f0:6f:b1:58:94:60:e0:6b:cb:
         63:76:ea:6f:46:5e:09:e8:fe:b3:35:15:48:37:40:80:f4:55:
         49:e2:e7:7a:08:1e:a1:2e:5d:1b:a3:45:fe:e6:90:80:b5:38:
         8b:97:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----