Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/1/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa
File:                     32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa (raw, json)
Hash identifier:          om7Z0oOwuBsXL+0sqD0awpkWd2WFjKAmva1UZNmeDdI=
Subject key identifier:   2B:70:A7:01:2C:56:84:AE:AE:E4:25:5F:91:3B:B3:90:33:18:5C:F3
Certificate issuer:       /CN=275F7402D77B27EEC0DFD260AD9C0FBDAD00026F
Certificate serial:       59A7D65EA383D7CB8232557D3E6BE7F85145FC0F
Authority key identifier: 27:5F:74:02:D7:7B:27:EE:C0:DF:D2:60:AD:9C:0F:BD:AD:00:02:6F
Authority info access:    rsync://rpki.co/repo/HYSP/13/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.cer
Subject info access:      rsync://rpki.co/repo/August/1/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa
Signing time:             Sat 08 Apr 2023 09:22:08 +0000
ROA not before:           Sat 08 Apr 2023 09:17:08 +0000
ROA not after:            Sat 06 Apr 2024 09:22:08 +0000
asID:                     212895
IP address blocks:        23.149.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a7:d6:5e:a3:83:d7:cb:82:32:55:7d:3e:6b:e7:f8:51:45:fc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275F7402D77B27EEC0DFD260AD9C0FBDAD00026F
        Validity
            Not Before: Apr  8 09:17:08 2023 GMT
            Not After : Apr  6 09:22:08 2024 GMT
        Subject: CN=2B70A7012C5684AEAEE4255F913BB39033185CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:85:c7:19:9d:92:31:51:49:f1:46:53:d6:
                    e9:b1:09:21:8c:0f:21:5a:8b:4d:07:45:e2:0a:0c:
                    1c:bf:b1:70:fa:fb:a4:cb:64:34:9e:11:13:4c:17:
                    f8:69:59:ac:bc:71:ce:2f:1a:f7:19:99:18:0c:85:
                    af:38:52:38:8c:09:9c:a5:c5:04:54:c6:ac:e9:24:
                    e3:b0:5a:6a:11:11:90:d5:ff:50:3c:28:b7:c4:73:
                    fe:bd:fb:11:0c:14:f2:38:91:7c:7a:2e:a0:77:a9:
                    18:85:48:e4:b1:78:bb:eb:8f:7a:3d:ae:73:f4:75:
                    97:74:ea:0d:25:8c:b3:e6:50:0c:a2:63:d2:f6:97:
                    41:63:d5:b5:7e:a1:27:ff:0c:3b:92:7c:c6:8d:3b:
                    e8:91:e6:62:59:53:22:4d:94:53:9c:57:6f:81:28:
                    85:ef:6b:91:00:45:8f:a5:19:ca:e1:e8:2d:b8:12:
                    44:ea:84:f0:79:73:b5:61:45:d3:a1:52:37:cd:69:
                    26:cf:a8:4e:9c:65:69:14:20:6a:9e:b8:6e:18:9f:
                    2d:60:37:e2:1d:85:97:62:90:f3:bf:77:d7:9f:1e:
                    26:27:bc:12:23:d5:90:6b:38:b1:f7:f0:5a:ff:0c:
                    5f:e2:ee:7f:8a:bf:64:67:90:de:34:6b:1b:a4:be:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:70:A7:01:2C:56:84:AE:AE:E4:25:5F:91:3B:B3:90:33:18:5C:F3
            X509v3 Authority Key Identifier:
                keyid:27:5F:74:02:D7:7B:27:EE:C0:DF:D2:60:AD:9C:0F:BD:AD:00:02:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/1/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/13/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/1/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:7c:3e:e9:8e:02:1e:bd:f4:ee:6a:d9:ca:79:e5:26:98:84:
         32:2d:88:f0:8a:bf:4b:92:86:d5:db:0e:b1:91:70:6f:4f:9d:
         c8:90:2e:78:59:6f:ab:ef:e6:bd:fb:4b:ad:41:48:c2:cf:ba:
         75:d8:ae:44:ba:f9:50:a2:31:07:6b:0a:83:c5:49:ec:8b:4e:
         37:6b:23:90:d0:de:30:22:c5:37:c5:0f:74:0c:30:f8:e1:44:
         54:d6:dd:93:8e:e9:5d:d6:48:95:ca:67:db:4d:46:b8:63:2f:
         61:4c:f7:1c:66:f4:db:17:b0:f7:5d:e2:0c:48:2b:72:ad:ff:
         90:de:41:d0:d3:dd:9e:39:49:d6:de:f1:80:34:19:33:23:ea:
         9b:e6:9b:62:00:50:cd:f1:a3:b7:a0:f9:01:3a:a7:fc:20:38:
         41:d6:96:e8:59:f3:8f:48:55:3a:94:3f:13:88:ad:5a:12:a5:
         1b:ef:38:8a:97:a6:d7:8f:7a:c0:57:72:87:2a:c3:e0:9b:83:
         09:09:25:7c:67:95:e0:85:58:b9:aa:bb:b8:c0:55:3e:d3:a9:
         d7:ef:61:de:3c:e9:ee:54:32:29:76:85:22:21:07:82:34:c3:
         5e:dd:8b:52:a1:8e:7c:21:ff:2a:5f:a1:eb:7f:ac:f5:24:2c:
         c8:cd:8a:21
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIUWafWXqOD18uCMlV9Pmvn+FFF/A8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc1Rjc0MDJENzdCMjdFRUMwREZEMjYwQUQ5QzBGQkRB
RDAwMDI2RjAeFw0yMzA0MDgwOTE3MDhaFw0yNDA0MDYwOTIyMDhaMDMxMTAvBgNV
BAMTKDJCNzBBNzAxMkM1Njg0QUVBRUU0MjU1RjkxM0JCMzkwMzMxODVDRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2FoXHGZ2SMVFJ8UZT1umxCSGM
DyFai00HReIKDBy/sXD6+6TLZDSeERNMF/hpWay8cc4vGvcZmRgMha84UjiMCZyl
xQRUxqzpJOOwWmoREZDV/1A8KLfEc/69+xEMFPI4kXx6LqB3qRiFSOSxeLvrj3o9
rnP0dZd06g0ljLPmUAyiY9L2l0Fj1bV+oSf/DDuSfMaNO+iR5mJZUyJNlFOcV2+B
KIXva5EARY+lGcrh6C24EkTqhPB5c7VhRdOhUjfNaSbPqE6cZWkUIGqeuG4Yny1g
N+IdhZdikPO/d9efHiYnvBIj1ZBrOLH38Fr/DF/i7n+Kv2RnkN40axukvoKnAgMB
AAGjggHLMIIBxzAdBgNVHQ4EFgQUK3CnASxWhK6u5CVfkTuzkDMYXPMwHwYDVR0j
BBgwFoAUJ190Atd7J+7A39JgrZwPva0AAm8wDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8xLzI3NUY3
NDAyRDc3QjI3RUVDMERGRDI2MEFEOUMwRkJEQUQwMDAyNkYuY3JsMGUGCCsGAQUF
BwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC8x
My8yNzVGNzQwMkQ3N0IyN0VFQzBERkQyNjBBRDlDMEZCREFEMDAwMjZGLmNlcjB2
BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5jOi8vcnBraS5jby9yZXBv
L0F1Z3VzdC8xLzMyMzMyZTMxMzQzOTJlMzEzNTMyMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzIzMTMyMzgzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5WYMA0GCSqGSIb3DQEBCwUA
A4IBAQAEfD7pjgIevfTuatnKeeUmmIQyLYjwir9LkobV2w6xkXBvT53IkC54WW+r
7+a9+0utQUjCz7p12K5EuvlQojEHawqDxUnsi043ayOQ0N4wIsU3xQ90DDD44URU
1t2Tjuld1kiVymfbTUa4Yy9hTPccZvTbF7D3XeIMSCtyrf+Q3kHQ092eOUnW3vGA
NBkzI+qb5ptiAFDN8aO3oPkBOqf8IDhB1pboWfOPSFU6lD8TiK1aEqUb7ziKl6bX
j3rAV3KHKsPgm4MJCSV8Z5XghVi5qru4wFU+06nX72HePOnuVDIpdoUiIQeCNMNe
3YtSoY58If8qX6Hrf6z1JCzIzYoh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:28 2023 by rpki-client on console-fra.rpki-client.org