Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/3134392e3131322e32362e302f32342d3234203d3e203531393330.roa
File:                     3134392e3131322e32362e302f32342d3234203d3e203531393330.roa (raw, json)
Hash identifier:          ChAfDNKRpqe7AwdHvpGp5B3xfqPRYkUa5Cfj1HvkjAE=
Subject key identifier:   9D:C3:30:EA:F3:24:0E:05:61:AA:38:56:41:3F:A4:57:B0:95:7B:70
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       34F0E12D6842753164A549E8B2F8D5EB522CA6C1
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/3134392e3131322e32362e302f32342d3234203d3e203531393330.roa
Signing time:             Sat 08 Apr 2023 09:21:59 +0000
ROA not before:           Sat 08 Apr 2023 09:16:59 +0000
ROA not after:            Sat 06 Apr 2024 09:21:59 +0000
asID:                     51930
IP address blocks:        149.112.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f0:e1:2d:68:42:75:31:64:a5:49:e8:b2:f8:d5:eb:52:2c:a6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:16:59 2023 GMT
            Not After : Apr  6 09:21:59 2024 GMT
        Subject: CN=9DC330EAF3240E0561AA3856413FA457B0957B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:4d:dc:c5:09:51:51:85:10:1a:d9:ac:76:
                    f3:47:33:b5:28:72:38:45:48:d9:75:46:f7:1a:b6:
                    fa:c0:ed:a4:3f:45:b1:f5:7f:ad:9f:76:eb:27:c0:
                    09:c7:41:76:a4:ca:0f:4e:d5:b7:f8:b5:ff:1d:4a:
                    10:c2:df:4a:d8:e3:72:6e:83:c3:10:75:5c:e6:94:
                    0d:32:e8:a4:75:83:47:ef:14:a6:8e:8d:ef:51:f6:
                    b5:6d:8b:58:fa:90:e1:ee:fc:58:21:eb:84:64:8b:
                    72:4f:12:73:be:57:ca:21:c8:80:87:8d:c4:3b:ff:
                    32:c7:a0:0d:48:c5:d1:ba:22:7f:02:56:72:90:00:
                    f8:e9:a9:a4:2d:98:45:e7:3d:1e:a7:b2:f4:9a:e6:
                    34:1d:19:1b:f0:22:59:c9:57:ca:11:1c:6e:4a:7f:
                    9a:25:95:d0:e6:78:f3:42:2b:a7:69:96:db:9c:c1:
                    0a:76:c0:ef:7a:5f:8c:69:16:e6:23:a9:34:42:3d:
                    80:67:be:25:9f:b6:21:ac:6e:e4:45:7c:fb:53:b0:
                    39:ce:c7:c9:0f:38:70:a4:24:59:fa:1b:a4:d3:d2:
                    d8:08:a5:4e:90:27:d8:a5:f1:bc:f6:b3:5e:fc:9b:
                    d5:1c:2e:52:4e:ea:7e:d0:4a:da:40:84:ef:44:14:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C3:30:EA:F3:24:0E:05:61:AA:38:56:41:3F:A4:57:B0:95:7B:70
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/3134392e3131322e32362e302f32342d3234203d3e203531393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:b8:b7:82:ef:c5:eb:b3:68:33:63:dd:36:93:29:28:f8:d3:
         78:03:ab:32:cc:69:08:37:2f:e2:ab:32:4c:a3:69:e9:05:5a:
         f2:48:75:ea:44:4f:b6:62:71:ce:70:bd:44:eb:d9:2d:09:0d:
         ed:86:76:e4:95:9c:15:a7:cd:55:84:0c:4d:91:b7:1d:cc:19:
         78:dc:10:5f:15:4c:f1:53:65:e1:b6:c1:1a:7f:90:22:7d:6a:
         05:de:e4:b9:8a:d5:b6:1d:ad:b3:14:81:1c:37:fe:e6:1a:d3:
         26:be:ae:8b:99:01:8c:01:a8:54:f7:eb:6e:2f:bb:ac:60:03:
         3c:bb:23:83:60:86:95:24:d6:d3:30:73:da:c5:80:bb:39:02:
         0a:ed:a0:47:c0:09:2e:21:fe:cb:0b:ce:53:60:22:2e:9e:31:
         5a:e8:43:2f:97:65:c1:f7:c3:d1:b1:1c:e9:49:d6:68:8d:6b:
         57:7c:9a:e9:a9:3f:88:cc:38:96:bd:cd:46:7d:a2:be:90:60:
         bb:6b:e7:d5:33:6d:6b:53:a2:f6:6d:7d:88:92:5b:39:48:c6:
         cd:13:17:7a:5d:1a:c4:82:c0:a4:78:b8:3d:5e:63:b6:1d:05:
         d5:65:75:fb:5e:26:b3:c7:d9:f2:b0:c0:fc:fb:de:51:77:a3:
         f3:95:cd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:28 2023 by rpki-client on console-fra.rpki-client.org