Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/32332e3134392e3233322e302f32342d3234203d3e203530303538.roa
File:                     32332e3134392e3233322e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier:          o8GDSNEgsywS2YkRZS2WNaT5vPqgf8BmnD2gQGGDJpE=
Subject key identifier:   09:35:32:13:71:61:33:14:FE:D0:CA:0A:E1:60:89:B5:EC:A5:B1:43
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       2512154096A4EA56D086D85CB2A6E9CDF67D92DA
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/32332e3134392e3233322e302f32342d3234203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 09:21:59 +0000
ROA not before:           Sat 08 Apr 2023 09:16:59 +0000
ROA not after:            Sat 06 Apr 2024 09:21:59 +0000
asID:                     50058
IP address blocks:        23.149.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:12:15:40:96:a4:ea:56:d0:86:d8:5c:b2:a6:e9:cd:f6:7d:92:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:16:59 2023 GMT
            Not After : Apr  6 09:21:59 2024 GMT
        Subject: CN=0935321371613314FED0CA0AE16089B5ECA5B143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a9:9e:16:74:a5:3d:db:59:fd:e4:78:f8:74:
                    a3:63:38:45:16:67:6f:86:ea:71:46:53:4d:6e:b8:
                    2b:31:a1:19:16:e0:66:62:6e:84:a9:f4:ec:f3:f7:
                    2a:95:8c:d6:44:d3:10:75:52:bc:05:3b:f4:23:6e:
                    f9:81:36:a6:b1:51:13:7c:e0:f5:27:d0:0c:d2:f7:
                    92:2e:db:1f:20:ae:19:85:2f:f7:85:5e:cf:78:64:
                    cb:56:50:ab:53:0b:27:d3:72:ca:6b:61:db:ad:da:
                    69:ee:5a:ad:de:d8:37:11:34:3d:f4:18:14:bc:5b:
                    0c:60:12:8c:29:10:1e:3e:1c:ac:36:24:5d:87:cd:
                    77:a9:71:ca:cb:c6:e4:f3:94:1e:d6:85:e1:4f:21:
                    e4:22:bc:1b:a8:90:1c:42:9b:3b:1c:00:78:3a:06:
                    c3:95:6d:0c:50:23:1a:37:89:96:70:26:4a:7c:ec:
                    dc:03:ab:f3:01:f0:fc:d2:ba:34:e4:6a:44:84:b5:
                    23:0b:10:e9:dd:45:17:67:2e:a3:63:49:60:9d:d8:
                    cf:37:2a:29:6d:e7:37:30:45:d4:3f:74:48:23:c8:
                    57:05:96:90:97:a9:bb:69:31:f7:1c:c7:f4:ca:8d:
                    49:5a:ad:6b:b1:d3:8c:f2:ba:82:a0:0e:41:5b:72:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:35:32:13:71:61:33:14:FE:D0:CA:0A:E1:60:89:B5:EC:A5:B1:43
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/32332e3134392e3233322e302f32342d3234203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:d9:49:e9:c0:ee:c8:7e:f5:84:1f:bd:fb:bf:21:01:7a:23:
         d3:06:a6:f9:64:22:6a:cf:43:93:85:cd:c2:42:b8:95:fb:f6:
         51:60:c8:c4:41:46:96:8c:10:b7:37:bc:39:16:5e:a8:6a:ee:
         07:ca:39:61:2b:2b:41:a7:e8:29:b8:69:29:0a:a8:4f:7d:3f:
         1f:0b:47:f8:fe:6e:93:82:a7:e2:aa:16:3c:fc:f9:5d:d6:69:
         64:1b:a0:a6:dd:63:5a:13:d3:25:4f:da:38:33:89:dc:fa:60:
         57:43:7a:8d:b7:c9:00:04:49:11:51:30:db:22:02:b7:96:23:
         1f:b8:32:b1:c5:46:b4:e1:76:0a:13:c9:ba:3c:6e:d5:e1:8a:
         ca:67:e4:3d:64:c1:dc:5b:2c:2e:c2:ee:f2:22:c9:9b:bb:5d:
         63:2b:e2:d4:28:e6:87:ca:a6:29:a0:98:4e:e6:bc:5b:aa:e1:
         62:58:78:8a:b5:e7:a6:ef:9c:20:97:03:78:5f:f7:6b:fc:61:
         e4:d6:a5:03:ec:f1:3c:dc:7a:f4:0b:f9:4d:ec:6b:6f:6a:49:
         b2:0f:ce:16:7c:ca:52:86:58:1d:e7:58:db:ec:17:e5:89:c6:
         98:b9:ac:74:80:01:37:51:ff:4d:95:03:d2:30:7b:83:d8:91:
         18:60:b0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-ams.rpki-client.org