Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/7/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa
File:                     32332e3133382e3233322e302f32342d3234203d3e203632383533.roa (raw, json)
Hash identifier:          ZXt2ZE5wkvrvg2c5PQYlqz9iyjK1so0yMDnUtJRJFyY=
Subject key identifier:   DD:C5:CD:B4:DE:98:60:DD:90:A8:56:6B:D5:89:33:BC:04:C2:78:96
Certificate issuer:       /CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
Certificate serial:       7F2EDBA46F0E94BA43BC61999FA9FA877716E121
Authority key identifier: 21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0
Authority info access:    rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer
Subject info access:      rsync://rpki.co/repo/August/7/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa
Signing time:             Sat 08 Apr 2023 09:22:02 +0000
ROA not before:           Sat 08 Apr 2023 09:17:02 +0000
ROA not after:            Sat 06 Apr 2024 09:22:02 +0000
asID:                     62853
IP address blocks:        23.138.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2e:db:a4:6f:0e:94:ba:43:bc:61:99:9f:a9:fa:87:77:16:e1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
        Validity
            Not Before: Apr  8 09:17:02 2023 GMT
            Not After : Apr  6 09:22:02 2024 GMT
        Subject: CN=DDC5CDB4DE9860DD90A8566BD58933BC04C27896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:cb:3a:94:26:ea:58:6f:7c:7a:f5:ef:41:
                    b7:8f:87:f2:33:5a:ba:85:4c:db:a4:a9:11:0c:47:
                    fc:06:56:8f:6b:eb:0b:77:a9:4f:7c:62:cc:08:8d:
                    7b:57:86:09:e1:3b:a2:cd:31:74:e7:02:8d:fc:7d:
                    66:f9:04:ac:38:8e:1e:af:db:0b:f1:25:64:a0:94:
                    99:0b:28:df:81:f5:0d:ca:d3:5d:ac:f1:c2:eb:46:
                    fa:92:ee:c3:e9:fd:f1:43:1b:37:24:92:25:dd:57:
                    13:cb:dd:a6:6e:fa:1a:ad:7b:c8:7d:0a:3f:7d:a8:
                    6b:36:d9:a7:82:b6:bd:f8:e7:79:89:49:8b:41:1d:
                    f9:c7:89:f7:ae:ce:79:b1:1e:f8:be:58:91:dd:e9:
                    13:e7:05:ca:13:85:58:d6:75:c1:1c:cf:a7:dd:7b:
                    c1:01:f3:ab:5f:ba:7e:af:1f:b9:38:f5:5b:21:fe:
                    1c:82:eb:9a:f7:8b:95:77:38:2a:8f:36:c0:4f:54:
                    fa:2f:05:b6:9a:74:51:93:1e:16:1b:f4:5d:bd:c6:
                    e2:61:43:17:57:c4:9d:1c:9f:1e:64:aa:25:67:e5:
                    16:c3:bf:2d:d0:fa:f2:e2:b5:97:2f:8a:9a:fb:4a:
                    8f:a2:0f:69:f4:99:47:c9:23:2e:a7:de:d0:d4:e2:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C5:CD:B4:DE:98:60:DD:90:A8:56:6B:D5:89:33:BC:04:C2:78:96
            X509v3 Authority Key Identifier:
                keyid:21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/7/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/7/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:11:4b:8e:c0:88:8f:39:d5:58:4d:b4:80:eb:a1:d6:17:28:
         f6:62:a4:de:69:dd:22:25:5a:79:7f:ec:51:78:1d:a6:a3:ef:
         33:08:04:2e:f1:5f:8f:25:8b:90:73:11:eb:22:d5:3f:38:ec:
         7a:c1:6c:4f:fb:13:37:33:0e:14:12:7a:22:f3:b1:67:d7:8a:
         f2:e4:33:06:e1:fb:47:45:cd:20:09:a7:78:65:a4:de:db:7d:
         e2:fe:3e:73:82:84:27:2e:34:f1:cb:b3:96:68:19:4e:13:6c:
         2a:fd:e5:8e:fe:c8:5f:ee:27:27:85:8e:3b:3d:cd:ca:10:72:
         dc:89:56:c3:8d:6d:36:74:38:20:c2:2f:8d:72:9f:f8:d4:6a:
         42:04:f6:80:9c:d0:b4:74:f9:01:34:17:29:97:85:7b:e8:b3:
         f4:ac:d0:5e:cd:af:d8:76:32:e1:73:ea:a5:80:6b:75:7f:55:
         e4:c5:57:b5:fc:fe:fe:fd:1b:19:47:35:67:80:21:22:e0:63:
         50:20:b6:ab:ab:79:04:50:01:c3:e7:0d:ea:04:2d:6b:90:8c:
         bf:65:bd:0b:a9:2e:5f:ff:3f:e1:ef:6f:a2:08:a9:ab:f2:01:
         14:c6:1f:6c:5c:27:28:f7:18:df:78:ab:04:51:66:01:bf:7d:
         2f:71:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:30 2023 by rpki-client on console-fra.rpki-client.org