Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/7/32332e3133392e34302e302f32342d3234203d3e203630333236.roa
File:                     32332e3133392e34302e302f32342d3234203d3e203630333236.roa (raw, json)
Hash identifier:          KWxZifAX4RyrOzDAzARTuh4qe/ez18Ism9KwC7Bco34=
Subject key identifier:   3A:7F:EA:B1:24:C4:2A:07:FC:A6:B7:C4:97:3B:69:23:28:A1:1F:D4
Certificate issuer:       /CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
Certificate serial:       3AA39B9C8C3889837F921307617124515E044A90
Authority key identifier: 21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0
Authority info access:    rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer
Subject info access:      rsync://rpki.co/repo/August/7/32332e3133392e34302e302f32342d3234203d3e203630333236.roa
Signing time:             Sat 08 Apr 2023 09:22:01 +0000
ROA not before:           Sat 08 Apr 2023 09:17:01 +0000
ROA not after:            Sat 06 Apr 2024 09:22:01 +0000
asID:                     60326
IP address blocks:        23.139.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a3:9b:9c:8c:38:89:83:7f:92:13:07:61:71:24:51:5e:04:4a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
        Validity
            Not Before: Apr  8 09:17:01 2023 GMT
            Not After : Apr  6 09:22:01 2024 GMT
        Subject: CN=3A7FEAB124C42A07FCA6B7C4973B692328A11FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:31:c0:8a:ce:6f:9e:8a:25:3c:0c:7c:8d:
                    8d:32:ee:b4:7b:c5:9f:33:fa:da:e6:ca:67:4a:23:
                    a6:df:b6:2c:1b:ab:d1:97:98:94:8c:04:63:2b:82:
                    10:91:d9:2d:0c:14:5e:70:ef:ab:fa:a7:60:b1:8f:
                    65:90:db:73:a7:fe:9a:0c:cb:3f:ef:9e:6e:f1:c7:
                    d5:04:3c:8a:3f:57:a3:da:81:b1:08:20:9d:17:b6:
                    67:74:87:f8:e8:87:ba:57:32:78:bf:42:56:48:2a:
                    71:e4:d1:fa:c4:14:91:5c:25:33:11:58:0a:05:b6:
                    b7:f6:ff:77:1b:2e:78:b0:eb:09:88:1a:9c:ba:8d:
                    93:11:e5:8e:20:4c:8d:00:83:d7:2b:d9:63:b6:d1:
                    44:34:19:d1:7e:83:a7:87:bd:cd:20:de:b3:b7:ce:
                    c6:9c:8e:bc:4f:33:c1:7f:a7:99:77:d4:4e:c7:35:
                    52:67:f8:c8:3b:46:1b:68:5e:a8:bd:ef:7c:06:e5:
                    0b:67:47:b9:f2:0a:6b:25:7f:11:f0:32:3b:29:d2:
                    c3:9a:8d:81:41:42:17:6d:39:38:73:a3:fc:fa:d6:
                    38:2b:82:ba:de:74:37:87:78:42:1a:d3:e0:f4:5e:
                    0c:86:5a:22:2c:3f:02:bf:40:62:d1:5e:c0:81:f3:
                    2b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7F:EA:B1:24:C4:2A:07:FC:A6:B7:C4:97:3B:69:23:28:A1:1F:D4
            X509v3 Authority Key Identifier:
                keyid:21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/7/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/7/32332e3133392e34302e302f32342d3234203d3e203630333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:95:19:77:59:b1:ea:50:41:5e:9f:6c:4a:89:cf:0a:12:5b:
         a4:c7:09:4b:de:79:d1:e6:9e:61:01:b2:b3:8b:d9:b3:05:34:
         d4:0f:18:b6:50:46:80:d8:83:ac:2f:df:8e:2d:4d:95:59:94:
         44:f0:0d:b5:d1:bf:a6:04:f7:18:e1:55:ba:3c:8a:da:66:f9:
         0c:09:e8:c4:7b:dc:e7:c8:26:d9:31:89:85:f6:a3:12:ec:e4:
         43:f6:1f:4d:80:94:dd:43:9a:8a:33:d0:4b:bc:11:01:53:af:
         46:05:c7:9b:45:90:ad:7f:5c:12:6a:ab:21:1b:d9:7a:90:3f:
         05:71:67:45:77:e3:ad:35:db:1f:ab:8f:5f:c0:72:1c:4f:43:
         09:1c:c1:3c:eb:7c:9c:a2:ba:6a:d7:af:65:39:f6:f8:39:74:
         d7:95:1a:8b:3b:63:2f:50:46:8d:8c:0b:18:11:d5:80:9a:a7:
         77:a8:be:5f:91:e9:26:83:8c:61:c5:76:45:cf:d1:67:06:ee:
         b6:3e:86:03:70:1e:a2:64:5e:b2:bc:38:7a:a7:04:d3:2a:38:
         01:d5:ae:58:2a:c4:94:de:d9:ed:9a:48:85:b7:ac:ef:a6:d1:
         b7:be:2e:cd:23:45:be:70:70:57:e3:74:2e:2e:4c:fd:8b:ac:
         e6:fb:d9:f4
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUOqObnIw4iYN/khMHYXEkUV4ESpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4MDJBOUE2NjE1NzczRUU2REVBOTVGRkVGQ0M0RjQw
RTc5OTRGMDAeFw0yMzA0MDgwOTE3MDFaFw0yNDA0MDYwOTIyMDFaMDMxMTAvBgNV
BAMTKDNBN0ZFQUIxMjRDNDJBMDdGQ0E2QjdDNDk3M0I2OTIzMjhBMTFGRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSDHAis5vnoolPAx8jY0y7rR7
xZ8z+trmymdKI6bftiwbq9GXmJSMBGMrghCR2S0MFF5w76v6p2Cxj2WQ23On/poM
yz/vnm7xx9UEPIo/V6PagbEIIJ0Xtmd0h/joh7pXMni/QlZIKnHk0frEFJFcJTMR
WAoFtrf2/3cbLniw6wmIGpy6jZMR5Y4gTI0Ag9cr2WO20UQ0GdF+g6eHvc0g3rO3
zsacjrxPM8F/p5l31E7HNVJn+Mg7RhtoXqi973wG5QtnR7nyCmslfxHwMjsp0sOa
jYFBQhdtOThzo/z61jgrgrredDeHeEIa0+D0XgyGWiIsPwK/QGLRXsCB8ytVAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQUOn/qsSTEKgf8prfElztpIyihH9QwHwYDVR0j
BBgwFoAUIYAqmmYVdz7m3qlf/vzE9A55lPAwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC83LzIxODAy
QTlBNjYxNTc3M0VFNkRFQTk1RkZFRkNDNEY0MEU3OTk0RjAuY3JsMGUGCCsGAQUF
BwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC8x
MC8yMTgwMkE5QTY2MTU3NzNFRTZERUE5NUZGRUZDQzRGNDBFNzk5NEYwLmNlcjBy
BggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vcnBraS5jby9yZXBv
L0F1Z3VzdC83LzMyMzMyZTMxMzMzOTJlMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM2MzAzMzMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXiygwDQYJKoZIhvcNAQELBQADggEB
AIKVGXdZsepQQV6fbEqJzwoSW6THCUveedHmnmEBsrOL2bMFNNQPGLZQRoDYg6wv
344tTZVZlETwDbXRv6YE9xjhVbo8itpm+QwJ6MR73OfIJtkxiYX2oxLs5EP2H02A
lN1Dmooz0Eu8EQFTr0YFx5tFkK1/XBJqqyEb2XqQPwVxZ0V346012x+rj1/AchxP
QwkcwTzrfJyiumrXr2U59vg5dNeVGos7Yy9QRo2MCxgR1YCap3eovl+R6SaDjGHF
dkXP0WcG7rY+hgNwHqJkXrK8OHqnBNMqOAHVrlgqxJTe2e2aSIW3rO+m0be+Ls0j
Rb5wcFfjdC4uTP2LrOb72fQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:30 2023 by rpki-client on console-fra.rpki-client.org