Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Muilties/2/323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa
File:                     323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier:          EdPbyLdMkqt52HdRSe9F65r7oBOj57WiA/fs25O7J74=
Subject key identifier:   F2:14:30:26:AE:F8:85:B2:E7:26:3D:D8:14:90:50:A6:6A:61:B1:66
Certificate issuer:       /CN=88dcea7b996d0e56afd72e7bfcd58aa47ebc72eb
Certificate serial:       3A3DE1C58B07052E61A5DCD96839AE5E59238265
Authority key identifier: 88:DC:EA:7B:99:6D:0E:56:AF:D7:2E:7B:FC:D5:8A:A4:7E:BC:72:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNzqe5ltDlav1y57_NWKpH68cus.cer
Subject info access:      rsync://rpki.co/repo/Muilties/2/323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa
Signing time:             Mon 10 Apr 2023 02:08:40 +0000
ROA not before:           Mon 10 Apr 2023 02:03:40 +0000
ROA not after:            Mon 08 Apr 2024 02:08:40 +0000
asID:                     205329
IP address blocks:        2001:67c:2800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3d:e1:c5:8b:07:05:2e:61:a5:dc:d9:68:39:ae:5e:59:23:82:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88dcea7b996d0e56afd72e7bfcd58aa47ebc72eb
        Validity
            Not Before: Apr 10 02:03:40 2023 GMT
            Not After : Apr  8 02:08:40 2024 GMT
        Subject: CN=F2143026AEF885B2E7263DD8149050A66A61B166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:f7:3f:ab:33:e8:07:a1:c7:ab:a0:7e:54:
                    31:a2:6f:36:62:51:a9:ae:14:d3:33:6e:9f:b7:12:
                    a7:5d:6a:77:ac:0c:ec:ce:c9:54:43:77:d2:85:60:
                    87:7f:5d:18:20:f6:f6:24:94:54:30:27:9e:93:dd:
                    51:d2:12:51:71:aa:e5:5f:65:d2:be:e5:9c:d1:49:
                    0d:20:15:ef:df:87:33:6b:f8:87:c2:29:cb:79:d6:
                    65:5d:68:d8:8d:6f:63:86:92:9c:a9:9a:0d:40:52:
                    8e:15:e1:e1:00:25:55:c2:3e:eb:5a:04:3c:b5:cd:
                    12:a2:08:bf:7e:f6:64:d0:f3:11:a7:90:32:c7:70:
                    bd:38:ed:93:f6:9a:09:85:75:9b:c2:21:5b:be:c6:
                    01:33:a4:ad:fb:51:49:51:f0:dd:f9:d2:d8:08:c2:
                    49:64:6d:10:5a:66:90:d8:cb:8e:08:d2:54:c9:ea:
                    6e:ff:13:ae:f9:16:f2:07:a0:59:47:b8:64:18:05:
                    bf:5f:eb:f2:13:6c:27:9e:f9:fc:15:79:46:46:72:
                    8f:82:56:a2:fa:8f:17:2b:24:7f:6e:a8:24:b2:1b:
                    17:4a:d9:1f:71:42:f9:d1:eb:27:9d:69:21:65:1e:
                    a8:d1:ca:56:b4:65:b7:1a:db:c1:6d:48:5b:37:4e:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:14:30:26:AE:F8:85:B2:E7:26:3D:D8:14:90:50:A6:6A:61:B1:66
            X509v3 Authority Key Identifier:
                keyid:88:DC:EA:7B:99:6D:0E:56:AF:D7:2E:7B:FC:D5:8A:A4:7E:BC:72:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Muilties/2/88DCEA7B996D0E56AFD72E7BFCD58AA47EBC72EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNzqe5ltDlav1y57_NWKpH68cus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Muilties/2/323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:32:6f:18:02:eb:57:19:5b:cd:d6:aa:a5:2e:76:57:e8:90:
         2a:c0:5d:2c:96:e0:37:43:79:77:a7:01:a1:79:30:c4:c0:20:
         9f:49:bc:d7:ea:3f:ca:77:52:44:79:7b:0b:15:58:42:1b:25:
         24:4d:8a:da:2b:e0:17:47:d1:6f:a6:24:74:dc:b9:70:0a:86:
         eb:df:8a:99:7e:55:00:83:82:d3:a8:ee:7d:29:2b:4c:03:34:
         06:8f:bc:47:c2:2b:dc:93:1a:4d:d5:98:7d:22:1e:2f:6e:6a:
         87:9d:cc:ef:f6:72:fa:8e:e4:2a:3b:3d:04:5b:c7:61:45:11:
         73:a1:9d:9b:83:ac:27:23:5d:a4:25:c9:04:4c:bd:e7:e3:ac:
         c7:e4:c6:4a:c6:62:0d:23:96:9c:0e:e4:75:82:c5:79:94:f6:
         0e:36:ad:1f:bb:58:06:e0:b2:1d:1e:00:0c:cf:df:64:e2:8c:
         38:a1:bd:c5:55:56:04:31:e7:34:75:32:0f:f8:f9:d7:e8:6a:
         65:a1:2e:8b:58:8f:f1:71:16:c7:5a:93:93:70:cf:0f:94:25:
         7e:6c:1c:24:62:41:08:0d:02:d9:b3:18:d1:3d:37:cd:1a:6c:
         71:63:9d:97:90:dd:6e:a2:f3:32:ca:79:21:e8:b8:bb:b8:b1:
         35:a4:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 20:23:35 2023 by rpki-client on console-fra.rpki-client.org