Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Muilties/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
File:                     323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (raw, json)
Hash identifier:          XJkX7X1NI5x25Aiwjz6rs9/6q5FLbDfIsAMnjRLM9Rk=
Subject key identifier:   38:67:41:43:3D:15:BB:0B:F2:FF:C1:A5:9F:DC:84:3F:38:78:62:2F
Certificate issuer:       /CN=4f08012dab71da55fa7f75cdc271174258eff57c
Certificate serial:       2465DBA8B0C8705EF7954DED86630EFDB3E08408
Authority key identifier: 4F:08:01:2D:AB:71:DA:55:FA:7F:75:CD:C2:71:17:42:58:EF:F5:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TwgBLatx2lX6f3XNwnEXQljv9Xw.cer
Subject info access:      rsync://rpki.co/repo/Muilties/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
Signing time:             Mon 10 Apr 2023 02:08:40 +0000
ROA not before:           Mon 10 Apr 2023 02:03:40 +0000
ROA not after:            Mon 08 Apr 2024 02:08:40 +0000
asID:                     202881
IP address blocks:        2001:67c:2be8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:65:db:a8:b0:c8:70:5e:f7:95:4d:ed:86:63:0e:fd:b3:e0:84:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f08012dab71da55fa7f75cdc271174258eff57c
        Validity
            Not Before: Apr 10 02:03:40 2023 GMT
            Not After : Apr  8 02:08:40 2024 GMT
        Subject: CN=386741433D15BB0BF2FFC1A59FDC843F3878622F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:4f:a7:76:e5:60:f3:b8:04:b2:59:20:4f:
                    e7:86:1b:85:7b:bc:ce:94:8b:76:1e:2b:f6:6d:36:
                    b1:93:7a:d5:25:20:55:99:36:92:44:ca:3c:19:60:
                    39:45:fe:8a:53:f3:07:95:66:32:a7:f5:e0:c0:df:
                    a6:db:d0:88:a2:46:c4:14:90:17:f6:6f:5c:b2:83:
                    39:62:ef:d8:0c:7f:a2:0d:72:e2:a2:36:c6:df:d2:
                    10:33:7d:f6:c6:70:d4:dc:b2:ba:61:85:19:01:39:
                    05:37:a8:db:bc:54:9a:b9:b8:59:99:80:d2:95:f6:
                    52:1c:68:74:af:ae:5a:b9:2e:b9:c1:f2:11:86:e5:
                    0e:20:0f:ae:6f:8e:79:98:9e:17:b3:2e:fb:44:59:
                    60:b2:46:4a:fc:d6:02:0f:bf:96:b9:08:07:d5:e2:
                    70:00:9e:f2:99:c4:f3:85:48:a4:b3:4e:3b:d9:af:
                    cb:f0:d5:25:03:a0:19:4c:97:d5:b8:5e:1e:26:3c:
                    82:08:cb:f7:88:1b:fe:61:99:44:55:4a:ce:e2:03:
                    b1:8b:bf:cf:a5:6c:d2:25:f6:02:e8:c7:a8:c3:8c:
                    13:43:83:e8:6a:ed:73:7e:12:32:63:07:02:92:45:
                    6f:0d:94:74:8d:8e:f7:79:e9:5b:78:49:db:24:cd:
                    61:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:67:41:43:3D:15:BB:0B:F2:FF:C1:A5:9F:DC:84:3F:38:78:62:2F
            X509v3 Authority Key Identifier:
                keyid:4F:08:01:2D:AB:71:DA:55:FA:7F:75:CD:C2:71:17:42:58:EF:F5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Muilties/3/4F08012DAB71DA55FA7F75CDC271174258EFF57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwgBLatx2lX6f3XNwnEXQljv9Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Muilties/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2be8::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:4a:f8:c0:8e:6b:8c:8b:61:dd:45:9d:6c:02:59:a1:03:27:
         19:a7:73:eb:ac:93:2c:7c:ba:ca:99:eb:f7:c6:16:7f:7d:e3:
         0d:05:a0:20:43:df:9b:05:c7:cb:ad:cf:1d:d0:2b:23:7d:f2:
         7f:f0:f8:23:c9:41:5c:e0:8b:0c:02:79:9a:44:e4:cd:29:60:
         77:e8:03:7d:0b:89:99:2d:9d:9f:90:5a:b4:ea:d7:81:a5:95:
         72:17:62:82:38:e3:b7:8c:80:5d:30:e6:ed:c3:18:bd:7e:16:
         2b:d8:67:db:78:e1:0b:e3:2b:eb:42:2f:ba:4e:39:71:53:be:
         f2:7c:d9:a4:da:d4:7c:18:05:ba:8e:5a:d6:bc:cd:51:71:76:
         db:f8:9b:b1:c1:eb:36:23:bf:ce:25:4c:8d:dd:2e:89:bd:28:
         6a:9e:fc:c6:d1:15:88:36:b6:bf:60:bb:1f:55:ec:3c:08:19:
         44:79:b9:c4:07:ba:a1:7f:18:cf:25:38:ea:80:60:5a:c6:78:
         aa:2f:4c:a7:f3:12:a0:27:a9:db:31:ff:e9:c8:0a:48:69:06:
         55:24:dd:35:67:a6:48:31:83:0b:33:ae:cf:43:94:04:fa:7f:
         cf:ce:99:18:bc:51:c2:d2:1f:a1:79:c5:e7:29:67:b2:6d:03:
         c4:21:c0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 20:46:14 2023 by rpki-client on console-ams.rpki-client.org