Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pudu/0/36342e3138372e3230382e302f32332d3234203d3e203437363839.roa
File:                     36342e3138372e3230382e302f32332d3234203d3e203437363839.roa (raw, json)
Hash identifier:          Nj1wJZxmybxlBs4LuZv04dt7BIYevvvaiFiHJgkAZME=
Subject key identifier:   D9:8B:5D:45:42:0D:D2:99:FC:4B:2E:31:1A:73:6E:B4:FB:EA:08:1E
Certificate issuer:       /CN=ead264c4a27c6bf24ae80e57c50bd86d4b72b06e
Certificate serial:       0B64E31F0B1BDB8255389D2882E8EB61B12397B3
Authority key identifier: EA:D2:64:C4:A2:7C:6B:F2:4A:E8:0E:57:C5:0B:D8:6D:4B:72:B0:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tJkxKJ8a_JK6A5XxQvYbUtysG4.cer
Subject info access:      rsync://rpki.co/repo/Pudu/0/36342e3138372e3230382e302f32332d3234203d3e203437363839.roa
Signing time:             Sun 23 Apr 2023 07:23:24 +0000
ROA not before:           Sun 23 Apr 2023 07:18:24 +0000
ROA not after:            Sun 21 Apr 2024 07:23:24 +0000
asID:                     47689
IP address blocks:        64.187.208.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:64:e3:1f:0b:1b:db:82:55:38:9d:28:82:e8:eb:61:b1:23:97:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead264c4a27c6bf24ae80e57c50bd86d4b72b06e
        Validity
            Not Before: Apr 23 07:18:24 2023 GMT
            Not After : Apr 21 07:23:24 2024 GMT
        Subject: CN=D98B5D45420DD299FC4B2E311A736EB4FBEA081E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:d1:eb:69:1f:04:fa:da:73:79:5d:17:f3:
                    aa:12:8d:75:9d:25:58:5e:33:9c:a9:d5:3c:bd:00:
                    17:f0:8c:de:84:84:60:f4:c6:64:be:e3:7f:aa:c5:
                    3e:06:6c:4b:e7:71:1a:93:91:55:25:75:dc:da:af:
                    f4:c9:1f:51:15:5d:2f:d4:4b:11:df:d0:a2:52:6f:
                    c7:fa:fe:30:a2:c3:28:4c:ca:36:ab:cb:f8:74:e6:
                    0b:43:4f:59:39:b8:3a:e3:bd:1c:5e:f4:1b:c5:5a:
                    2e:18:3e:35:47:c1:54:f6:fd:76:81:63:60:aa:c9:
                    36:78:4c:f2:84:1b:40:28:81:b2:6c:22:00:5c:79:
                    1d:bb:4a:31:34:54:1d:97:5c:e5:24:17:7a:c0:fc:
                    0f:2b:6c:26:60:1b:b4:94:24:bb:00:f4:99:8d:99:
                    d6:55:9f:7a:ba:77:a7:09:31:d3:a5:b9:f1:91:da:
                    49:2c:ae:e3:2e:57:a7:e3:99:2f:ed:17:dc:94:f1:
                    90:9f:2c:b1:59:72:7d:d9:de:e9:ba:dd:26:17:57:
                    a6:ea:22:f7:21:70:a2:6c:97:20:9c:d7:de:03:8b:
                    a6:a4:ed:b6:04:49:61:8e:82:42:aa:e1:a4:2f:5a:
                    6a:56:39:e0:a6:ff:d4:1d:ee:b6:90:2c:cf:d2:1b:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8B:5D:45:42:0D:D2:99:FC:4B:2E:31:1A:73:6E:B4:FB:EA:08:1E
            X509v3 Authority Key Identifier:
                keyid:EA:D2:64:C4:A2:7C:6B:F2:4A:E8:0E:57:C5:0B:D8:6D:4B:72:B0:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pudu/0/EAD264C4A27C6BF24AE80E57C50BD86D4B72B06E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tJkxKJ8a_JK6A5XxQvYbUtysG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pudu/0/36342e3138372e3230382e302f32332d3234203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:d7:25:19:2c:e1:d5:54:1f:77:4c:eb:ee:87:08:0c:dc:22:
         d0:13:b3:cc:55:e1:81:63:c5:fd:e4:d0:d0:bc:bf:70:d6:de:
         c5:f6:3e:89:05:15:40:af:a0:d6:b0:f5:ed:e5:c3:3b:06:52:
         63:33:24:f6:35:c1:b0:51:1d:fb:5d:b4:50:39:b9:67:88:50:
         cf:e4:2d:d7:08:d1:4a:ea:cb:1d:a0:1f:95:2a:5a:0b:20:85:
         6c:85:fa:c9:c3:58:56:4a:02:c8:e5:e1:11:d3:23:c8:ca:7a:
         31:8a:1b:96:f5:4a:e5:a0:50:0b:be:09:55:b3:e6:99:90:ec:
         29:be:85:d2:e9:93:e4:03:83:57:ab:27:14:65:58:af:29:42:
         79:0f:62:a4:fd:ac:0a:96:6e:0d:9b:ec:83:b4:f7:41:bd:78:
         d6:d5:e6:05:9e:99:da:65:d3:8e:70:fc:0f:23:95:3f:3f:e4:
         c1:45:8b:27:52:d0:43:1c:f5:36:0c:02:82:ce:44:0b:a3:19:
         52:69:cc:81:f1:8e:cc:a2:5f:3e:d9:91:64:b0:72:84:a4:69:
         2a:0c:13:e4:fc:30:c2:3f:93:cd:5c:74:7a:c0:3a:f3:74:45:
         b2:9f:9b:9a:cb:a9:1f:ce:b4:a5:84:a7:1e:73:f5:af:47:c2:
         cf:93:ec:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----