Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/sky/0/326131343a333030303a3a2f32392d3438203d3e20323136313338.roa
File:                     326131343a333030303a3a2f32392d3438203d3e20323136313338.roa (raw, json)
Hash identifier:          sQiW/7dVyGHaHeYnN9yabJ9l3qVbGW+Ic+xIDXe/Mwk=
Subject key identifier:   6F:46:29:B8:58:9E:BE:7B:88:B7:4A:15:6D:23:DB:19:52:A3:B6:56
Certificate issuer:       /CN=56f176b165faa7f81131464da76a5803dd5556cf
Certificate serial:       724FA9AD14B5C52FE3BFBA3D045C782FECAFA378
Authority key identifier: 56:F1:76:B1:65:FA:A7:F8:11:31:46:4D:A7:6A:58:03:DD:55:56:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvF2sWX6p_gRMUZNp2pYA91VVs8.cer
Subject info access:      rsync://rpki.co/repo/sky/0/326131343a333030303a3a2f32392d3438203d3e20323136313338.roa
Signing time:             Sat 23 Nov 2024 12:38:09 +0000
ROA not before:           Sat 23 Nov 2024 12:33:09 +0000
ROA not after:            Sat 22 Nov 2025 12:38:09 +0000
asID:                     216138
IP address blocks:        2a14:3000::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4f:a9:ad:14:b5:c5:2f:e3:bf:ba:3d:04:5c:78:2f:ec:af:a3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f176b165faa7f81131464da76a5803dd5556cf
        Validity
            Not Before: Nov 23 12:33:09 2024 GMT
            Not After : Nov 22 12:38:09 2025 GMT
        Subject: CN=6F4629B8589EBE7B88B74A156D23DB1952A3B656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:4a:30:70:dc:9f:7a:dc:16:d2:fe:6d:7b:
                    41:73:ad:40:34:3a:29:ee:5b:28:d4:6c:35:e9:c1:
                    be:87:a7:9e:45:0f:c4:c5:63:92:d5:50:d2:f8:7f:
                    12:8d:51:1c:dc:f8:af:d2:b7:48:3e:52:42:1d:a2:
                    2a:2d:ab:85:fe:84:bc:d8:ba:3b:e8:7f:48:8d:c2:
                    a4:65:73:56:79:2d:fe:ca:d0:ed:40:31:d4:4d:59:
                    de:57:ce:26:8e:f7:2b:52:8f:32:31:0d:8b:b9:4d:
                    cd:ef:f5:15:3d:31:a5:fe:38:fc:51:8d:47:c9:0a:
                    f2:92:45:79:c1:46:49:17:39:ff:33:34:6a:fe:6a:
                    07:da:31:b4:e5:7f:86:73:2c:0b:17:a4:4a:d8:6a:
                    13:36:61:c6:c8:9f:4d:00:93:d0:74:ac:ed:87:f9:
                    f3:04:a8:c8:fe:98:03:9f:8b:2c:70:90:16:46:82:
                    95:c5:86:f8:67:ec:8c:1f:60:e7:41:bc:0c:de:c8:
                    b1:2c:35:6f:39:12:33:39:c6:d8:76:75:c8:91:34:
                    e4:af:b7:a3:39:bb:59:b1:7e:da:61:d7:d6:7c:ed:
                    87:4d:ae:a5:44:ef:5f:3c:ed:29:17:28:0b:bf:56:
                    f3:7c:7d:d1:7e:48:25:5f:fd:b9:fe:db:ae:f5:a3:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:46:29:B8:58:9E:BE:7B:88:B7:4A:15:6D:23:DB:19:52:A3:B6:56
            X509v3 Authority Key Identifier:
                keyid:56:F1:76:B1:65:FA:A7:F8:11:31:46:4D:A7:6A:58:03:DD:55:56:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/sky/0/56F176B165FAA7F81131464DA76A5803DD5556CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvF2sWX6p_gRMUZNp2pYA91VVs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/sky/0/326131343a333030303a3a2f32392d3438203d3e20323136313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:3000::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:99:41:37:a2:c4:31:a9:9a:25:c9:7b:51:38:d8:af:7e:6d:
         84:6b:5f:37:10:c0:1c:7e:c8:4a:da:1b:71:3b:76:4a:78:23:
         de:7c:19:28:18:f3:fb:02:3e:62:f0:98:a6:96:39:f1:40:97:
         b6:7d:91:9d:1e:3d:69:c6:9e:ed:00:9f:e3:b7:af:3f:40:f3:
         9a:52:b3:bb:15:64:d8:dc:f1:7f:08:4b:69:9e:6c:e7:43:0e:
         ae:74:87:1e:71:d4:c0:0d:89:74:ec:0a:d8:8e:27:a0:99:17:
         28:e4:55:5b:c0:25:d1:2a:1c:4a:fe:2d:ef:8b:6a:7e:58:55:
         b9:1d:8a:31:63:4c:44:f6:02:30:f1:d4:df:fb:b7:02:17:11:
         8e:6f:f7:68:9a:9d:6c:d4:d4:60:56:96:33:04:25:88:85:1d:
         dd:52:09:1a:e1:00:63:b5:96:a2:b1:a1:6f:0d:2c:97:fc:a2:
         cf:28:01:83:37:66:48:f6:d5:dc:d7:78:fc:5c:26:5e:b1:32:
         13:6c:0c:15:85:c3:13:73:2e:6e:48:3a:1d:ed:e5:e4:c2:69:
         05:01:6f:4d:5d:69:82:8a:b6:e4:38:b8:93:93:d0:84:d0:68:
         00:66:be:1d:f7:50:f6:6c:2b:2a:71:88:17:cf:2f:0e:74:0e:
         ce:7d:2d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----