Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/yuki/0/326130363a313238373a353766613a3a2f34372d3438203d3e20323033393739.roa
File:                     326130363a313238373a353766613a3a2f34372d3438203d3e20323033393739.roa (raw, json)
Hash identifier:          sTJgFzewTdsGL2tGaQ/nAw8bec/2y4p6lSF36iGKIHU=
Subject key identifier:   52:94:7C:3B:32:77:80:0E:D1:83:87:7E:B8:60:FE:BE:03:B3:F6:D3
Certificate issuer:       /CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
Certificate serial:       673BA79F4E592B18D5D862BD860B2B9014BE0584
Authority key identifier: C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
Authority info access:    rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer
Subject info access:      rsync://rpki.co/repo/yuki/0/326130363a313238373a353766613a3a2f34372d3438203d3e20323033393739.roa
Signing time:             Wed 22 Nov 2023 03:06:53 +0000
ROA not before:           Wed 22 Nov 2023 03:01:53 +0000
ROA not after:            Wed 20 Nov 2024 03:06:53 +0000
asID:                     203979
IP address blocks:        2a06:1287:57fa::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3b:a7:9f:4e:59:2b:18:d5:d8:62:bd:86:0b:2b:90:14:be:05:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
        Validity
            Not Before: Nov 22 03:01:53 2023 GMT
            Not After : Nov 20 03:06:53 2024 GMT
        Subject: CN=52947C3B3277800ED183877EB860FEBE03B3F6D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:5c:54:83:e7:bf:1c:31:f5:55:8b:ec:3a:
                    ed:da:40:fa:35:7c:13:81:2c:83:52:d6:28:b9:a1:
                    27:7e:d2:30:d5:0c:35:93:07:33:41:71:ea:4c:65:
                    10:5c:e4:84:28:03:a4:62:33:22:47:6d:2a:65:66:
                    ff:39:87:c1:fe:f6:d5:d4:0d:2e:5d:52:db:36:90:
                    98:15:22:cf:e4:99:ae:5e:20:be:61:91:ac:3e:7b:
                    fa:80:fb:b0:ad:b8:0e:f2:fc:e7:39:6c:7f:e0:87:
                    04:db:a1:af:bc:3c:12:38:ed:c1:0a:04:1d:bd:ec:
                    2b:2b:df:bb:0e:af:72:c1:89:28:30:30:93:05:a9:
                    c2:88:92:be:26:1f:df:da:21:c0:76:2e:e5:42:a8:
                    69:0f:87:3a:cb:63:f0:37:4d:be:5f:9a:de:3f:f3:
                    31:75:42:da:4f:8a:26:1a:0f:bc:1c:59:43:77:bd:
                    de:47:fd:73:64:56:5d:bf:9b:1f:e0:57:46:04:bd:
                    26:b6:88:90:8e:e1:52:21:74:3c:78:1d:da:b6:48:
                    82:f0:c0:10:d1:5c:2c:9e:4b:60:0b:bf:4e:43:57:
                    3b:8f:53:41:a7:ef:b2:bc:92:67:d4:7c:3a:d7:68:
                    00:36:6e:b2:fc:66:f9:92:8a:4d:56:7d:2d:79:fa:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:94:7C:3B:32:77:80:0E:D1:83:87:7E:B8:60:FE:BE:03:B3:F6:D3
            X509v3 Authority Key Identifier:
                keyid:C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/yuki/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/yuki/0/326130363a313238373a353766613a3a2f34372d3438203d3e20323033393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:57fa::/47

    Signature Algorithm: sha256WithRSAEncryption
         51:b1:f4:e4:3b:9d:09:29:cc:2d:0f:cd:ec:b8:db:38:65:c5:
         d6:b1:c2:c4:76:04:98:b6:a8:95:8c:9c:65:62:12:b8:90:c4:
         bc:9b:e1:00:38:2d:82:7d:be:8c:7f:f4:c6:fd:13:d9:4d:5f:
         b8:4e:34:33:f5:a4:d8:7e:2d:ca:72:c8:ec:19:9c:b5:c3:8a:
         fe:91:51:19:36:aa:ab:b7:ea:b8:16:46:15:96:4e:df:91:14:
         82:cf:39:94:64:dc:87:89:79:0d:fd:38:ab:ac:92:8a:c5:5d:
         8c:d8:8b:f8:ae:ac:0d:88:10:db:b4:dc:17:d9:06:bc:c0:c8:
         95:a7:70:e0:2e:3a:4c:c7:a6:9d:72:6e:0b:92:5e:06:62:6d:
         b0:c7:66:ea:3d:f9:dc:6d:88:41:7c:29:d0:b0:5e:33:02:cb:
         84:f7:b8:8f:f8:b0:f7:fd:72:bb:01:9a:e4:fe:57:0a:c7:66:
         07:5b:d5:77:ec:05:33:13:8e:b7:e8:26:89:42:67:30:7a:99:
         1a:28:21:cc:67:07:71:53:a8:6d:55:7a:a3:f5:aa:75:81:83:
         11:f7:30:2b:bd:ed:d0:4b:cd:4b:bf:18:e3:8d:c8:22:d8:d9:
         ea:38:4a:35:b9:cf:b1:0b:b6:0e:fa:1e:b0:b8:e9:6a:79:90:
         93:c9:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----