Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030303a3a2f33362d3336203d3e203630323233.roa
File:                     326131333a646638373a323030303a3a2f33362d3336203d3e203630323233.roa (raw, json)
Hash identifier:          CJ4l+6MnUcY/beWsZk6fWrAjTazzgFP05C70GEIQuZw=
Subject key identifier:   60:1E:58:CC:89:93:2A:D3:82:AF:78:C4:B4:13:01:74:67:04:87:7D
Certificate issuer:       /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial:       25F44D38E71ED58D19EA60C3A44F36A6A5E4645A
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject info access:      rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030303a3a2f33362d3336203d3e203630323233.roa
Signing time:             Fri 19 Jan 2024 16:31:13 +0000
ROA not before:           Fri 19 Jan 2024 16:26:13 +0000
ROA not after:            Fri 17 Jan 2025 16:31:13 +0000
asID:                     60223
IP address blocks:        2a13:df87:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f4:4d:38:e7:1e:d5:8d:19:ea:60:c3:a4:4f:36:a6:a5:e4:64:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
        Validity
            Not Before: Jan 19 16:26:13 2024 GMT
            Not After : Jan 17 16:31:13 2025 GMT
        Subject: CN=601E58CC89932AD382AF78C4B41301746704877D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:33:0f:1a:f0:c5:43:28:fb:03:07:62:4f:03:
                    c2:fb:e6:81:29:15:56:bb:8f:c8:42:6c:82:94:13:
                    96:f0:07:8e:0c:5d:28:35:b2:52:00:77:c3:a6:75:
                    d5:1c:07:81:cf:68:8e:c9:9a:33:52:0c:ab:8d:93:
                    79:30:59:3a:e2:78:0d:b1:f5:68:17:a6:a6:09:6a:
                    91:5b:3b:e3:99:e6:8b:7a:d7:72:55:c3:0f:43:e4:
                    6e:95:9b:aa:68:55:dd:b3:18:4f:b2:69:eb:bc:56:
                    f7:91:0f:4c:11:d1:8a:cc:4d:bd:a8:f7:6c:17:f5:
                    15:ff:8d:82:7c:7c:a6:f2:ec:df:6f:10:b5:3c:0f:
                    e5:53:fb:34:62:96:ae:3e:25:44:50:7e:5a:58:94:
                    9c:8d:f0:94:f8:24:65:f6:5c:af:53:f2:e2:cc:4d:
                    90:a2:9b:13:dc:38:82:46:6e:b9:10:00:65:ba:d6:
                    06:be:34:60:ee:ef:b6:76:ba:b9:98:75:6a:cb:f3:
                    f0:01:d2:1c:a3:d5:38:de:5c:d8:0e:c7:1a:24:7b:
                    fe:7d:28:0e:e0:84:7f:fe:10:a2:22:41:3e:93:91:
                    74:ae:da:a4:5d:be:93:9b:8d:43:28:96:9e:56:01:
                    dc:bd:33:13:9b:17:87:f2:23:2c:2e:0c:21:da:a2:
                    71:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1E:58:CC:89:93:2A:D3:82:AF:78:C4:B4:13:01:74:67:04:87:7D
            X509v3 Authority Key Identifier:
                keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030303a3a2f33362d3336203d3e203630323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:2d:c2:10:b2:93:6e:22:17:17:3b:99:7f:85:33:31:34:f4:
         d7:69:40:95:41:6a:45:66:d7:b1:f5:0a:0e:2a:6b:54:55:89:
         28:bb:04:2b:6c:42:82:b3:06:af:14:72:0f:84:5e:7d:a2:2f:
         33:9b:25:62:ce:f1:83:d5:3f:fe:a8:80:34:6c:6e:92:d2:01:
         2b:9a:62:8c:9d:41:4e:18:0c:e3:f9:92:f4:18:a8:83:4b:67:
         d4:17:5a:c8:e8:e8:09:e2:f1:f9:e0:56:d4:2c:51:48:20:e5:
         cd:2e:de:2f:a3:78:87:ec:e5:9e:29:4f:5b:2d:27:aa:54:24:
         ae:de:0e:92:77:d5:84:a8:ee:42:0d:f5:2f:ee:64:e6:65:d4:
         2c:2d:a0:c6:14:b7:26:8b:38:19:d0:fe:a6:ce:c2:f3:80:00:
         19:94:fd:80:cf:bd:41:45:e7:6a:a1:19:2a:4e:2b:48:3b:90:
         62:51:b0:cd:92:c1:ef:b8:8f:9a:39:ad:9e:5f:0c:81:2a:c8:
         6a:7f:c9:4e:c8:b6:3d:68:17:7a:27:fc:37:85:f8:10:44:7f:
         bb:93:c5:d7:e7:6b:43:16:ce:97:1d:39:81:92:f9:7f:c1:54:
         72:b1:46:ab:8d:f6:85:13:14:46:3d:86:49:ef:8b:15:7a:8e:
         7e:2e:f0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----