Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030323a3a2f34382d3438203d3e20323135393738.roa
File:                     326131333a646638373a323030323a3a2f34382d3438203d3e20323135393738.roa (raw, json)
Hash identifier:          2QcsnrDU5qdzodUkpsEJ8cNFy/wtqK4vDbPNOrxBYTg=
Subject key identifier:   2C:C6:A8:02:81:B2:DB:74:88:0B:D0:97:11:6B:8F:01:30:11:01:C0
Certificate issuer:       /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial:       096891FE7454F0EF8BAF7DC39A124894CA8E63E1
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject info access:      rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030323a3a2f34382d3438203d3e20323135393738.roa
Signing time:             Tue 30 Jan 2024 19:15:07 +0000
ROA not before:           Tue 30 Jan 2024 19:10:07 +0000
ROA not after:            Tue 28 Jan 2025 19:15:07 +0000
asID:                     215978
IP address blocks:        2a13:df87:2002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:68:91:fe:74:54:f0:ef:8b:af:7d:c3:9a:12:48:94:ca:8e:63:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
        Validity
            Not Before: Jan 30 19:10:07 2024 GMT
            Not After : Jan 28 19:15:07 2025 GMT
        Subject: CN=2CC6A80281B2DB74880BD097116B8F01301101C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a6:24:3b:76:aa:d8:77:e6:4d:c4:40:7e:b8:
                    a4:60:11:9d:b6:59:fd:18:ba:ec:98:f3:ae:26:3e:
                    81:0c:03:23:60:ad:c1:76:d4:95:5f:00:77:ee:0d:
                    10:7e:a6:f9:6f:f4:e0:58:f4:df:f7:ed:9e:a9:35:
                    fe:83:68:6f:54:75:2b:d3:a6:52:f9:27:ee:1d:4c:
                    8a:c1:a8:65:79:e6:f4:b2:e7:c1:98:41:2b:03:fe:
                    1e:dd:f3:a2:3a:23:4b:00:74:e9:e5:88:6f:2d:53:
                    d2:f9:a3:0f:9c:d0:f5:12:93:b5:40:f6:49:03:52:
                    6a:7f:85:ff:35:15:1e:fe:0b:2c:f2:19:0c:f1:bb:
                    db:97:8c:d5:49:74:fc:b9:b0:3a:ba:b0:be:c8:16:
                    82:90:16:09:da:fc:b9:98:69:92:b7:d5:5e:a2:8d:
                    e9:a7:68:d4:3a:07:82:ac:9b:1c:38:cc:6c:28:e9:
                    1f:f5:79:23:81:a8:cf:9a:5c:13:20:a9:fa:ab:9b:
                    02:1c:82:c1:9f:2d:d1:7d:dc:45:25:46:66:af:e4:
                    43:e3:66:ed:50:7f:f6:24:59:70:e9:d8:f7:1d:f9:
                    35:97:2c:1b:1c:d8:1f:76:01:f5:a8:4b:0f:71:2a:
                    90:50:2d:7d:e1:c9:9c:24:28:82:5f:e9:5f:44:92:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C6:A8:02:81:B2:DB:74:88:0B:D0:97:11:6B:8F:01:30:11:01:C0
            X509v3 Authority Key Identifier:
                keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030323a3a2f34382d3438203d3e20323135393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:2002::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:42:13:08:fc:8f:e2:db:be:71:93:5b:2e:bf:18:35:2f:d0:
         7b:8a:e8:02:cb:5f:1b:a9:e1:d0:5c:00:28:c4:b1:b5:8a:55:
         42:0e:a8:13:c2:b6:ff:c3:60:ff:0b:2d:58:ca:1e:bf:b0:48:
         85:c7:88:c3:39:fd:91:15:84:aa:33:38:17:3d:5f:27:de:e4:
         16:8d:4f:b7:8c:56:8a:47:f7:32:14:cd:f5:0e:12:90:72:d1:
         69:f6:28:b1:33:a0:df:da:38:12:d8:71:aa:bd:85:c3:fb:8b:
         20:47:2c:88:f8:56:4c:60:1a:77:0a:2d:24:fe:c1:f7:9c:d0:
         70:e8:04:0e:21:8b:e0:5e:31:1e:f2:c7:2f:68:76:bc:0e:56:
         c0:f9:a3:06:99:d3:1f:96:e2:23:23:ed:ff:84:a5:b9:6b:62:
         53:71:8e:a7:5c:d5:6c:47:51:44:7c:5f:1a:78:68:42:28:db:
         6a:91:84:ab:5c:12:d0:91:54:ff:d7:4c:1b:ba:f8:1b:30:6f:
         2f:da:f7:82:9f:20:96:b3:74:96:09:76:85:04:50:51:2a:65:
         17:d5:2d:de:64:0d:b6:ab:e0:4d:85:48:69:d2:4a:47:cb:14:
         94:bb:29:36:cb:41:10:7c:ba:78:52:6d:d1:83:8a:7f:fb:82:
         1e:1f:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----