Route Origin Authorization

$ rpki-client -vvf rpki.qs.nu/repo/cynthia/2/323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa
File:                     323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (raw, json)
Hash identifier:          NgxL7N2zJtWgOQfI14/TaDLSaMb5T9kBPjZredJXqDo=
Subject key identifier:   97:99:6B:7F:1A:79:18:98:08:32:8E:11:AC:19:8D:8A:32:15:0F:17
Certificate issuer:       /CN=22ab6906f1375c1930cf9ea6c4f3c90039f5ed4c
Certificate serial:       58BDE78DAFA36452B58BEBA5D7DFF91B139BAA95
Authority key identifier: 22:AB:69:06:F1:37:5C:19:30:CF:9E:A6:C4:F3:C9:00:39:F5:ED:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqtpBvE3XBkwz56mxPPJADn17Uw.cer
Subject info access:      rsync://rpki.qs.nu/repo/cynthia/2/323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa
Signing time:             Tue 23 Aug 2022 20:17:33 +0000
ROA not before:           Tue 23 Aug 2022 20:12:33 +0000
ROA not after:            Tue 22 Aug 2023 20:17:33 +0000
asID:                     210089
IP address blocks:        2001:67c:1190::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bd:e7:8d:af:a3:64:52:b5:8b:eb:a5:d7:df:f9:1b:13:9b:aa:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ab6906f1375c1930cf9ea6c4f3c90039f5ed4c
        Validity
            Not Before: Aug 23 20:12:33 2022 GMT
            Not After : Aug 22 20:17:33 2023 GMT
        Subject: CN=97996B7F1A79189808328E11AC198D8A32150F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:09:de:9d:b9:68:c2:6b:81:d4:09:9e:b4:
                    4d:27:d7:ab:b7:b6:f3:af:a7:71:2a:34:95:82:8b:
                    35:c8:19:8c:5f:5f:58:4f:58:79:66:04:39:ca:38:
                    61:f9:06:ad:c7:6c:e1:f2:5d:ed:8b:97:ac:c2:38:
                    2e:96:ba:4a:c5:b4:68:f2:36:cb:5c:69:46:58:f4:
                    55:d6:a4:dc:b2:82:90:2b:a5:5c:be:d6:6e:5d:53:
                    0d:6b:3c:c0:72:42:29:1f:25:82:30:af:07:46:3d:
                    61:a9:d2:bf:b9:2d:3d:d2:0e:01:40:14:cb:a7:fb:
                    3a:dc:e6:ea:56:ce:82:c1:c8:ac:0c:b7:1b:ab:f1:
                    79:fe:51:52:06:27:7a:e6:53:99:66:5d:16:e6:68:
                    67:84:df:d3:78:87:31:58:7a:f2:79:77:de:2f:4a:
                    4d:d2:c0:e4:21:1a:c4:bb:a6:af:5c:7c:5d:39:23:
                    02:03:c8:2a:35:cd:c9:7b:ee:40:c4:f0:c6:06:1c:
                    b1:c8:12:2e:f0:d3:60:a2:a9:0c:64:5e:be:49:77:
                    c2:e8:ce:51:cd:ca:f1:e4:9f:92:53:08:9d:33:06:
                    e5:d1:74:1b:fb:86:eb:09:33:47:db:28:5f:3c:84:
                    64:90:ed:9f:84:e2:a8:7f:59:ac:2d:88:be:77:c5:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:99:6B:7F:1A:79:18:98:08:32:8E:11:AC:19:8D:8A:32:15:0F:17
            X509v3 Authority Key Identifier:
                keyid:22:AB:69:06:F1:37:5C:19:30:CF:9E:A6:C4:F3:C9:00:39:F5:ED:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/cynthia/2/22AB6906F1375C1930CF9EA6C4F3C90039F5ED4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqtpBvE3XBkwz56mxPPJADn17Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/cynthia/2/323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1190::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:eb:17:98:f0:01:e8:db:c7:63:69:cf:9a:9c:87:f2:c3:e8:
         e5:31:44:82:d3:c5:f2:b7:e9:83:a1:3d:aa:58:fc:6e:50:67:
         f4:45:df:42:4d:ba:b0:13:54:f8:67:5e:ca:be:01:27:f5:67:
         98:3d:9b:47:3b:39:ca:f2:f7:10:02:48:a7:81:6e:a6:3e:c1:
         03:2f:af:8f:e7:40:fb:67:be:7c:c1:14:db:41:cc:e1:34:cd:
         ff:7a:72:bf:61:8e:06:bc:90:8d:bf:d0:c8:4f:9e:9a:a7:2d:
         70:2e:4c:2e:ad:f5:44:b0:be:d7:68:fd:1e:e5:ca:17:0f:18:
         4a:d4:ef:0b:5d:d1:a1:c7:4a:b3:f1:06:5f:72:26:db:40:5c:
         46:86:36:aa:17:30:45:26:94:10:6e:48:ba:8c:ad:89:7f:24:
         14:39:9c:01:ce:9b:a3:1b:72:a6:b3:c7:4d:17:87:64:39:8e:
         35:be:5e:48:68:f7:b2:4f:30:7f:b6:53:c5:4a:ec:ff:dc:6b:
         5b:16:0c:27:54:45:9d:b6:aa:48:21:a3:4e:72:9d:64:24:7c:
         2f:f3:4a:f0:9a:76:08:3b:c5:a6:3d:e1:37:84:fb:85:fe:7c:
         cb:a4:b0:fb:95:4a:94:6c:bc:2e:6e:41:4e:9e:de:5b:2d:62:
         27:58:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----