Route Origin Authorization

$ rpki-client -vvf rpki.qs.nu/repo/qsnu/1/32332e3134392e3131322e302f32342d3234203d3e203537373832.roa
File:                     32332e3134392e3131322e302f32342d3234203d3e203537373832.roa (raw, json)
Hash identifier:          rshoidz3AWuLxK9JVIisNFngh50ia3o582WC77/CSQ8=
Subject key identifier:   A4:28:9D:C7:55:5C:16:BB:70:A9:4B:BF:F8:80:35:6B:B8:13:69:82
Certificate issuer:       /CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
Certificate serial:       6876CF8AF84C4C41094B44ED3968E72BFF3BC88E
Authority key identifier: 24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer
Subject info access:      rsync://rpki.qs.nu/repo/qsnu/1/32332e3134392e3131322e302f32342d3234203d3e203537373832.roa
Signing time:             Tue 25 Jul 2023 20:33:48 +0000
ROA not before:           Tue 25 Jul 2023 20:28:48 +0000
ROA not after:            Tue 23 Jul 2024 20:33:48 +0000
asID:                     57782
IP address blocks:        23.149.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:76:cf:8a:f8:4c:4c:41:09:4b:44:ed:39:68:e7:2b:ff:3b:c8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
        Validity
            Not Before: Jul 25 20:28:48 2023 GMT
            Not After : Jul 23 20:33:48 2024 GMT
        Subject: CN=A4289DC7555C16BB70A94BBFF880356BB8136982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:69:1b:45:96:24:b3:d4:13:aa:1e:0c:f9:
                    5c:5f:59:0c:2e:fe:84:ad:fa:1b:2f:e5:a4:5d:ba:
                    5e:51:a2:3f:f9:10:19:a6:17:17:a2:bc:1e:46:8d:
                    b1:8f:06:7f:67:fe:fc:3a:c3:fb:b8:a0:67:87:ee:
                    42:b8:73:9b:b4:53:d7:24:8f:7e:23:55:87:f1:5a:
                    29:8c:59:96:f7:7f:93:46:46:5d:41:37:81:65:04:
                    fa:91:4b:ba:8b:3f:a7:a4:3a:65:22:6e:2f:7a:23:
                    3f:a1:4f:07:b6:ba:79:06:eb:db:ca:f9:21:c3:10:
                    eb:cf:11:a8:1c:e2:34:6f:bc:87:d1:ad:ce:1f:57:
                    8f:20:5d:19:c6:3a:87:bc:b1:68:9e:f7:e7:c6:a5:
                    f4:eb:5b:37:8d:80:6b:dc:4e:98:78:37:72:c4:30:
                    35:81:e6:e2:55:89:5e:18:fb:82:2c:a8:1f:d4:89:
                    ab:25:0f:de:c6:96:e2:76:a5:0a:90:71:93:ab:92:
                    b6:22:70:4f:61:d5:30:a0:01:8e:f8:79:27:e1:cd:
                    a3:8d:fd:f2:be:bf:f9:ff:f7:4d:dc:fc:1d:4d:93:
                    3f:77:6c:f1:9d:42:fc:c2:b7:f6:30:20:d8:57:ac:
                    34:5a:5e:6f:0e:9a:3f:d9:5e:97:16:88:31:65:ac:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:28:9D:C7:55:5C:16:BB:70:A9:4B:BF:F8:80:35:6B:B8:13:69:82
            X509v3 Authority Key Identifier:
                keyid:24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/qsnu/1/24ABEFD2EFB3FE319A14519EA4989120B0AECA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/qsnu/1/32332e3134392e3131322e302f32342d3234203d3e203537373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:f5:2e:6a:36:8d:c0:de:ea:01:31:21:13:19:30:df:0f:42:
         0a:8e:04:92:08:f1:d5:dc:0d:43:21:41:54:11:ef:81:31:46:
         a5:df:5a:79:e8:27:55:4b:7e:a3:b5:80:cd:04:8b:07:bc:2d:
         b7:89:f2:9e:c7:be:a5:35:a3:c6:0e:2a:02:cf:8d:1a:d7:65:
         76:5d:c0:a9:33:83:46:b2:eb:b5:e3:d3:10:d5:5d:76:3c:89:
         60:dc:7b:c0:7a:6e:57:bb:5a:14:6b:c3:a9:7a:9d:b3:ab:4c:
         d4:a4:0c:c0:2c:51:73:b6:e8:9a:f1:a3:bb:80:a1:09:70:0f:
         88:9f:5c:4b:63:dd:1a:33:71:c2:bb:5f:4f:31:aa:ae:05:5c:
         87:c6:89:e6:a0:db:ee:29:2c:06:8a:d3:2c:d7:d7:77:f3:ac:
         28:8d:19:25:9c:6b:94:5a:2a:66:36:4a:07:47:b6:9f:5e:8d:
         1e:4a:a3:12:82:e6:aa:87:36:23:c0:d8:50:d6:31:01:13:c1:
         bd:16:93:22:85:aa:af:ed:ff:11:3f:54:10:d6:01:08:c3:08:
         00:f2:af:9a:74:7a:86:5c:b9:54:7b:fa:6f:3d:42:1b:5a:fa:
         49:2c:e2:c5:73:c7:c9:88:47:cc:17:2b:90:cc:2d:c1:2b:e5:
         51:81:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----