Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32342d3234203d3e203336323630.roa
File:                     3139392e3131392e36342e302f32342d3234203d3e203336323630.roa (raw, json)
Hash identifier:          +m/ZqYT1G4MK7RnwDeOGw2D9vS8sAmDvD4Ds+l9LWrc=
Subject key identifier:   0F:6F:E9:8C:57:5B:75:A8:79:5B:B3:ED:78:40:C4:73:C3:40:7A:B2
Certificate issuer:       /CN=06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31
Certificate serial:       A693A6758EACA12FD2B375AF470187DC7C179D
Authority key identifier: 16:93:1D:F4:91:69:3F:02:F4:41:1C:3C:35:6A:DF:EE:35:71:3A:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32342d3234203d3e203336323630.roa
Signing time:             Tue 16 May 2023 23:45:07 +0000
ROA not before:           Tue 16 May 2023 23:40:07 +0000
ROA not after:            Tue 14 May 2024 23:45:07 +0000
asID:                     36260
IP address blocks:        199.119.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a6:93:a6:75:8e:ac:a1:2f:d2:b3:75:af:47:01:87:dc:7c:17:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31
        Validity
            Not Before: May 16 23:40:07 2023 GMT
            Not After : May 14 23:45:07 2024 GMT
        Subject: CN=0F6FE98C575B75A8795BB3ED7840C473C3407AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6c:6b:3a:d6:64:3a:ee:35:c1:70:74:c5:b4:
                    c7:2e:1b:52:36:17:c4:09:23:10:cd:d5:ff:51:b5:
                    fb:9c:7f:0a:d5:bc:c2:11:44:bc:8d:90:f9:c9:0d:
                    42:03:5e:a0:08:69:d0:e4:99:d5:c5:33:7b:94:6a:
                    9a:45:d7:81:df:8e:96:44:b5:a3:fa:a2:1a:fc:10:
                    6b:79:ed:b4:68:1b:8c:74:dc:33:94:90:08:95:69:
                    04:61:d9:a1:94:49:db:1c:07:95:d0:98:b4:5d:12:
                    da:42:f9:b9:e7:e1:df:3e:94:61:e9:ce:a2:fb:c6:
                    d0:7a:d1:5d:fc:d1:68:41:ac:ca:e2:ad:42:1b:16:
                    b6:66:cd:95:4a:e5:3b:74:59:6f:67:dd:c7:5b:4f:
                    9c:cc:1d:54:8e:3a:87:f0:1f:64:11:d5:59:4c:01:
                    6f:d9:fa:ad:e9:fe:7a:8f:75:fd:6e:9a:59:ba:5d:
                    8c:84:1e:e7:2d:a9:e1:19:d6:fc:69:e8:0d:b4:bf:
                    92:1e:98:80:59:bb:57:8b:fa:bb:97:d6:7f:55:c4:
                    de:7c:fb:b9:32:c5:61:ea:49:d8:01:15:da:00:6b:
                    ae:b9:dd:e4:8f:08:07:ab:00:9b:44:3f:9b:4d:58:
                    cd:c4:f0:e0:15:a4:93:3c:85:0b:0c:f6:8b:bd:55:
                    1a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6F:E9:8C:57:5B:75:A8:79:5B:B3:ED:78:40:C4:73:C3:40:7A:B2
            X509v3 Authority Key Identifier:
                keyid:16:93:1D:F4:91:69:3F:02:F4:41:1C:3C:35:6A:DF:EE:35:71:3A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/16931DF491693F02F4411C3C356ADFEE35713AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32342d3234203d3e203336323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:32:8c:e9:6c:73:a1:db:38:1f:bf:2c:28:ec:58:bc:e4:
         7a:43:98:10:84:c2:8c:84:ff:f5:c7:0f:d1:93:6c:ad:1a:b5:
         3f:81:64:dc:ef:d5:4f:21:3a:9a:4c:19:3b:30:b9:7b:8d:b2:
         d2:dc:54:f6:75:86:9c:74:f6:e6:05:ba:24:95:9e:7d:30:f6:
         32:da:81:5c:68:3e:7a:5e:e9:d6:87:0e:a7:57:45:48:eb:b1:
         95:b6:e0:f2:95:26:c1:75:3f:fc:52:2d:a3:96:29:3a:2e:7c:
         7c:85:16:38:25:17:54:aa:df:c9:00:7a:ae:cb:77:5f:2f:64:
         00:39:e4:2a:ef:d7:53:12:e7:ca:06:d5:11:57:a8:ce:c5:f1:
         df:27:7d:3a:df:6d:e6:64:9c:05:d5:84:4b:b8:1c:dc:eb:78:
         5f:df:d7:b4:5a:f9:a8:a2:5e:5e:98:f2:f9:f1:e2:f6:da:d8:
         db:e1:d0:14:c0:db:5d:64:dc:76:a8:f0:37:ba:b4:30:47:22:
         72:67:4e:86:6f:ca:b3:7e:35:3c:4b:e2:b9:29:d0:7d:03:cd:
         50:0f:b6:50:f2:3d:51:95:ca:28:72:5c:33:35:e8:d0:10:ad:
         58:5f:ea:12:14:26:55:c3:92:ac:a4:96:d5:1d:c0:6e:4e:c8:
         d8:ee:46:fc
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIUAKaTpnWOrKEv0rN1r0cBh9x8F50wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDZmYzI3YjJiNGU3MmI5YTQ2ZGUxYWJjMWJlZGVlMjU1
ZThhNTBlNWU2MjYwOThlMzEwHhcNMjMwNTE2MjM0MDA3WhcNMjQwNTE0MjM0NTA3
WjAzMTEwLwYDVQQDEygwRjZGRTk4QzU3NUI3NUE4Nzk1QkIzRUQ3ODQwQzQ3M0Mz
NDA3QUIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGxrOtZkOu41
wXB0xbTHLhtSNhfECSMQzdX/UbX7nH8K1bzCEUS8jZD5yQ1CA16gCGnQ5JnVxTN7
lGqaRdeB346WRLWj+qIa/BBree20aBuMdNwzlJAIlWkEYdmhlEnbHAeV0Ji0XRLa
Qvm55+HfPpRh6c6i+8bQetFd/NFoQazK4q1CGxa2Zs2VSuU7dFlvZ93HW0+czB1U
jjqH8B9kEdVZTAFv2fqt6f56j3X9bppZul2MhB7nLanhGdb8aegNtL+SHpiAWbtX
i/q7l9Z/VcTefPu5MsVh6knYARXaAGuuud3kjwgHqwCbRD+bTVjNxPDgFaSTPIUL
DPaLvVUaxQIDAQABo4ICZDCCAmAwHQYDVR0OBBYEFA9v6YxXW3WoeVuz7XhAxHPD
QHqyMB8GA1UdIwQYMBaAFBaTHfSRaT8C9EEcPDVq3+41cTqgMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
bWlzYWthaW8vMS8xNjkzMURGNDkxNjkzRjAyRjQ0MTFDM0MzNTZBREZFRTM1NzEz
QUEwLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt
OGY2Yy1kNmM5MWIwYjg0MTUvNmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4
MDI4OTI4LzA2ZmMyN2IyYjRlNzJiOWE0NmRlMWFiYzFiZWRlZTI1NWU4YTUwZTVl
NjI2MDk4ZTMxLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5j
Oi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8xLzMxMzkzOTJlMzEzMTM5MmUz
NjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzNjMyMzYzMC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AMd3QDANBgkqhkiG9w0BAQsFAAOCAQEAf2syjOlsc6HbOB+/LCjsWLzkekOYEITC
jIT/9ccP0ZNsrRq1P4Fk3O/VTyE6mkwZOzC5e42y0txU9nWGnHT25gW6JJWefTD2
MtqBXGg+el7p1ocOp1dFSOuxlbbg8pUmwXU//FIto5YpOi58fIUWOCUXVKrfyQB6
rst3Xy9kADnkKu/XUxLnygbVEVeozsXx3yd9Ot9t5mScBdWES7gc3Ot4X9/XtFr5
qKJeXpjy+fHi9trY2+HQFMDbXWTcdqjwN7q0MEcicmdOhm/Ks341PEviuSnQfQPN
UA+2UPI9UZXKKHJcMzXo0BCtWF/qEhQmVcOSrKSW1R3Abk7I2O5G/A==
-----END CERTIFICATE-----