Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e203336323630.roa
File:                     32332e3134332e3137362e302f32342d3234203d3e203336323630.roa (raw, json)
Hash identifier:          iSMb9Jiri+kbx1/xLQb6MLufVUMqxeUhsWuW17wgZwU=
Subject key identifier:   7D:B1:46:78:7A:40:EA:A7:CC:CE:DE:BC:06:AB:D9:1C:02:10:23:EE
Certificate issuer:       /CN=06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31
Certificate serial:       26FC7C0B252D8E0686E14B64B1501944DD446BFB
Authority key identifier: 16:93:1D:F4:91:69:3F:02:F4:41:1C:3C:35:6A:DF:EE:35:71:3A:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e203336323630.roa
Signing time:             Tue 14 Jun 2022 23:15:06 +0000
ROA not before:           Tue 14 Jun 2022 23:10:06 +0000
ROA not after:            Tue 13 Jun 2023 23:15:06 +0000
asID:                     36260
IP address blocks:        23.143.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fc:7c:0b:25:2d:8e:06:86:e1:4b:64:b1:50:19:44:dd:44:6b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31
        Validity
            Not Before: Jun 14 23:10:06 2022 GMT
            Not After : Jun 13 23:15:06 2023 GMT
        Subject: CN=7DB146787A40EAA7CCCEDEBC06ABD91C021023EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:69:e5:17:db:d2:0a:8e:05:75:0a:13:2d:
                    0b:d4:e5:bf:c1:0b:cd:62:c0:03:0b:80:2c:92:b0:
                    68:d8:5e:c5:12:1f:76:a5:40:20:db:62:f7:c3:da:
                    2e:d0:bd:19:63:04:0d:f4:ea:7d:33:b7:c6:f7:fc:
                    f1:91:51:4c:9a:a4:14:18:b5:1e:50:15:de:04:9d:
                    c5:d1:9d:e1:00:45:ed:82:ce:e5:4d:0c:9d:f5:52:
                    7b:00:53:ca:c7:7d:fd:82:a6:4e:f9:00:b2:62:ca:
                    e9:00:1a:68:8e:79:a3:45:f6:12:08:3d:09:dd:56:
                    f5:a4:45:df:14:32:6d:7d:ff:16:f5:87:ab:67:42:
                    ac:82:76:65:15:c8:58:19:da:1e:17:0e:7d:b0:ee:
                    94:5a:89:27:fb:ce:84:40:fe:37:f2:a8:8c:67:72:
                    90:68:b6:8f:b7:7e:21:fe:58:44:d7:90:57:46:52:
                    88:8b:b8:d7:8a:e7:46:27:36:87:34:42:81:1e:35:
                    ec:a3:42:38:54:4f:35:e6:6a:49:c3:39:8e:9b:2b:
                    55:72:2e:2e:ba:0c:d1:dd:d9:9f:92:c0:83:f6:1b:
                    77:a5:68:bf:db:7b:b4:5b:38:2d:62:c4:5b:de:4b:
                    ec:b8:d6:a8:be:90:9b:72:e5:6a:55:30:5b:31:03:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B1:46:78:7A:40:EA:A7:CC:CE:DE:BC:06:AB:D9:1C:02:10:23:EE
            X509v3 Authority Key Identifier:
                keyid:16:93:1D:F4:91:69:3F:02:F4:41:1C:3C:35:6A:DF:EE:35:71:3A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/16931DF491693F02F4411C3C356ADFEE35713AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e203336323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:9b:32:9a:e8:37:c6:02:ae:46:47:d3:04:73:09:ff:eb:09:
         06:a3:b7:30:66:2a:f8:d4:a0:bc:b9:b7:3d:4a:fd:2e:49:89:
         ca:3e:88:1e:1c:97:1f:11:1a:a1:b7:7d:0f:72:b5:4f:b9:55:
         b9:95:85:d9:8a:36:8b:f5:57:f7:b5:b3:d0:00:0d:38:ca:f3:
         5c:d8:1b:d9:82:f2:7f:e6:0b:79:a0:0c:95:53:31:79:93:12:
         8a:5b:9f:a3:b9:6b:91:34:8e:0a:0d:c2:eb:1c:fb:ab:d9:4b:
         e3:90:7a:9d:0d:21:92:29:43:12:9c:02:a9:1c:74:00:be:63:
         72:38:ee:9f:ae:50:65:a7:ed:ba:71:c1:17:ef:45:b8:c7:b7:
         8f:62:a1:5e:5f:f1:bc:71:63:6b:14:02:b3:e4:21:4b:60:cf:
         9e:a6:48:b1:b4:70:0b:75:bd:93:43:c3:07:97:8d:f8:7d:22:
         40:a5:10:f3:33:52:e2:bf:9f:5a:7c:75:fb:b0:50:26:31:7d:
         0f:8b:2a:63:db:7b:a3:e5:0d:d1:3a:dd:b5:e8:2a:0e:ea:66:
         12:c1:e8:1f:04:b4:f6:6e:3d:67:10:7d:0d:a8:50:07:55:a6:
         5d:2a:94:87:24:ad:c6:e6:1a:70:79:a5:97:bb:b6:fd:dd:42:
         50:98:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----