Route Origin Authorization

$ rpki-client -vvf rsync.rpki.blade.sh/repo/Blade/0/323430363a336263303a3130303a3a2f34302d3430203d3e20313430383934.roa
File:                     323430363a336263303a3130303a3a2f34302d3430203d3e20313430383934.roa (raw, json)
Hash identifier:          oL4t9qTqHRjTGp5/I3o/OtJvp0TlGm2aGK7PJkMpxKg=
Subject key identifier:   A2:75:33:85:DC:C3:6F:CC:99:34:19:A8:AA:FF:F8:61:48:FD:A6:9B
Certificate issuer:       /CN=A91510500000/serialNumber=407047ADB0ABA85AE234970052228E9B1F0239E2
Certificate serial:       1C71DFEC877C89560BFB2DDA57ACA5A3794EA601
Authority key identifier: 40:70:47:AD:B0:AB:A8:5A:E2:34:97:00:52:22:8E:9B:1F:02:39:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHBHrbCrqFriNJcAUiKOmx8COeI.cer
Subject info access:      rsync://rsync.rpki.blade.sh/repo/Blade/0/323430363a336263303a3130303a3a2f34302d3430203d3e20313430383934.roa
Signing time:             Tue 08 Mar 2022 13:24:00 +0000
ROA not before:           Tue 08 Mar 2022 13:19:00 +0000
ROA not after:            Tue 07 Mar 2023 13:24:00 +0000
asID:                     140894
IP address blocks:        2406:3bc0:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:71:df:ec:87:7c:89:56:0b:fb:2d:da:57:ac:a5:a3:79:4e:a6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510500000/serialNumber=407047ADB0ABA85AE234970052228E9B1F0239E2
        Validity
            Not Before: Mar  8 13:19:00 2022 GMT
            Not After : Mar  7 13:24:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:2c:b3:2b:21:81:05:29:22:d6:05:e4:b4:
                    a0:38:6b:81:f1:82:c5:8b:a3:ad:7f:96:4d:12:43:
                    8e:b1:7d:d1:20:a2:3e:d1:94:f4:c8:39:3c:73:36:
                    45:39:71:e9:9a:0f:bd:cf:74:26:ae:c1:56:e5:46:
                    f2:59:fa:db:99:ba:00:0d:97:58:b9:4e:26:76:bb:
                    e6:da:b5:88:91:eb:94:7c:dd:cf:7f:b7:23:f2:2d:
                    34:46:c8:0d:d7:ab:19:fc:c8:49:8d:e5:6a:3d:19:
                    91:52:ec:85:0f:cf:43:2b:fe:d8:38:f7:15:a0:04:
                    dc:e1:94:75:a5:ee:d7:3b:c0:af:ce:52:fd:ef:42:
                    85:64:63:98:de:3f:5b:ac:6f:55:1f:7a:59:b6:87:
                    6f:08:59:fe:4d:cc:37:c3:47:02:7a:ce:2f:06:f9:
                    99:7a:b5:69:de:19:bf:bb:ef:74:7c:b1:1c:16:ab:
                    79:36:5d:c2:4a:0e:de:a0:2e:c3:dd:ec:50:9b:46:
                    df:be:cd:c1:23:cb:1c:f7:b7:84:db:10:42:e0:f0:
                    0c:5b:9c:75:71:e2:9d:0d:9b:26:82:31:de:ff:98:
                    59:00:97:51:4f:b5:b8:1b:56:a4:ba:24:43:1c:d3:
                    d1:d6:d0:b8:eb:d4:7c:0b:ac:89:a4:51:d2:94:d0:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:75:33:85:DC:C3:6F:CC:99:34:19:A8:AA:FF:F8:61:48:FD:A6:9B
            X509v3 Authority Key Identifier:
                keyid:40:70:47:AD:B0:AB:A8:5A:E2:34:97:00:52:22:8E:9B:1F:02:39:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.blade.sh/repo/Blade/0/407047ADB0ABA85AE234970052228E9B1F0239E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHBHrbCrqFriNJcAUiKOmx8COeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.blade.sh/repo/Blade/0/323430363a336263303a3130303a3a2f34302d3430203d3e20313430383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3bc0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:68:d3:d9:84:d2:e4:85:f5:90:d8:7a:40:9f:e9:c3:e7:9e:
         17:0b:59:07:2d:60:cb:8b:b1:e5:4d:72:8f:77:55:ec:c7:ab:
         ce:81:40:fc:ea:54:ff:50:a3:35:54:e7:dc:1c:b9:15:b2:3c:
         68:79:c3:a1:9b:4d:ca:1e:bf:5d:a4:95:78:d0:8c:2f:8a:cc:
         c7:ad:89:66:f6:d5:c8:4e:c2:b4:bf:54:a9:5d:9f:bd:18:86:
         2d:4f:7e:38:a2:f0:22:55:59:13:dc:b6:52:a8:94:50:1f:d1:
         e5:1a:ef:bd:59:b8:cb:3b:9d:bf:7b:20:e0:88:dc:9a:e9:58:
         fc:e8:18:f7:df:16:e8:05:7c:4c:6f:29:60:72:89:6f:7a:0a:
         d8:b9:19:a4:0d:65:14:23:98:27:5f:41:69:dc:f0:e8:d4:2b:
         d4:fe:58:fa:85:d1:d3:db:64:e3:4f:7c:fc:10:23:00:b9:a8:
         c4:5a:bb:ab:da:c1:1e:17:ef:99:7b:89:c8:33:f5:a3:dc:67:
         e7:e9:6c:98:99:82:53:ee:e7:94:0f:04:cd:ce:03:94:a5:b4:
         97:e7:38:3c:1a:a3:44:cb:aa:97:8e:a8:41:ef:b4:32:a8:3e:
         a6:66:a4:16:7c:b5:41:ac:65:0f:33:ce:81:dc:1e:ea:f5:b5:
         95:15:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----