Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa
File:                     326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa (raw, json)
Hash identifier:          eMDnyn43DKE15xCE0pJe4oZKF47j4jqt/uR+7TNoiAo=
Subject key identifier:   BC:8F:1C:CF:F8:0F:22:ED:9B:33:CB:13:4F:DD:36:50:AD:B9:6F:97
Certificate issuer:       /CN=38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF
Certificate serial:       5CDBA850AD51634C2CAB41DD269D87F030730343
Authority key identifier: 38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa
Signing time:             Sun 06 Oct 2024 05:02:37 +0000
ROA not before:           Sun 06 Oct 2024 04:57:37 +0000
ROA not after:            Sun 05 Oct 2025 05:02:37 +0000
asID:                     49975
IP address blocks:        2a0a:6040:6d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:db:a8:50:ad:51:63:4c:2c:ab:41:dd:26:9d:87:f0:30:73:03:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF
        Validity
            Not Before: Oct  6 04:57:37 2024 GMT
            Not After : Oct  5 05:02:37 2025 GMT
        Subject: CN=BC8F1CCFF80F22ED9B33CB134FDD3650ADB96F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:47:c0:7f:f0:df:bd:84:6c:c5:77:44:8a:
                    6c:2b:51:d8:c3:de:25:ef:1f:70:9f:1f:17:cb:cf:
                    a9:f4:df:3c:87:57:62:62:a0:ed:55:27:e0:42:3c:
                    11:e0:85:d5:cb:5e:b4:b8:5a:7f:70:a8:c8:98:78:
                    c2:c7:84:ea:6e:62:ff:85:2d:f9:5b:39:ca:62:d1:
                    b5:e5:c3:0d:19:22:f1:23:6d:20:f6:08:51:5a:90:
                    e8:c1:92:5e:b5:4c:e1:8d:a5:8a:51:7b:87:1e:b9:
                    fe:5e:eb:21:ca:29:a8:ed:b4:2f:ad:d7:e5:a3:6e:
                    9e:e9:1f:af:db:f3:b7:e8:43:b5:9a:8e:d3:a3:c0:
                    84:ae:d7:84:85:50:b4:41:d6:7c:d0:7d:c9:ad:f1:
                    75:47:74:36:d2:39:f1:3b:41:a8:de:82:a5:0c:ec:
                    aa:36:e6:36:29:06:9d:63:9f:e9:5c:dd:08:c6:ba:
                    00:a6:f8:13:27:98:db:11:0e:18:45:9c:bc:04:cf:
                    81:ef:f9:83:f4:7f:af:78:60:90:e2:63:7b:6e:a9:
                    61:e0:e7:6f:98:71:20:c7:1e:f8:d5:f1:7d:00:e1:
                    76:5e:be:10:fe:7f:e5:3c:54:50:4b:e2:77:76:75:
                    da:16:54:79:29:09:74:86:ba:d5:63:c0:10:5c:8d:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8F:1C:CF:F8:0F:22:ED:9B:33:CB:13:4F:DD:36:50:AD:B9:6F:97
            X509v3 Authority Key Identifier:
                keyid:38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:ae:e0:c3:77:9e:65:d7:e3:c6:bd:15:2f:f2:ed:5d:98:aa:
         b1:f0:1d:8b:99:bf:b8:e1:b1:fa:ff:c3:27:66:de:1e:75:e5:
         2b:69:da:f3:ab:a7:5d:0a:f1:72:a1:2f:b4:65:b1:6a:df:4a:
         25:a8:8f:2a:67:14:1b:79:33:cc:21:bd:ba:4f:ac:5f:d6:3d:
         9a:e4:be:c1:6c:33:6e:06:7b:a4:1c:01:b1:60:13:a1:a7:fa:
         62:fb:9e:d7:ac:39:fe:fa:04:17:d7:5e:be:ea:69:c0:44:51:
         b7:91:04:bc:b1:64:1e:c1:fd:d9:80:c6:98:3a:35:9e:9c:0a:
         ba:86:35:30:7f:35:c6:ae:ce:c2:33:21:88:a5:7f:bb:02:e5:
         cf:71:0f:bb:cc:e8:35:7a:08:3d:ea:8b:e2:83:c8:91:e6:28:
         f4:c5:a4:1a:b8:07:fe:2f:0c:df:b6:fb:04:86:c7:a1:c7:b2:
         1d:ab:fc:9a:b7:24:98:f0:ed:c2:bd:4e:ad:d2:ca:31:88:02:
         11:dc:fc:d6:f2:97:ad:1d:35:80:a7:84:57:b1:0f:ef:dd:41:
         f1:8d:3a:03:c1:7b:12:a3:20:74:70:a3:c6:a6:ea:ab:ee:86:
         e2:5c:b0:ff:05:0c:2c:1e:b3:54:6c:dd:d2:a6:d6:99:b9:a7:
         da:e3:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----