Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/yuki/0/326130363a313238373a353631313a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a313238373a353631313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          HCcgb43h2k8XEMfdO/Fzenew1OOApRiNHgNWrf+E5Jw=
Subject key identifier:   8D:13:26:37:39:B3:61:E6:F6:82:38:8E:B6:9E:3B:30:E9:CE:9E:96
Certificate issuer:       /CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
Certificate serial:       6C4F436CB70EB464AD5E8653FA120904FE714BC0
Authority key identifier: C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5
Authority info access:    rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer
Subject info access:      rsync://rpki.co/repo/yuki/0/326130363a313238373a353631313a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Wed 13 Sep 2023 06:46:14 +0000
ROA not before:           Wed 13 Sep 2023 06:41:14 +0000
ROA not after:            Wed 11 Sep 2024 06:46:14 +0000
asID:                     151349
IP address blocks:        2a06:1287:5611::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4f:43:6c:b7:0e:b4:64:ad:5e:86:53:fa:12:09:04:fe:71:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5
        Validity
            Not Before: Sep 13 06:41:14 2023 GMT
            Not After : Sep 11 06:46:14 2024 GMT
        Subject: CN=8D13263739B361E6F682388EB69E3B30E9CE9E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:ab:6f:c1:1d:68:7f:9c:69:17:b1:1f:4f:
                    65:38:69:5b:ea:24:c3:54:38:ee:60:db:5f:63:04:
                    7a:1a:cf:d7:bb:a2:0e:31:c5:22:d6:12:36:ac:e7:
                    14:cb:78:73:ee:4e:a5:5d:aa:e0:82:6c:4a:f9:a7:
                    0e:8e:66:4f:f7:ae:c5:e1:c6:d9:4e:15:60:c8:a5:
                    45:19:f5:f3:af:82:a9:e4:ba:d9:89:7c:b2:8c:9e:
                    0a:bf:cf:45:6c:03:57:fe:76:0c:fc:b5:5b:28:39:
                    e8:6c:25:b4:6a:27:be:49:27:0f:44:c1:7b:51:62:
                    99:7a:61:0f:32:e8:d0:68:3b:df:70:1a:59:3d:3c:
                    4b:65:1c:6b:62:8b:b3:84:0f:75:13:86:cf:57:f2:
                    55:09:61:9c:5b:7e:a0:c3:5c:64:20:3b:78:63:c2:
                    3a:05:ce:8e:1b:1a:82:1d:8b:e4:d0:5b:33:e3:3f:
                    66:ca:aa:bf:71:06:8a:4a:3c:30:e3:9f:67:3b:4f:
                    03:b3:f8:f7:4e:26:73:b9:46:db:d8:a7:47:48:7c:
                    e6:c7:46:36:70:37:d4:aa:03:8e:30:b1:3a:84:25:
                    ae:01:b6:ce:c3:ba:f1:ee:de:b2:45:43:e1:a3:2e:
                    f3:fe:df:d4:a0:25:3c:79:d8:ff:1d:f3:bf:19:40:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:13:26:37:39:B3:61:E6:F6:82:38:8E:B6:9E:3B:30:E9:CE:9E:96
            X509v3 Authority Key Identifier:
                keyid:C3:0B:BD:63:5E:1B:8B:7A:D5:EA:D6:04:79:8A:C0:8E:AF:77:D6:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/yuki/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/C30BBD635E1B8B7AD5EAD604798AC08EAF77D6C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/yuki/0/326130363a313238373a353631313a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5611::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:ba:46:ca:42:22:f7:e2:0f:35:fb:fc:21:97:fc:00:5a:b1:
         ec:76:63:e1:aa:57:78:19:7a:8d:e0:f9:1c:bc:1a:ed:05:47:
         d6:cb:6b:5d:c3:95:ef:f2:96:77:a7:11:a7:fc:a6:09:7b:50:
         c3:8b:ab:49:ac:22:1c:7f:de:df:9c:32:36:de:87:61:19:1c:
         30:46:2c:10:42:97:3d:47:08:99:34:f0:8f:91:73:fc:e3:e0:
         f1:15:1b:23:8b:0d:76:c6:e2:e4:b0:5e:03:82:15:5d:0a:aa:
         ac:b4:eb:72:e3:aa:a1:30:d7:90:dc:82:e8:53:e5:ee:77:e9:
         f4:c1:97:9a:75:a7:fd:c3:ac:c2:e3:27:06:7e:b4:25:6b:3e:
         7f:15:4b:95:9a:25:f9:b5:e8:ff:e8:5d:22:e6:fc:36:23:27:
         0e:4d:bf:80:06:67:4e:88:f7:d1:e6:0a:ff:6c:a0:80:92:c6:
         fc:a8:cc:ea:ee:35:93:ba:96:50:0c:9b:16:c1:39:3e:11:61:
         61:78:ae:94:2a:5e:59:72:51:89:8b:52:f0:2f:53:51:73:33:
         d6:96:7a:96:88:d6:6d:95:1e:0e:ea:0c:63:61:1c:4e:ba:60:
         0a:f7:f7:32:a9:2d:b1:aa:30:b7:cc:25:b4:ae:a0:27:f7:17:
         f0:55:df:52
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUbE9DbLcOtGStXoZT+hIJBP5xS8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMwQkJENjM1RTFCOEI3QUQ1RUFENjA0Nzk4QUMwOEVB
Rjc3RDZDNTAeFw0yMzA5MTMwNjQxMTRaFw0yNDA5MTEwNjQ2MTRaMDMxMTAvBgNV
BAMTKDhEMTMyNjM3MzlCMzYxRTZGNjgyMzg4RUI2OUUzQjMwRTlDRTlFOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKs6tvwR1of5xpF7EfT2U4aVvq
JMNUOO5g219jBHoaz9e7og4xxSLWEjas5xTLeHPuTqVdquCCbEr5pw6OZk/3rsXh
xtlOFWDIpUUZ9fOvgqnkutmJfLKMngq/z0VsA1f+dgz8tVsoOehsJbRqJ75JJw9E
wXtRYpl6YQ8y6NBoO99wGlk9PEtlHGtii7OED3UThs9X8lUJYZxbfqDDXGQgO3hj
wjoFzo4bGoIdi+TQWzPjP2bKqr9xBopKPDDjn2c7TwOz+PdOJnO5RtvYp0dIfObH
RjZwN9SqA44wsTqEJa4Bts7DuvHu3rJFQ+GjLvP+39SgJTx52P8d878ZQDKdAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQUjRMmNzmzYeb2gjiOtp47MOnOnpYwHwYDVR0j
BBgwFoAUwwu9Y14bi3rV6tYEeYrAjq931sUwDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL3l1a2kvMC9DMzBCQkQ2
MzVFMUI4QjdBRDVFQUQ2MDQ3OThBQzA4RUFGNzdENkM1LmNybDBoBggrBgEFBQcB
AQRcMFowWAYIKwYBBQUHMAKGTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMy
LzAvQzMwQkJENjM1RTFCOEI3QUQ1RUFENjA0Nzk4QUMwOEVBRjc3RDZDNS5jZXIw
fAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kuY28vcmVw
by95dWtpLzAvMzI2MTMwMzYzYTMxMzIzODM3M2EzNTM2MzEzMTNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzUzMTMzMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGEodWETANBgkq
hkiG9w0BAQsFAAOCAQEAHbpGykIi9+IPNfv8IZf8AFqx7HZj4apXeBl6jeD5HLwa
7QVH1strXcOV7/KWd6cRp/ymCXtQw4urSawiHH/e35wyNt6HYRkcMEYsEEKXPUcI
mTTwj5Fz/OPg8RUbI4sNdsbi5LBeA4IVXQqqrLTrcuOqoTDXkNyC6FPl7nfp9MGX
mnWn/cOswuMnBn60JWs+fxVLlZol+bXo/+hdIub8NiMnDk2/gAZnToj30eYK/2yg
gJLG/KjM6u41k7qWUAybFsE5PhFhYXiulCpeWXJRiYtS8C9TUXMz1pZ6lojWbZUe
DuoMY2EcTrpgCvf3Mqktsaowt8wltK6gJ/cX8FXfUg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:16 2023 by rpki-client on console.sobornost.net