Route Origin Authorization

$ rpki-client -vvf rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa
File:                     326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (raw, json)
Hash identifier:          6Ff7tqBVo7aM9VuSvQlcyaTGcKmiVTY6pgu+/vkIW/8=
Subject key identifier:   80:61:D6:BE:71:F3:39:EC:E7:1B:D6:65:79:18:F0:5A:67:D1:BC:08
Certificate issuer:       /CN=1717ACD294A2C988167DF42BBB5A5E20A0C2831B
Certificate serial:       0F1AB9B4AD3D72CFCD1FDC90976DC452160F373B
Authority key identifier: 17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer
Subject info access:      rsync://rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa
Signing time:             Thu 19 Sep 2024 13:36:50 +0000
ROA not before:           Thu 19 Sep 2024 13:31:50 +0000
ROA not after:            Thu 18 Sep 2025 13:36:50 +0000
asID:                     214344
IP address blocks:        2a14:7581:9901::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1a:b9:b4:ad:3d:72:cf:cd:1f:dc:90:97:6d:c4:52:16:0f:37:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1717ACD294A2C988167DF42BBB5A5E20A0C2831B
        Validity
            Not Before: Sep 19 13:31:50 2024 GMT
            Not After : Sep 18 13:36:50 2025 GMT
        Subject: CN=8061D6BE71F339ECE71BD6657918F05A67D1BC08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:32:9d:31:b4:64:05:03:16:04:d4:fe:a8:
                    20:27:5f:4f:82:95:0b:84:47:19:c1:db:df:f2:5a:
                    aa:1c:c0:1b:db:01:ca:56:42:6e:84:b1:25:d0:e2:
                    14:b5:8b:9f:b1:ce:48:15:bc:5f:5a:7b:3e:18:f8:
                    b2:ec:97:b4:1b:a1:cd:95:30:4e:b8:94:00:77:51:
                    aa:e0:54:37:d8:a5:72:d4:cc:58:ae:be:86:bb:73:
                    c8:6c:b6:95:74:2b:75:8e:fd:0e:95:0b:14:39:1f:
                    55:d8:c3:e2:3d:50:e0:9b:43:89:e8:df:2a:f4:1e:
                    f2:7b:d8:f1:0a:21:3c:48:ff:93:91:fc:c8:d3:f3:
                    5e:11:d9:07:ae:8d:34:9b:02:64:1a:5f:3e:f4:bb:
                    02:94:45:5e:72:04:07:e5:94:09:e9:a0:1a:ae:28:
                    c9:60:f1:ff:94:63:fa:5b:88:08:98:a3:ca:c4:ac:
                    9f:ad:a3:86:19:42:f8:f1:44:97:cd:5d:36:9a:5b:
                    d6:c8:de:af:97:a3:a9:55:1c:45:57:b8:ee:51:f6:
                    74:66:ea:77:b0:07:b6:4a:4a:d1:23:c1:d3:24:f5:
                    1d:0a:9f:fb:52:46:e3:c5:2f:06:44:01:25:c4:ed:
                    f8:c2:c8:73:21:bf:05:98:09:1d:29:61:07:e3:2a:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:61:D6:BE:71:F3:39:EC:E7:1B:D6:65:79:18:F0:5A:67:D1:BC:08
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:D2:94:A2:C9:88:16:7D:F4:2B:BB:5A:5E:20:A0:C2:83:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1717ACD294A2C988167DF42BBB5A5E20A0C2831B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xa.wiki/repo/AXNETS-CA/0/326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9901::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:84:2d:89:e1:bd:23:97:87:d1:7e:71:09:e9:48:b7:16:a9:
         41:2b:f9:ab:7f:76:da:ca:26:0b:46:02:fd:d3:c0:e4:39:bc:
         df:58:92:1d:fd:56:32:1a:fa:12:e4:4f:3c:2f:11:b9:19:a3:
         77:9a:ad:9e:4d:71:c3:fe:16:5a:49:c7:8a:94:e0:a7:fa:59:
         0c:c2:63:13:62:f0:63:e4:c9:78:96:9e:3c:c6:a3:7e:a5:ec:
         e8:35:08:e2:e3:7c:8c:9c:67:be:81:0b:b0:d3:23:67:15:30:
         5a:8b:ff:dd:b5:fb:16:3c:5a:8d:3a:22:15:59:3c:62:ff:df:
         c7:42:50:bc:45:ab:e9:9e:0c:3d:a6:79:15:5c:6b:ca:80:14:
         fa:fc:1e:48:88:e6:54:d6:16:67:9e:d2:50:3a:ed:72:b6:36:
         15:32:35:95:12:73:d5:ab:1d:72:41:2a:97:17:a1:62:26:25:
         08:51:19:e1:ba:e0:2d:06:78:6e:b2:fd:48:d9:71:40:b6:27:
         00:a9:f4:3a:e8:e7:18:33:1a:67:4d:8c:e8:ba:5d:4e:a6:ab:
         8a:30:7a:09:94:d2:55:bd:77:e5:3f:42:27:68:b3:33:99:8b:
         03:f7:2b:0b:44:50:e6:fe:95:4e:70:41:1e:98:6b:b6:9d:1f:
         9c:97:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----