Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa
File:                     323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa (raw, json)
Hash identifier:          V93iqTxosz/a1SQ8UeJTZkKzR1hJ1l3dGzqkftPEMko=
Subject key identifier:   5B:6C:81:82:82:39:47:23:9B:97:25:85:8E:32:1F:58:5A:06:2D:99
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       1BAFFD58DBEE51B6EAA7970ED436CE01E219809E
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa
Signing time:             Sun 17 Mar 2024 10:27:21 +0000
ROA not before:           Sun 17 Mar 2024 10:22:21 +0000
ROA not after:            Sun 16 Mar 2025 10:27:21 +0000
asID:                     212780
IP address blocks:        2602:fcd3:111::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:af:fd:58:db:ee:51:b6:ea:a7:97:0e:d4:36:ce:01:e2:19:80:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:21 2024 GMT
            Not After : Mar 16 10:27:21 2025 GMT
        Subject: CN=5B6C8182823947239B9725858E321F585A062D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:0a:15:3a:a9:09:ac:ef:81:2f:61:0d:de:
                    10:5c:10:b3:ba:42:50:33:45:51:87:47:93:4a:d7:
                    5d:db:e5:0a:de:f4:7a:96:b7:10:a0:41:62:2b:c8:
                    12:f0:5a:5b:91:d1:44:00:d0:18:7b:0b:7d:d8:86:
                    46:1b:7d:5c:b6:ab:a1:a4:c5:39:79:0a:b3:fd:31:
                    87:b5:d3:a3:76:cd:2c:ff:ac:33:1f:c2:70:87:4f:
                    4a:5c:71:cc:d4:ba:67:c0:60:73:8e:b3:c2:be:2f:
                    02:a8:dd:85:c3:8e:9a:91:60:f8:ef:bc:62:f4:d1:
                    41:c6:a8:a8:65:84:7f:18:2b:5b:ef:bd:1c:6d:10:
                    ba:c2:15:77:84:96:aa:c5:8d:bb:41:b9:b4:49:c3:
                    d7:ac:e4:38:61:95:61:e5:c7:34:79:2d:a4:7b:89:
                    bc:3b:a6:89:1c:77:30:93:8e:0d:f4:cd:eb:46:17:
                    7d:20:26:5e:9e:4d:de:df:61:9b:7e:19:1d:23:54:
                    7d:5a:ea:3d:99:96:9b:64:8b:81:70:09:20:a5:1a:
                    12:21:6b:49:bf:96:6b:14:fa:64:db:5a:5b:6c:9d:
                    33:5e:26:64:18:04:41:9e:5d:60:e0:e8:12:25:22:
                    b8:14:43:51:4f:38:fd:df:bc:db:ff:19:d2:a6:0a:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6C:81:82:82:39:47:23:9B:97:25:85:8E:32:1F:58:5A:06:2D:99
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:29:54:84:a4:f1:dd:3e:49:25:a7:a3:0a:bc:84:63:96:9e:
         b9:15:81:14:9b:e9:74:e0:f1:fb:ac:d9:7a:f2:f5:17:07:e3:
         85:5d:52:26:ad:87:80:38:0e:b8:03:4e:b4:8f:0e:9a:58:0c:
         57:3e:73:0f:fa:49:19:c6:62:5f:55:4b:e4:ce:cb:50:4c:d3:
         e1:68:bc:69:ac:45:b4:41:a4:d5:24:5b:91:90:7b:5b:d9:9a:
         cf:d6:7f:5f:78:fc:2f:a3:08:6c:34:90:6c:85:db:bf:2f:ed:
         1c:19:bf:96:34:f3:e4:47:a7:2c:ed:4f:90:8f:68:20:9b:18:
         cb:0e:f5:fd:5e:02:99:7c:3a:0a:84:be:f0:c5:25:bd:8f:40:
         b0:15:13:95:17:36:8e:08:9d:55:63:2f:b7:3d:c1:bf:27:ad:
         0d:53:11:dd:b6:d6:8f:dd:08:69:ac:d4:9b:0d:21:7f:0c:18:
         1d:82:9c:ef:77:b0:40:c7:c4:2c:e7:e7:65:7a:04:15:d4:58:
         15:ac:0a:c7:fd:ce:7b:2f:4a:74:6c:75:5f:71:88:c9:39:67:
         1d:e5:eb:75:ed:0d:af:f9:00:ac:af:fb:42:fc:dc:ec:91:eb:
         04:0c:af:1f:bd:d2:40:3d:53:de:4a:1e:5d:bb:75:12:09:93:
         5b:49:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----