Route Origin Authorization

$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa
File:                     323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          do8gfVCPDp9UYC69lkAA68tx69PvvprOkUIODlccJhU=
Subject key identifier:   4B:AD:CE:20:95:D7:EF:E8:D2:F7:3A:1E:FA:3E:E4:2C:5E:12:50:90
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       0C8BAD86A76F1434C027B67CA358CC583D4EB4B4
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Mon 20 Jan 2025 05:01:52 +0000
ROA not before:           Mon 20 Jan 2025 04:56:52 +0000
ROA not after:            Mon 19 Jan 2026 05:01:52 +0000
asID:                     199518
IP address blocks:        2602:faa5:f05::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8b:ad:86:a7:6f:14:34:c0:27:b6:7c:a3:58:cc:58:3d:4e:b4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Jan 20 04:56:52 2025 GMT
            Not After : Jan 19 05:01:52 2026 GMT
        Subject: CN=4BADCE2095D7EFE8D2F73A1EFA3EE42C5E125090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:57:5c:2a:c0:e2:fe:c7:f5:f3:0c:fc:01:
                    8c:fd:f5:44:fe:6f:96:1a:f8:ef:27:a7:be:40:eb:
                    5b:67:df:84:42:33:ca:84:db:f5:4e:1f:67:1e:ce:
                    21:74:23:64:68:0a:8a:d1:d7:db:3e:37:d6:b9:b6:
                    6f:c5:ac:3f:b7:f7:55:8d:f3:c5:cb:44:72:a9:c8:
                    76:66:aa:8a:2d:68:c5:87:8f:d0:6b:8f:fe:cf:7f:
                    b8:f8:b0:89:9a:e3:a4:23:c9:6f:dd:ad:35:0a:e8:
                    24:42:0a:89:a2:4c:96:db:ba:df:02:02:3b:c9:05:
                    f9:48:cf:8d:af:2c:51:97:82:49:c1:99:ef:30:16:
                    04:4f:4e:5f:16:f9:62:b3:cc:3c:81:10:bc:86:75:
                    f4:c3:7a:54:4b:5a:98:ef:59:a2:00:bf:bf:2b:ea:
                    ad:84:ce:e8:41:87:6d:54:a6:a9:35:58:cf:52:8e:
                    cd:91:5a:33:06:cc:a7:79:72:f8:70:ca:1f:55:b3:
                    23:4e:e9:3f:14:53:4d:9e:2a:0f:4c:22:c5:55:bb:
                    63:71:36:ff:b5:d5:a1:61:ff:f7:ce:b2:d6:43:fc:
                    8d:c7:b0:3a:05:a8:3a:50:16:97:5b:63:f2:35:23:
                    58:ef:7b:e0:e3:1e:a8:09:e2:12:f8:e5:84:7e:4c:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AD:CE:20:95:D7:EF:E8:D2:F7:3A:1E:FA:3E:E4:2C:5E:12:50:90
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f05::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:55:11:6b:2e:fb:13:9d:32:cc:cf:f3:85:05:b8:1b:e7:61:
         c9:a7:81:03:72:9a:c1:e1:00:a6:48:4c:ec:e4:18:c0:0b:20:
         ca:09:2f:32:c0:31:af:e2:35:99:d8:bb:fd:3a:e5:92:8b:c7:
         9f:4d:09:3c:02:38:03:30:80:1c:c3:6d:3b:16:8a:20:62:d4:
         6a:03:f2:1f:d0:7a:20:c4:b9:94:c0:0c:7e:c4:78:3d:69:06:
         a0:14:51:ec:6d:ec:a8:7c:bd:d5:33:ba:2a:25:24:07:91:69:
         63:82:4a:02:2c:51:98:09:fc:d4:51:47:45:4d:2e:4d:04:e9:
         21:92:eb:df:04:f6:7a:d1:b6:46:f6:28:ef:af:cc:d3:27:4c:
         00:b7:1e:0e:b5:2b:0e:1a:c9:80:49:8f:4f:af:29:77:41:7b:
         4b:30:5a:25:ea:ad:4d:62:31:5d:c0:70:66:21:8f:13:f6:af:
         d5:57:c0:b4:66:75:78:5c:24:54:48:ec:2c:36:6e:e5:f1:09:
         0e:d5:95:89:6f:0b:25:c4:15:14:86:6f:b6:18:5b:ea:95:8f:
         3f:ef:0b:a9:47:82:4d:f4:4e:e9:bd:53:06:53:5c:2e:21:47:
         89:39:55:4e:55:cf:28:46:7a:b7:98:f3:e5:41:bd:18:65:ce:
         6e:80:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----