Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/1/323630363a623063303a3a2f33362d3336203d3e20393435.roa
File:                     323630363a623063303a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          JRDSFl+dhDW59GiXqOqC2efwzpjT+SyBKP+GhGKOYwA=
Subject key identifier:   2B:FB:6F:62:52:F7:B9:77:DB:88:EE:71:FE:DA:29:DB:1A:40:79:26
Certificate issuer:       /CN=275F7402D77B27EEC0DFD260AD9C0FBDAD00026F
Certificate serial:       635278FDE60525F1E801AA7790990B7096E66577
Authority key identifier: 27:5F:74:02:D7:7B:27:EE:C0:DF:D2:60:AD:9C:0F:BD:AD:00:02:6F
Authority info access:    rsync://rpki.co/repo/HYSP/13/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.cer
Subject info access:      rsync://rpki.co/repo/August/1/323630363a623063303a3a2f33362d3336203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 09:22:08 +0000
ROA not before:           Sat 08 Apr 2023 09:17:08 +0000
ROA not after:            Sat 06 Apr 2024 09:22:08 +0000
asID:                     945
IP address blocks:        2606:b0c0::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:52:78:fd:e6:05:25:f1:e8:01:aa:77:90:99:0b:70:96:e6:65:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275F7402D77B27EEC0DFD260AD9C0FBDAD00026F
        Validity
            Not Before: Apr  8 09:17:08 2023 GMT
            Not After : Apr  6 09:22:08 2024 GMT
        Subject: CN=2BFB6F6252F7B977DB88EE71FEDA29DB1A407926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:30:ad:3f:40:16:de:f5:78:b4:4a:02:a6:
                    43:73:ea:0d:bb:25:59:37:6b:54:9d:6f:77:8d:05:
                    b6:1b:8e:13:ef:96:4e:a1:84:ea:ef:21:ec:4a:31:
                    8f:5d:6e:c7:dc:75:a6:51:fd:f9:b3:4c:20:3b:03:
                    8c:6f:64:fa:d5:e2:68:f2:3e:d2:79:20:7d:2a:e3:
                    a9:68:f0:89:f4:4c:57:6e:65:c2:02:7a:64:db:45:
                    4f:b8:8f:81:01:64:6d:b2:e3:90:03:cf:cb:18:eb:
                    95:68:96:dc:6f:1f:a9:47:40:ac:eb:b9:0f:3c:bd:
                    20:92:b2:f8:bc:84:1f:cb:ea:e5:99:ae:f6:ad:68:
                    a5:8a:f2:4b:36:70:26:f0:a8:93:af:3f:23:33:e9:
                    ef:0a:6c:82:f6:29:7e:de:58:36:4f:31:e2:cd:60:
                    4f:4b:b7:72:a8:df:3b:d9:8e:3a:fc:dd:3e:0e:36:
                    5d:ff:c3:88:c0:a8:79:d4:71:57:45:11:98:58:c1:
                    59:ef:cc:01:ad:5b:f7:0d:dc:f0:48:12:65:58:b9:
                    41:6b:28:9e:3d:bd:2e:10:cf:66:2f:92:d4:ef:f8:
                    3c:d1:98:f7:20:68:a5:72:98:e4:b9:1d:22:34:d8:
                    5d:48:c5:25:8f:58:ac:dd:df:36:77:7d:2e:2e:91:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FB:6F:62:52:F7:B9:77:DB:88:EE:71:FE:DA:29:DB:1A:40:79:26
            X509v3 Authority Key Identifier:
                keyid:27:5F:74:02:D7:7B:27:EE:C0:DF:D2:60:AD:9C:0F:BD:AD:00:02:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/1/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/13/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/1/323630363a623063303a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0::/36

    Signature Algorithm: sha256WithRSAEncryption
         75:3d:08:39:39:61:2c:3c:0b:bd:30:56:86:6e:2b:7e:7d:f4:
         79:aa:a0:1a:58:43:47:1a:c3:81:cd:75:81:e4:ac:77:b2:11:
         f8:16:79:a3:7c:05:7c:f9:f1:d2:8b:99:1f:51:5f:b5:e8:35:
         c4:66:e4:e7:ba:b9:ce:f0:ee:ce:d3:95:db:25:7c:1c:4f:96:
         f2:fd:25:09:50:83:18:e8:47:96:c1:24:37:a2:75:2f:4f:b1:
         6b:62:bd:92:ea:cc:e1:b3:45:68:45:b3:83:50:66:22:0f:87:
         67:89:17:97:35:de:8c:ea:da:58:cf:6e:ca:2a:23:83:89:a3:
         30:2f:61:6c:35:2d:82:dd:c1:c9:ae:1a:a6:2f:4f:52:e5:5f:
         f7:c0:56:a3:23:50:e5:c5:8f:39:1f:3f:fb:e0:63:c7:a9:03:
         8d:48:ed:35:da:56:1e:27:f8:66:a4:16:65:fb:bc:e5:d0:a7:
         1a:2a:c5:ec:b8:51:58:4e:34:00:42:2f:68:b6:c0:09:b4:b0:
         c2:97:8b:55:d2:e3:13:ff:cc:72:f3:c6:dc:78:ec:77:1b:e4:
         56:e8:56:f7:0f:9a:19:00:d4:aa:79:15:18:8f:b6:6a:61:b5:
         0e:1e:ff:7c:c7:25:29:59:a9:8c:9a:15:38:1f:06:00:f7:10:
         38:e3:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----