Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa
File:                     323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa (raw, json)
Hash identifier:          wZbRBZ6LtBpkfheHmeiE0WA4bNDKlxbE5BPKPaHPhgU=
Subject key identifier:   F4:24:BF:33:6E:44:93:78:57:B1:01:B6:CF:3C:B0:2F:10:F0:62:DD
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       75E2B172894F87FC0E45E177D34AD8DC39145202
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa
Signing time:             Sat 08 Apr 2023 09:22:00 +0000
ROA not before:           Sat 08 Apr 2023 09:17:00 +0000
ROA not after:            Sat 06 Apr 2024 09:22:00 +0000
asID:                     212360
IP address blocks:        2602:fc23:112::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e2:b1:72:89:4f:87:fc:0e:45:e1:77:d3:4a:d8:dc:39:14:52:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:17:00 2023 GMT
            Not After : Apr  6 09:22:00 2024 GMT
        Subject: CN=F424BF336E44937857B101B6CF3CB02F10F062DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:b4:00:99:7a:f1:ad:22:c9:8b:39:52:18:
                    f4:55:ed:2d:2b:52:a8:60:bf:79:52:ad:e2:7f:be:
                    8e:e7:52:2b:d7:c3:9e:17:98:ab:21:e2:1b:00:6b:
                    bc:4f:0b:2e:5c:03:d7:23:c5:be:50:0c:a0:dd:20:
                    16:31:b2:df:2c:f8:2d:8c:d5:b4:78:49:56:39:82:
                    5c:5d:da:57:c8:de:ad:86:f3:ae:31:0c:4f:ed:3a:
                    70:d5:4c:f2:3b:4a:0c:d4:66:80:cc:7f:78:69:b4:
                    52:82:d3:14:62:00:c9:61:82:e9:60:e8:48:83:9a:
                    85:6e:f4:08:82:98:05:1f:36:c6:66:19:43:85:75:
                    93:5f:d3:b5:e5:98:18:cc:93:ff:c1:95:1d:a7:2c:
                    19:db:76:de:41:77:95:47:e7:81:55:54:a5:3e:c9:
                    1f:bb:04:03:88:10:e4:09:a4:4e:a0:f2:da:11:35:
                    95:5f:4b:fe:63:f6:8b:8e:81:20:93:eb:2d:5b:37:
                    54:d6:fd:aa:63:39:be:6c:37:27:f8:41:e6:de:54:
                    74:5f:82:bf:3c:da:05:d9:0c:83:70:52:64:d2:c3:
                    53:30:b2:ff:6f:30:08:24:fe:70:10:4b:cd:dd:17:
                    22:bb:32:01:7d:c5:6b:64:4d:7f:c5:3b:35:b2:d8:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:BF:33:6E:44:93:78:57:B1:01:B6:CF:3C:B0:2F:10:F0:62:DD
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:112::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:02:39:74:6f:20:72:f0:3a:1a:e7:0c:57:00:b5:86:b9:0c:
         91:dc:64:45:30:f9:64:da:1d:9d:36:01:ec:3a:bd:17:09:ed:
         35:ba:75:cd:c0:e5:3d:38:39:7f:be:a4:72:5c:c2:66:14:d8:
         60:65:7f:92:c0:15:72:29:7e:cb:1c:95:29:fa:63:97:0f:f0:
         03:b5:a2:07:7f:c0:70:3c:81:85:ec:a1:90:6a:6d:8d:61:73:
         52:85:00:3c:91:da:61:38:fd:8b:a6:4e:8f:68:39:4c:a2:0d:
         2d:bb:41:64:0a:9e:6e:e1:72:41:a1:02:cb:09:39:81:63:6a:
         f2:9b:5d:0f:83:af:32:09:6f:04:54:6d:ed:8a:fc:8b:6a:6d:
         62:d2:35:ed:02:9f:af:1a:61:79:ba:87:3b:1d:8e:d4:f6:8f:
         62:a1:f3:20:e9:9a:ed:51:a5:f3:a8:70:f1:da:28:a3:80:30:
         25:a4:33:9a:90:9f:1c:20:8e:f9:11:ba:02:e9:bf:6d:c6:b5:
         d2:5b:46:b2:c8:9d:99:a0:8e:ee:6d:58:eb:f0:8f:1e:bd:e9:
         77:8c:67:4b:f0:93:65:db:4c:70:f9:91:23:53:64:8c:09:cc:
         cb:44:b6:97:88:2e:6d:0d:03:48:6f:e9:61:2a:4c:a3:d8:7f:
         23:da:7a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----