Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa
File:                     323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa (raw, json)
Hash identifier:          v5quPoHHxOMeeT5ymJNamXpX/617DZ2i6nRatlING6E=
Subject key identifier:   E6:13:05:95:62:47:46:32:BB:4C:C2:A3:EC:27:B9:A5:13:46:AF:D9
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       4E047A88FA7702A5D642B91FA9C5896C73862170
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa
Signing time:             Sat 08 Apr 2023 09:22:00 +0000
ROA not before:           Sat 08 Apr 2023 09:17:00 +0000
ROA not after:            Sat 06 Apr 2024 09:22:00 +0000
asID:                     44406
IP address blocks:        2602:fc23:114::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:04:7a:88:fa:77:02:a5:d6:42:b9:1f:a9:c5:89:6c:73:86:21:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:17:00 2023 GMT
            Not After : Apr  6 09:22:00 2024 GMT
        Subject: CN=E613059562474632BB4CC2A3EC27B9A51346AFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:77:bb:d6:42:d7:18:76:6b:90:b7:c9:30:
                    f3:2b:bd:36:b2:f7:43:93:06:c4:b8:b3:39:1c:62:
                    89:4a:6a:5b:b9:81:82:d4:f0:42:65:0c:00:92:7f:
                    4c:5d:06:ad:8f:ec:7d:b8:6a:39:2e:e9:64:82:5d:
                    a8:82:96:3d:62:c5:93:17:a9:eb:6d:6a:30:7b:73:
                    6e:d3:08:33:5f:56:2e:65:2c:87:12:35:76:6b:25:
                    ee:70:14:53:b8:8e:6b:c0:fd:fa:81:76:2a:28:53:
                    21:48:58:ca:13:7c:3f:7e:73:31:68:f5:93:d6:75:
                    c8:46:17:2e:b1:e3:98:f8:ea:fc:cb:cc:40:02:93:
                    e2:e9:6d:82:50:9f:d2:9d:91:98:20:1a:10:b5:9a:
                    db:98:34:83:98:45:cc:38:e4:48:c1:25:48:39:7c:
                    45:75:79:e4:2d:a4:27:f9:04:6f:c5:a4:84:dc:f8:
                    64:d7:3c:26:e4:12:5d:48:6c:01:f1:90:06:c2:b3:
                    d8:2d:cb:41:f4:63:a9:67:fe:c3:38:11:dd:c6:66:
                    03:1d:27:4c:5f:8e:12:41:ba:3a:37:2b:eb:62:c3:
                    10:38:40:03:50:a1:1e:0b:a8:81:f7:72:73:7e:05:
                    25:b8:88:ec:88:fa:b4:65:80:8e:0c:fc:36:6d:9f:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:05:95:62:47:46:32:BB:4C:C2:A3:EC:27:B9:A5:13:46:AF:D9
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:114::/47

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:3e:f9:5d:47:a9:36:05:cc:ce:e5:2c:2b:0a:29:44:23:
         4c:b9:bb:74:9c:49:2e:4b:a8:32:8d:7f:a1:c1:09:ed:4e:b4:
         15:fa:16:85:d3:b7:aa:83:89:50:d1:78:fe:8e:19:10:4c:39:
         ae:ff:73:d4:86:5f:7e:5d:ad:c2:71:5c:a5:2e:0d:82:e1:9e:
         6e:29:c6:ed:30:a0:e0:af:bc:c7:d3:f6:63:d0:0c:a3:4a:3f:
         3b:cf:87:db:c9:1c:73:b6:59:89:da:b0:c7:2d:9c:2d:e7:17:
         84:71:df:25:c7:08:9c:5c:ee:b2:72:e2:8b:e1:c4:65:2d:79:
         7c:cf:6a:c6:0e:de:e4:8f:3b:c0:20:67:09:44:be:37:f8:c3:
         c2:57:12:c9:a5:bc:7a:cc:9d:0e:15:7c:cd:58:c7:99:80:a0:
         70:11:bc:11:59:63:a8:bb:21:4e:6e:e5:98:cf:00:e3:2a:e5:
         85:b2:01:02:17:70:85:97:b6:53:04:c5:2c:bd:4e:73:dc:d4:
         e7:40:1e:07:e8:87:9f:ab:dd:33:6e:c0:2c:fe:b8:e2:77:02:
         9c:ca:7f:f9:d1:1b:b6:64:12:40:a5:de:e0:05:37:a5:37:88:
         bd:72:f8:0a:65:1a:5d:27:6c:23:52:aa:c0:ca:52:fe:fe:40:
         38:b8:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-ams.rpki-client.org