Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa
File:                     323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa (raw, json)
Hash identifier:          G2K9Q3ZHRw5VJfBHsTmOrk9ukBoom/S5nvIY+0N3Y44=
Subject key identifier:   7D:61:1F:A7:0B:56:D0:62:17:A9:57:60:AF:41:0F:2C:6E:75:7A:AF
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       2273D5529D7B6CCC2651EAE022FCDB0476B492DF
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa
Signing time:             Sat 08 Apr 2023 09:21:59 +0000
ROA not before:           Sat 08 Apr 2023 09:16:59 +0000
ROA not after:            Sat 06 Apr 2024 09:21:59 +0000
asID:                     57406
IP address blocks:        2602:fc23:130::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:73:d5:52:9d:7b:6c:cc:26:51:ea:e0:22:fc:db:04:76:b4:92:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:16:59 2023 GMT
            Not After : Apr  6 09:21:59 2024 GMT
        Subject: CN=7D611FA70B56D06217A95760AF410F2C6E757AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e8:1c:a5:5e:d2:8b:d7:54:93:32:09:cd:fe:
                    e7:6a:94:a9:3b:06:f3:65:f8:b2:27:6f:c0:76:34:
                    18:38:71:ec:55:4d:78:75:ae:4d:5c:17:7b:00:fb:
                    0a:b4:82:da:a6:6f:4f:e3:21:7c:ad:35:aa:c6:5d:
                    0e:64:d8:9f:66:b9:fc:44:f8:29:17:29:bd:06:05:
                    aa:15:d6:b5:7d:e8:02:3a:ad:83:fe:56:c2:fe:8f:
                    e0:64:fc:41:b8:48:cf:ac:03:a8:b2:a8:c9:eb:00:
                    b6:27:c4:66:b0:22:df:70:c3:1f:f5:df:e3:1d:28:
                    58:76:01:fc:a4:45:6e:45:d1:5e:f1:00:0c:61:fc:
                    38:f2:e9:c0:4c:ba:d3:48:90:31:fd:bd:ac:19:93:
                    ce:14:d1:40:2a:57:bd:d7:d7:d9:23:05:ee:a1:5e:
                    06:08:6b:f4:99:5c:1b:a4:df:ab:dd:cc:21:3f:4b:
                    43:9d:ce:8f:3c:26:eb:13:8c:d8:6e:80:e5:be:ec:
                    0f:59:e8:cd:c3:c7:c0:b2:92:b8:ca:12:a3:ad:54:
                    4f:1d:d7:2e:75:93:45:b7:d8:fd:9e:0a:39:e3:5c:
                    15:cb:97:46:84:22:d9:be:23:b1:8f:d5:e0:78:2a:
                    c0:b9:63:e9:16:f5:60:aa:94:d2:2d:00:b9:50:75:
                    d8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:61:1F:A7:0B:56:D0:62:17:A9:57:60:AF:41:0F:2C:6E:75:7A:AF
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:130::/44

    Signature Algorithm: sha256WithRSAEncryption
         77:19:21:36:f6:61:e7:b8:73:c1:69:1a:4d:ce:01:da:55:a5:
         43:b2:e9:01:aa:cb:8b:27:c7:e9:b3:33:54:7a:28:23:93:0b:
         cd:84:61:06:c9:e9:29:5f:5f:87:24:5f:cf:79:14:82:76:27:
         2f:3c:2e:75:60:79:15:db:05:1d:e9:12:73:6a:5e:a6:e1:a8:
         08:22:0d:3d:eb:d4:bc:59:09:d7:46:2b:a9:2c:d1:84:fa:40:
         58:81:5a:ae:90:e2:86:a2:2d:0a:84:74:4e:9d:22:9d:7b:3f:
         5f:53:89:4b:47:58:f1:d7:e3:7c:b6:e7:f7:7d:51:d1:6c:bb:
         e6:d0:20:32:55:6c:d4:f5:37:7d:53:fc:af:1c:d1:23:95:e9:
         e8:b6:bd:38:ee:c6:e0:74:1d:e1:89:d0:50:a4:7f:b2:cd:cd:
         65:96:35:d6:6e:ee:85:1f:c2:ca:18:be:2b:80:7a:c9:77:ec:
         32:f1:39:f5:5d:38:cc:6e:14:2d:5f:b4:65:e4:b2:86:11:2c:
         94:e4:d1:1c:43:ec:17:6a:60:30:2d:78:89:c1:8d:57:e6:27:
         d0:72:eb:6c:07:03:04:09:f0:68:3a:cb:0d:c5:04:b2:06:4e:
         ba:38:e4:8a:fe:f5:c3:1c:04:14:e3:22:ae:df:50:5b:a2:94:
         fe:fa:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-ams.rpki-client.org