Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
File:                     323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa (raw, json)
Hash identifier:          c51QR01fifoJEJAnkqh/narA3QK3vrL/ZX6yrD1gFpo=
Subject key identifier:   D2:E2:6F:EC:C6:2B:62:9A:4F:1B:A9:29:36:DE:14:25:B5:5C:DB:BC
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       159DD9FCAF21C9BD1B21356938FBD20812EB951F
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa
Signing time:             Sat 08 Apr 2023 09:21:58 +0000
ROA not before:           Sat 08 Apr 2023 09:16:58 +0000
ROA not after:            Sat 06 Apr 2024 09:21:58 +0000
asID:                     151062
IP address blocks:        2602:fc23:160::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9d:d9:fc:af:21:c9:bd:1b:21:35:69:38:fb:d2:08:12:eb:95:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:16:58 2023 GMT
            Not After : Apr  6 09:21:58 2024 GMT
        Subject: CN=D2E26FECC62B629A4F1BA92936DE1425B55CDBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:41:01:fa:91:ad:2f:e8:ae:99:1f:5f:16:
                    b1:20:40:fa:cc:99:dd:96:6e:5c:5b:4e:3b:0b:67:
                    9a:73:c8:da:57:21:00:f2:cd:7d:6c:31:b8:77:c0:
                    f9:08:a5:4e:69:37:3b:f2:b0:4a:b1:a2:9d:19:50:
                    88:e0:ae:2d:c4:2f:75:a8:5c:eb:2f:c1:ae:06:87:
                    3f:a7:2c:1e:e8:0a:64:57:3e:bc:0e:6a:3f:4e:2a:
                    42:69:92:a9:43:09:3b:11:39:4e:52:b5:20:92:a0:
                    f2:98:0f:98:2b:96:d9:e3:c4:53:fd:3d:a1:cb:7a:
                    24:07:56:46:c7:03:37:13:d4:72:5c:b7:84:4d:53:
                    c6:93:fc:dd:36:09:5e:63:0e:29:35:16:c6:bf:16:
                    0b:8a:30:84:7e:41:a9:e8:f8:4c:b7:48:8d:c8:6c:
                    46:8d:75:1f:80:74:f8:6e:e8:9c:f0:f1:5d:82:33:
                    35:9f:d5:1b:40:8f:b4:e0:50:46:8b:d3:03:fc:27:
                    c4:04:a9:86:a0:bd:4f:37:ed:b1:31:47:ce:80:54:
                    63:29:43:fb:ac:0a:ce:83:64:d6:e1:21:1c:f1:b5:
                    dd:cc:f9:9b:ef:59:88:8d:6f:d6:21:09:b7:c4:5a:
                    05:ef:65:39:dc:22:8f:94:74:95:07:07:e2:b4:78:
                    e2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E2:6F:EC:C6:2B:62:9A:4F:1B:A9:29:36:DE:14:25:B5:5C:DB:BC
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3136303a3a2f34342d3438203d3e20313531303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:160::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:a4:8a:7e:31:72:95:58:fd:76:b1:3d:51:b6:cb:62:64:
         ca:24:cc:8a:44:bf:5b:84:46:30:63:38:55:1d:5b:a6:89:b6:
         af:d0:0c:e2:bf:33:8e:8c:f1:9e:41:47:69:8e:7a:d4:7e:f3:
         93:d7:49:cb:36:7a:c9:09:10:86:5e:63:77:64:ed:6d:b2:a2:
         4f:29:fa:8b:7f:1a:71:33:88:df:97:28:4c:ef:91:63:ec:35:
         34:f6:4c:83:23:61:64:25:d6:00:6f:7b:98:27:32:64:47:b5:
         91:87:4b:fc:03:32:ce:8e:67:06:00:26:05:2e:67:53:6d:fd:
         81:b7:7c:89:0d:c7:08:7f:93:75:01:4e:4f:0d:74:db:3d:18:
         32:94:f6:24:2f:cc:0b:09:31:74:1c:3e:f3:46:21:03:03:56:
         66:07:8a:9c:d4:00:07:97:df:d2:11:97:c8:3f:73:7b:56:da:
         a0:f0:a5:c1:fb:28:66:b3:63:82:6e:85:2d:7a:32:23:fa:8f:
         f1:ba:9c:7f:fe:f7:0b:ea:8c:18:ae:57:a8:6a:cc:79:4c:15:
         43:18:54:e3:39:a8:98:63:dd:fe:ea:91:71:84:22:60:1e:bc:
         b3:8e:82:eb:91:f7:db:c0:eb:47:9f:70:d1:88:93:c1:9b:76:
         cd:2f:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----