Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/323030313a3637633a6138303a3a2f34382d3438203d3e203530303538.roa
File:                     323030313a3637633a6138303a3a2f34382d3438203d3e203530303538.roa (raw, json)
Hash identifier:          pwFRIuZeU3Cl3Kojoj3n47fA+iKrCmWGM3bdNC/SQFA=
Subject key identifier:   9E:A8:6C:60:6D:FA:EC:07:21:72:05:AF:9C:70:0E:46:3C:84:8B:AD
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       409414A209ABE44AA62B55EE22DD247DA57AC2E2
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/323030313a3637633a6138303a3a2f34382d3438203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:38:21 +0000
ROA not before:           Sat 08 Apr 2023 03:33:21 +0000
ROA not after:            Sat 06 Apr 2024 03:38:21 +0000
asID:                     50058
IP address blocks:        2001:67c:a80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:94:14:a2:09:ab:e4:4a:a6:2b:55:ee:22:dd:24:7d:a5:7a:c2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 03:33:21 2023 GMT
            Not After : Apr  6 03:38:21 2024 GMT
        Subject: CN=9EA86C606DFAEC07217205AF9C700E463C848BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:3a:93:4d:73:e2:03:40:24:d0:23:79:dd:
                    be:f7:1d:93:3b:08:21:3c:ca:e8:89:b1:af:02:c5:
                    83:a5:3e:6d:ce:1c:6d:ba:8a:21:db:79:7a:24:8d:
                    28:ca:27:4d:fd:80:85:59:ca:f2:14:23:5d:2d:dd:
                    1c:1e:42:9e:c8:1a:bc:04:90:c5:64:83:78:cc:8b:
                    d8:a8:13:19:05:bd:54:fc:f4:9e:d2:29:af:04:cf:
                    75:3f:82:7c:82:9a:7e:f1:48:17:6a:ff:46:9f:ea:
                    b9:2e:ff:68:d7:5c:1b:77:23:9e:95:f3:66:3d:f2:
                    38:94:e9:c9:a7:08:c2:f7:83:7a:6b:2f:4a:d8:10:
                    7f:40:0a:41:74:ee:b1:6a:a5:4a:7e:a0:5b:7e:57:
                    de:50:64:2f:01:52:3c:13:87:01:54:d0:e0:b4:30:
                    52:07:6b:96:71:21:6b:43:1c:db:2c:4a:03:04:67:
                    d3:6c:74:bf:3c:67:3d:b5:29:97:66:9c:74:53:47:
                    d8:47:43:79:a0:29:3b:c3:52:a0:47:8c:45:e0:34:
                    35:27:1e:74:47:d8:14:d8:09:38:49:35:df:82:f1:
                    54:f0:5d:b5:24:e3:f4:a3:df:0f:c8:00:0c:95:b9:
                    33:e1:70:aa:9e:89:34:2b:0c:9b:70:fd:43:4c:7d:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A8:6C:60:6D:FA:EC:07:21:72:05:AF:9C:70:0E:46:3C:84:8B:AD
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/323030313a3637633a6138303a3a2f34382d3438203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:d8:3d:f0:ca:bc:12:71:71:1f:15:b4:2e:f8:0d:fa:11:bf:
         53:f1:be:2e:32:75:ef:1f:1d:ba:7e:75:d1:b1:58:a6:a0:e8:
         05:a0:40:6a:b4:13:07:6e:c5:97:6e:44:09:c9:38:9d:0d:5c:
         2d:87:31:15:b8:92:ff:15:00:12:8f:77:74:5b:5a:ef:df:b6:
         5b:79:9c:e0:03:ce:91:b1:7f:8f:3b:b1:d3:da:31:98:b7:6b:
         0e:0e:17:14:ae:ec:ce:30:a1:db:45:b6:1c:66:5f:80:75:58:
         f8:ee:6f:89:a3:bd:3f:e3:d9:7f:a8:48:46:04:39:5b:1f:80:
         b5:f8:31:fe:28:16:ab:29:3e:ee:49:9a:35:21:33:d9:23:a3:
         86:68:11:97:bc:1b:36:06:09:62:aa:c5:23:f8:68:34:b2:4a:
         fc:dd:c7:c5:d9:5a:de:60:6c:38:7e:11:6f:46:07:de:c0:9f:
         bc:75:c4:0f:37:92:71:95:06:9e:4f:6f:ec:b4:9b:e0:5f:a6:
         ae:ee:16:3d:13:07:02:ef:c6:74:d0:68:cf:c8:48:9d:03:6a:
         37:f1:1f:18:18:d8:3b:54:10:52:6f:bc:ae:48:76:6b:06:af:
         8a:62:0f:6d:d2:3d:01:54:77:e4:e9:2e:d9:ec:ac:69:8c:7a:
         9a:c6:da:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----