Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/323030313a3637633a6138383a3a2f34382d3438203d3e203530303538.roa
File:                     323030313a3637633a6138383a3a2f34382d3438203d3e203530303538.roa (raw, json)
Hash identifier:          cvbFhOBKEXiRvwFTZ4vLnWMpkOR97HgtNeo1efena/U=
Subject key identifier:   57:D1:55:4D:7F:D9:A5:4E:3A:91:80:C5:D1:BA:C9:25:1D:FF:57:F2
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       29E04B58FD4D4B13CF267D90977EA21B21E9CCB5
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/323030313a3637633a6138383a3a2f34382d3438203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:38:31 +0000
ROA not before:           Sat 08 Apr 2023 03:33:31 +0000
ROA not after:            Sat 06 Apr 2024 03:38:31 +0000
asID:                     50058
IP address blocks:        2001:67c:a88::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e0:4b:58:fd:4d:4b:13:cf:26:7d:90:97:7e:a2:1b:21:e9:cc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 03:33:31 2023 GMT
            Not After : Apr  6 03:38:31 2024 GMT
        Subject: CN=57D1554D7FD9A54E3A9180C5D1BAC9251DFF57F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:04:6b:37:ce:9d:c1:c5:28:0e:a3:ef:9f:
                    e6:9c:fe:70:22:82:22:b9:8a:73:38:15:66:f2:45:
                    0c:34:29:6a:41:52:89:c5:6a:77:99:b7:17:1c:83:
                    9f:06:42:ea:dd:9f:a5:c9:5d:3e:95:3e:54:f1:a3:
                    3f:62:63:b6:46:6c:75:d3:cd:c5:8f:2f:fc:75:ec:
                    94:8c:c8:c6:00:0c:df:59:92:94:08:d8:18:4c:8a:
                    a8:5b:b4:ea:41:a2:85:8d:02:7b:e8:b1:9e:ee:00:
                    5c:c7:16:ff:44:50:a9:69:7c:4a:4a:be:6d:0f:18:
                    d3:e7:7a:39:12:6d:83:c5:ca:2e:25:c8:ac:59:58:
                    b1:4b:63:93:6a:02:4a:72:8d:72:8b:a9:fd:61:d7:
                    e1:49:9c:d8:b4:24:7c:f9:ad:f5:b1:01:f3:d8:d9:
                    fa:3b:bd:8a:a6:fe:12:36:c1:0e:f2:42:af:25:95:
                    3c:e6:8a:66:a3:39:90:d0:2b:3e:6c:56:c7:09:ac:
                    27:32:0c:07:5c:ff:97:f4:2b:f2:e4:82:c6:05:52:
                    86:31:e6:e6:b2:aa:1b:21:fe:65:95:00:41:c3:0a:
                    5c:bc:d0:f5:5c:d5:24:2e:3c:7a:c6:30:50:68:33:
                    bb:95:90:b5:6f:60:78:1b:fe:31:24:ca:4e:08:41:
                    e9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D1:55:4D:7F:D9:A5:4E:3A:91:80:C5:D1:BA:C9:25:1D:FF:57:F2
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/323030313a3637633a6138383a3a2f34382d3438203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a88::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:cb:26:9b:67:b3:af:2e:b7:d0:7e:f7:f7:85:f6:6c:93:
         76:9a:27:a2:d6:1c:cc:e9:ca:cb:d2:7e:29:a6:2a:2e:6d:07:
         6c:c4:31:ce:77:ab:ff:b4:b7:58:80:92:7d:f7:84:f9:55:3a:
         e9:ce:71:85:df:52:ba:dc:cd:53:2c:4a:58:21:31:30:81:4d:
         9c:b2:8f:07:61:e9:d6:16:55:87:e3:8b:74:c3:f5:de:58:2a:
         a5:ac:66:64:ab:dc:40:60:c2:12:d2:ec:25:20:a4:3e:c3:14:
         4c:38:dc:8e:9f:8f:6c:73:be:a3:44:ed:da:03:a3:b1:6c:2c:
         d0:3d:2f:17:f7:a9:67:94:a6:0d:f9:79:20:55:d1:bc:3a:5c:
         b3:4f:fe:fe:55:4c:8c:33:92:57:2b:5a:7a:e2:7b:8b:2a:72:
         52:06:fa:f0:30:f6:96:f5:41:9b:a2:e8:5e:d5:82:c4:b9:89:
         10:62:d6:b5:d1:87:76:7c:ef:57:de:2a:27:79:a4:ef:77:5e:
         c6:58:09:30:80:10:a7:6d:38:e7:c4:2b:36:c5:43:b7:d7:4e:
         39:f4:28:33:45:e1:39:bd:bd:d2:4f:65:be:4f:4f:9e:1a:2d:
         bf:47:17:1e:f4:6d:1f:c6:cb:b1:d5:81:96:4d:3c:3d:5a:fd:
         04:7e:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----