Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/323030313a3637633a6138633a3a2f34382d3438203d3e203530303538.roa
File:                     323030313a3637633a6138633a3a2f34382d3438203d3e203530303538.roa (raw, json)
Hash identifier:          tCD4SKY5iEkp23qtkKdEA4UXnq50ZPHcrZKCalSUF/I=
Subject key identifier:   13:FD:88:7A:C0:52:13:37:90:E9:1B:3A:81:28:1C:17:DF:65:85:46
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       29157F92DAE72249466BC523303303A7133B7FD8
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/323030313a3637633a6138633a3a2f34382d3438203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:38:49 +0000
ROA not before:           Sat 08 Apr 2023 03:33:49 +0000
ROA not after:            Sat 06 Apr 2024 03:38:49 +0000
asID:                     50058
IP address blocks:        2001:67c:a8c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:15:7f:92:da:e7:22:49:46:6b:c5:23:30:33:03:a7:13:3b:7f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 03:33:49 2023 GMT
            Not After : Apr  6 03:38:49 2024 GMT
        Subject: CN=13FD887AC052133790E91B3A81281C17DF658546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2e:b3:5c:48:7e:71:a0:75:cb:ae:ca:4a:3b:
                    fa:a4:34:4f:53:de:9b:67:78:3a:07:89:37:bc:ac:
                    b1:70:28:28:be:de:7c:a9:b4:1f:a2:7a:9d:42:a3:
                    ad:31:df:e7:00:9f:5f:9f:c8:b7:df:d5:03:ad:2a:
                    46:3d:aa:34:39:6c:45:d5:66:9a:01:87:20:e7:1f:
                    8a:4d:6d:e2:c4:2e:d5:ab:8f:f6:32:3d:b5:42:b8:
                    fb:8e:b9:e6:d6:19:cf:99:6c:3d:77:de:be:c8:9c:
                    50:bc:c8:8e:1a:e6:96:df:2b:58:dd:d6:99:15:dc:
                    61:5b:e7:47:fc:ba:80:f6:44:2a:b5:ae:ba:66:86:
                    0b:05:65:e5:d5:93:a4:55:20:1f:be:0e:5a:2c:cb:
                    30:9a:0a:42:6e:12:82:b1:4a:85:b8:1c:f6:3e:67:
                    77:a0:55:cb:a0:5f:5f:16:91:7c:47:64:53:64:53:
                    f9:34:66:c0:1d:03:b7:31:9c:c6:dc:79:d7:21:f4:
                    b5:6b:0a:4d:db:1c:da:d4:e0:b8:85:e4:50:72:70:
                    64:3a:cf:04:f9:44:6a:2f:11:eb:51:1c:01:9d:4a:
                    7b:65:f6:4f:99:70:30:62:f1:8a:fe:e1:a3:d0:31:
                    93:bd:18:a3:95:6c:d7:bc:d9:f8:56:3e:a8:72:73:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FD:88:7A:C0:52:13:37:90:E9:1B:3A:81:28:1C:17:DF:65:85:46
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/323030313a3637633a6138633a3a2f34382d3438203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a8c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:61:14:14:73:21:2f:68:7e:ad:79:07:65:37:25:c7:92:f7:
         3b:74:8a:a3:fd:91:5f:ed:33:6b:f8:17:3a:d3:8f:a4:41:02:
         a2:df:dc:b9:eb:d3:84:e0:b4:e5:45:c3:68:08:b1:c8:83:b6:
         22:d3:87:0d:10:7c:e6:86:62:07:29:0d:98:85:6c:28:fd:49:
         9f:36:99:84:db:96:3d:da:10:01:16:6f:75:f1:f6:43:0f:07:
         a5:f4:24:c8:10:f6:f5:ea:f0:ec:c4:b3:26:fa:35:f4:b9:78:
         a3:2c:e8:c0:71:5f:8f:fd:bf:01:fd:a0:d3:58:fd:15:52:14:
         6b:4f:16:f1:4d:f6:64:76:4d:f8:7b:e0:e4:3b:8e:30:61:8d:
         2a:e5:f9:27:cc:a3:ef:7d:e1:81:4a:71:bb:17:46:6a:16:68:
         cd:f1:0a:7c:2a:f1:16:92:57:bf:d1:27:49:86:fc:b1:1d:db:
         a9:67:4a:85:f7:9e:81:d6:93:0a:7b:6a:a6:fe:90:69:12:ef:
         50:5d:ca:c1:2d:d3:d6:45:24:60:6d:21:8b:36:36:1b:64:2b:
         c0:a9:9e:9d:da:11:58:03:6e:64:45:0f:e8:56:11:bb:98:fc:
         88:a6:55:8a:fc:f0:ad:67:3c:94:fd:bc:d2:f9:6e:f6:85:8a:
         e4:7d:c5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----