Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/323030313a3637633a6139633a3a2f34382d3438203d3e203530303538.roa
File:                     323030313a3637633a6139633a3a2f34382d3438203d3e203530303538.roa (raw, json)
Hash identifier:          1XKNjRDOeMY6QhKYS5kdnZ/Au8kk0CG1Z2n6Fo2uY78=
Subject key identifier:   EE:B1:6E:16:6E:24:B6:F5:06:99:4F:4B:B8:C5:A1:51:95:5E:70:E4
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       3FD7F3C493A7F1811765878B43E9A5B5DE41A1FD
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/323030313a3637633a6139633a3a2f34382d3438203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:38:17 +0000
ROA not before:           Sat 08 Apr 2023 03:33:17 +0000
ROA not after:            Sat 06 Apr 2024 03:38:17 +0000
asID:                     50058
IP address blocks:        2001:67c:a9c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d7:f3:c4:93:a7:f1:81:17:65:87:8b:43:e9:a5:b5:de:41:a1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 03:33:17 2023 GMT
            Not After : Apr  6 03:38:17 2024 GMT
        Subject: CN=EEB16E166E24B6F506994F4BB8C5A151955E70E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:b0:03:ad:8e:06:eb:4e:92:75:fb:dc:cc:
                    02:54:b8:5e:91:c5:b4:35:9d:db:5f:cc:47:fa:50:
                    72:8b:e9:a3:de:c4:c4:b3:b5:53:7b:61:e2:f5:5d:
                    a0:20:bb:75:04:6a:ee:f2:22:3f:29:d7:26:3f:c2:
                    3e:55:a8:c3:26:ac:d5:18:93:f2:38:a8:50:1a:6d:
                    82:aa:21:11:d8:06:c1:6d:9a:57:34:c6:60:d5:97:
                    29:e2:73:ae:ad:68:54:f6:7e:a3:14:6e:c5:d2:a8:
                    8b:24:d9:9a:1d:2c:69:88:01:ad:1f:81:dd:06:09:
                    25:12:6c:e4:35:7f:cd:c3:ad:7f:f7:42:3d:ac:d6:
                    73:d2:36:a4:8b:f2:c0:ed:3b:f3:66:1b:29:29:cc:
                    d3:7b:56:68:6a:09:f0:d6:0c:a9:f5:f8:58:53:39:
                    b8:2b:8a:fe:6e:c3:ec:6d:5d:d3:4a:80:74:60:71:
                    b2:0b:89:21:9f:63:58:b8:52:a0:6a:9d:c9:0c:5a:
                    24:6a:b5:7a:82:5e:f8:43:7b:93:a5:0b:31:5a:ce:
                    4b:09:75:e3:dc:f8:a6:5a:9b:7c:64:dc:67:0d:af:
                    c4:f3:f3:09:71:ca:51:cf:07:5a:90:61:7f:f7:63:
                    28:40:20:c9:77:2f:15:bf:41:8b:fb:5c:71:b2:82:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B1:6E:16:6E:24:B6:F5:06:99:4F:4B:B8:C5:A1:51:95:5E:70:E4
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/323030313a3637633a6139633a3a2f34382d3438203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:8e:77:ef:15:de:0a:72:bd:fa:06:58:cc:29:3c:68:cc:1b:
         b9:f5:be:2d:b7:c8:2f:a1:4c:fd:a0:bb:b7:e4:94:65:de:72:
         5a:ef:0a:42:67:6a:b4:6a:a8:9e:2f:8c:db:f1:f7:d9:b7:a4:
         02:5a:83:4d:f7:38:12:ca:99:8b:f5:8f:d6:ce:cb:6e:24:30:
         19:b6:a2:bb:23:7e:7d:cd:bf:1e:8c:6e:7e:3b:1e:30:a1:d4:
         e2:e3:ca:70:28:be:6f:9e:38:a1:ca:b4:94:1b:8e:69:fd:96:
         a8:0d:b0:13:59:d7:ac:e1:5b:75:b1:1a:49:56:c1:3c:af:34:
         7b:3f:31:39:31:7c:46:46:a5:1f:14:2c:df:78:d6:ce:8b:30:
         36:2c:9d:5e:d9:96:e4:99:7f:c7:03:fd:3f:13:a7:ca:95:07:
         34:36:5c:85:4d:54:c8:53:cf:0a:06:e2:e7:11:68:75:2d:cf:
         4c:f9:e6:76:bb:57:1f:38:f4:e0:57:35:ee:f9:4d:7e:86:a0:
         06:b8:7f:81:66:fb:2f:4d:c4:38:1e:d2:50:c2:c4:40:bd:58:
         0e:6b:06:4a:46:30:77:5b:f6:db:6d:11:88:a5:fc:b6:63:dd:
         47:20:33:f0:b2:7f:3b:6f:64:f3:fc:8f:e2:f1:00:74:2d:16:
         14:8b:98:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----