Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a353030303a3a2f34302d3438203d3e203431373332.roa
File:                     326131323a646434373a353030303a3a2f34302d3438203d3e203431373332.roa (raw, json)
Hash identifier:          UU14xC4cPIA0GwjIyfARoQ7lOFWcwZLaNK7r9PD33x4=
Subject key identifier:   80:A0:00:24:52:D6:C9:4E:A4:19:92:CD:00:94:C5:B4:23:90:F2:B5
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       5A76D8C88BFC7F30FF70642C6A562ECCB71AF730
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a353030303a3a2f34302d3438203d3e203431373332.roa
Signing time:             Sat 08 Apr 2023 04:30:15 +0000
ROA not before:           Sat 08 Apr 2023 04:25:15 +0000
ROA not after:            Sat 06 Apr 2024 04:30:15 +0000
asID:                     41732
IP address blocks:        2a12:dd47:5000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:76:d8:c8:8b:fc:7f:30:ff:70:64:2c:6a:56:2e:cc:b7:1a:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:25:15 2023 GMT
            Not After : Apr  6 04:30:15 2024 GMT
        Subject: CN=80A0002452D6C94EA41992CD0094C5B42390F2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:00:cd:50:7c:dc:39:cb:5d:fd:b6:49:f0:
                    c0:51:7a:50:26:d4:ff:89:e7:f8:36:61:d5:73:63:
                    53:6e:84:ca:f6:cf:03:10:6a:96:31:04:75:ab:3a:
                    09:4a:58:9f:e0:37:1e:35:c8:62:fc:05:9e:ab:7a:
                    30:e1:92:26:c9:41:bc:fe:91:f6:05:d5:e9:05:1a:
                    18:15:02:91:86:47:be:5a:bd:2e:e7:28:90:8a:f8:
                    db:02:ff:4b:c2:54:55:00:d0:bd:dd:b3:e6:58:ed:
                    39:ed:56:cc:7a:b0:76:59:30:fd:93:d5:50:c6:33:
                    51:ad:60:a6:10:97:67:34:f2:3c:87:66:16:1b:1a:
                    3d:f0:2b:76:b2:55:33:82:52:2a:d3:f5:fe:aa:17:
                    2b:87:52:cf:96:b7:2d:ff:45:ee:c9:14:6c:44:7f:
                    d6:7e:a7:6c:16:8d:44:ef:fa:01:68:b1:db:fb:1d:
                    f1:c0:2b:d5:f0:4b:81:4b:ba:d7:4d:18:e6:a1:ab:
                    0d:1f:9b:38:93:31:74:1a:ae:3a:4e:73:16:d9:0b:
                    ab:7a:ce:38:f7:4e:ef:c1:77:12:f8:6c:84:56:89:
                    24:0a:46:9e:80:72:1f:bd:5d:79:82:ee:c3:cf:28:
                    df:eb:f7:ac:4f:c0:dc:e0:e6:24:89:1c:d5:3c:c7:
                    7d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A0:00:24:52:D6:C9:4E:A4:19:92:CD:00:94:C5:B4:23:90:F2:B5
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a353030303a3a2f34302d3438203d3e203431373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:ea:02:f0:0f:dc:e5:c4:f5:19:2a:e5:7d:e8:21:fe:fd:87:
         ee:1a:dc:50:93:1f:0d:a5:14:96:20:57:65:11:26:ae:c2:9f:
         80:ba:46:1f:10:a3:9b:44:5e:ee:b2:a2:3f:25:49:76:03:9a:
         64:1f:9f:d9:6a:18:9f:bd:df:46:fd:af:02:6c:45:f4:1a:4a:
         27:af:4c:ff:3d:43:54:b6:a6:96:25:41:f6:71:61:b3:0e:3e:
         9e:87:db:46:3e:ef:48:39:5b:63:3a:b9:67:aa:3f:4f:4e:26:
         4a:15:73:e8:78:7b:f0:ed:50:fb:5e:2f:f8:dd:56:55:69:b7:
         4f:e0:40:80:06:91:9a:29:00:fa:e7:d3:42:67:56:bb:01:a9:
         c8:e8:34:ff:b9:81:43:bb:93:dc:be:83:c0:95:69:b3:5b:23:
         11:a5:12:27:f3:a6:eb:e5:4e:ee:e0:31:23:2a:e4:73:9a:bb:
         5f:c2:8b:8e:f7:90:10:f4:20:89:e8:07:47:26:be:2f:7a:47:
         ae:36:19:e5:ff:ac:55:04:48:f7:08:2b:e9:7e:14:e4:ad:3c:
         86:8d:d2:17:63:f5:0d:9c:cd:39:e4:04:d5:a7:10:df:65:43:
         ed:25:6f:54:91:cf:22:ff:a2:36:1a:ef:a7:f0:2f:81:6b:d4:
         71:0f:07:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:24 2023 by rpki-client on console-ams.rpki-client.org