Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a353430303a3a2f33382d3438203d3e20323132313638.roa
File:                     326131323a646434373a353430303a3a2f33382d3438203d3e20323132313638.roa (raw, json)
Hash identifier:          u9hL+lq9Ne/qFq00JiEHK08E710poArish2FrS9w/Hk=
Subject key identifier:   4D:83:3C:57:3A:01:22:65:6F:83:F7:F8:50:FC:DC:6E:00:D0:28:49
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       12F791181C7F6C3B9ABA40F18D764A855824DF41
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a353430303a3a2f33382d3438203d3e20323132313638.roa
Signing time:             Sat 08 Apr 2023 04:46:19 +0000
ROA not before:           Sat 08 Apr 2023 04:41:19 +0000
ROA not after:            Sat 06 Apr 2024 04:46:19 +0000
asID:                     212168
IP address blocks:        2a12:dd47:5400::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f7:91:18:1c:7f:6c:3b:9a:ba:40:f1:8d:76:4a:85:58:24:df:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:41:19 2023 GMT
            Not After : Apr  6 04:46:19 2024 GMT
        Subject: CN=4D833C573A0122656F83F7F850FCDC6E00D02849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:3c:b4:40:e1:1d:f6:1f:10:bb:81:cc:68:
                    9c:c8:a3:01:13:aa:f9:22:c3:5b:df:ff:9f:e0:0f:
                    b5:de:43:b4:20:a3:81:84:4e:12:2e:2b:6e:89:64:
                    24:8e:3c:28:42:f4:72:d5:66:b8:d6:e9:bd:33:5e:
                    24:a8:6e:ad:32:63:b2:30:b5:10:ff:b0:31:85:ad:
                    37:fe:99:d5:d4:26:98:77:05:cb:99:d7:9b:3d:1a:
                    b1:d2:0e:56:88:10:64:f0:e6:ec:82:e1:60:4b:20:
                    a6:7c:86:35:e3:e1:02:c8:d4:42:2d:ac:e5:5a:14:
                    42:dc:44:a3:5f:5e:13:44:9e:ce:c3:16:64:5e:9a:
                    8f:7d:5c:33:50:ab:81:a4:59:13:3f:4b:55:82:bb:
                    b2:fb:08:34:ec:5a:4b:ad:bd:ce:2a:0f:da:b6:b2:
                    32:53:c7:bd:13:c8:e1:47:35:bd:aa:04:47:ae:da:
                    61:b2:f7:b5:86:02:f5:94:8e:e0:79:71:fd:2c:34:
                    8e:4f:d1:41:6d:3a:82:b2:5a:c8:35:2d:76:42:f0:
                    55:12:d7:fd:71:23:26:07:b9:45:a9:1c:85:29:5e:
                    7a:c5:60:76:54:cc:3b:c8:4f:a0:7f:19:50:93:14:
                    7f:80:65:cb:99:07:a2:a2:d4:28:aa:35:2a:46:23:
                    52:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:83:3C:57:3A:01:22:65:6F:83:F7:F8:50:FC:DC:6E:00:D0:28:49
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a353430303a3a2f33382d3438203d3e20323132313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5400::/38

    Signature Algorithm: sha256WithRSAEncryption
         58:74:f8:aa:d8:58:40:e5:15:54:4c:46:00:96:93:3d:3c:0d:
         de:4b:9a:d6:96:89:7b:97:5f:03:04:72:1f:93:ad:27:6b:42:
         f1:2a:ff:9f:af:a8:bc:28:db:b9:db:88:2d:ac:4d:b7:6e:93:
         d0:84:79:51:0e:ff:8b:4e:46:89:7b:b0:25:0c:9d:e3:5e:e5:
         ee:e9:3e:2a:bd:68:9c:0b:d5:99:46:b6:65:17:0a:5d:ee:5f:
         5c:de:9f:98:88:2e:da:f6:10:9a:55:c5:c8:94:47:f8:d6:14:
         2b:4b:b1:68:6b:e3:f1:8e:68:a9:d5:62:9f:0c:63:fd:18:f9:
         8e:39:a0:c9:86:69:7c:19:01:6a:41:c3:fd:b6:f0:95:70:38:
         db:e0:a1:6e:c0:ea:b5:7e:47:76:56:5a:cf:31:c8:c1:c3:69:
         ef:20:1e:19:98:ae:dd:9d:71:19:94:6e:7e:87:29:73:29:96:
         fd:d9:28:bf:21:32:5a:1c:7b:72:5b:8b:ba:cf:81:c3:62:47:
         d9:26:2b:d5:a4:23:d7:70:a0:2e:96:9b:7e:1d:cb:5e:08:0c:
         83:03:0d:1e:d8:27:dc:9e:b7:76:02:48:4a:d3:ad:f6:48:f5:
         67:09:2d:29:6c:1d:ff:24:5f:1c:a0:23:44:3e:34:64:86:19:
         86:51:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----