Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a356630303a3a2f34302d3438203d3e203231373338.roa
File:                     326131323a646434373a356630303a3a2f34302d3438203d3e203231373338.roa (raw, json)
Hash identifier:          oVwfPKgJtqrGHvcJbN3f6SQPY/ddhXCmUanJ+DiohZM=
Subject key identifier:   1A:9D:9F:E7:5D:7E:04:48:7F:BA:10:14:50:9F:77:79:51:24:2B:74
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       7A46D2A515B7CCFA2A9F12B2022FBF7414688BB3
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a356630303a3a2f34302d3438203d3e203231373338.roa
Signing time:             Sat 08 Apr 2023 04:32:35 +0000
ROA not before:           Sat 08 Apr 2023 04:27:35 +0000
ROA not after:            Sat 06 Apr 2024 04:32:35 +0000
asID:                     21738
IP address blocks:        2a12:dd47:5f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:46:d2:a5:15:b7:cc:fa:2a:9f:12:b2:02:2f:bf:74:14:68:8b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:27:35 2023 GMT
            Not After : Apr  6 04:32:35 2024 GMT
        Subject: CN=1A9D9FE75D7E04487FBA1014509F777951242B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:eb:c4:3f:ff:bd:29:35:40:35:b6:d6:31:dd:
                    ee:c7:d1:95:6f:39:57:6b:c3:cf:9c:cc:db:1d:80:
                    b3:f6:50:34:f5:2c:8f:7f:5b:2b:7c:c8:0c:01:11:
                    c8:b6:7b:c5:62:21:75:a5:3e:53:4d:a3:c8:f2:66:
                    b8:e4:8c:f1:8a:77:59:0e:87:e0:80:3b:6b:1b:0c:
                    f0:05:6f:4e:8c:1f:e7:a0:23:7e:13:4a:fc:e8:27:
                    c7:37:0d:f9:43:c0:bb:50:4e:4f:75:14:33:6f:5f:
                    dd:ce:21:99:50:f8:53:85:14:09:80:dc:bf:75:4a:
                    bb:c6:69:eb:13:1a:e5:14:90:cb:f0:6e:01:c0:9b:
                    cb:12:87:6c:62:9c:ba:e6:27:16:7b:c1:d4:eb:63:
                    97:5a:46:cd:9e:a5:2a:1e:8b:be:eb:d2:b1:24:ed:
                    c8:e6:35:45:c2:cf:0d:06:6f:27:c8:8b:af:15:5f:
                    e2:d2:35:53:7c:54:04:47:1a:b9:65:e5:59:13:ca:
                    31:26:e0:8b:d1:48:d2:1c:20:55:01:2e:4c:64:ed:
                    a0:08:c8:4c:db:48:c0:7c:75:69:99:df:8d:4b:43:
                    fd:82:28:76:36:00:40:a3:5a:1e:f7:8d:60:36:6b:
                    dd:35:b5:d4:81:5c:2b:4a:ca:46:43:1a:19:30:ae:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9D:9F:E7:5D:7E:04:48:7F:BA:10:14:50:9F:77:79:51:24:2B:74
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a356630303a3a2f34302d3438203d3e203231373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:08:e9:71:9f:d4:94:97:e4:60:1c:7d:a7:0f:bb:df:aa:65:
         35:ed:23:c7:85:4d:db:b1:34:ae:67:06:bd:b5:e2:06:db:6e:
         c9:6e:90:85:fd:87:96:22:a4:3b:4b:9d:15:ce:f0:65:b4:ea:
         ae:f0:62:1f:72:39:89:27:57:9e:c9:95:db:6c:2d:bc:51:a0:
         89:f3:1d:90:e4:b3:aa:56:7e:8f:56:27:76:06:fe:ac:ff:ff:
         1e:74:e0:4b:32:49:eb:e8:05:df:b8:3c:f1:7a:74:5b:f5:eb:
         90:3d:f2:94:db:f3:11:ea:e1:0d:23:b3:ac:75:2e:30:c6:b3:
         1c:69:3c:70:ad:e2:46:3f:f5:b9:d3:50:d6:a3:df:e2:8c:26:
         35:35:40:dd:26:e9:d0:55:bd:15:54:65:61:e1:6c:07:bc:ca:
         e1:c0:17:f6:9e:1a:12:c0:78:04:fd:54:6b:1b:cc:f7:34:f0:
         27:cc:03:88:f2:a1:eb:3e:eb:32:52:a2:5e:38:31:6e:e8:46:
         db:a7:3b:54:bf:62:25:08:65:fb:b3:6a:4a:d8:f9:01:e6:ec:
         3a:68:59:1c:51:d9:94:86:23:50:df:8d:5f:39:86:f9:d3:7a:
         f3:d5:c6:2b:91:9d:c9:3d:6c:8d:9f:f0:b9:c5:2e:18:12:5d:
         32:b6:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----