Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383030343a3a2f34382d3438203d3e20323132323934.roa
File:                     326131323a646434373a383030343a3a2f34382d3438203d3e20323132323934.roa (raw, json)
Hash identifier:          wSJDCEOBpPihXMucK4QJwLeZ6t8iim8Jy1vaP4TAeME=
Subject key identifier:   95:71:8D:60:4D:DC:9C:69:3C:24:94:5C:23:07:20:99:C9:31:AC:FE
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       7AD801B1482F0CFD8938514314F2ED357930B087
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383030343a3a2f34382d3438203d3e20323132323934.roa
Signing time:             Sat 08 Apr 2023 04:45:38 +0000
ROA not before:           Sat 08 Apr 2023 04:40:38 +0000
ROA not after:            Sat 06 Apr 2024 04:45:38 +0000
asID:                     212294
IP address blocks:        2a12:dd47:8004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d8:01:b1:48:2f:0c:fd:89:38:51:43:14:f2:ed:35:79:30:b0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:40:38 2023 GMT
            Not After : Apr  6 04:45:38 2024 GMT
        Subject: CN=95718D604DDC9C693C24945C23072099C931ACFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:4e:40:7d:78:ad:e7:9e:01:8f:f8:2f:ce:
                    e1:22:b0:6e:89:39:83:60:be:e1:12:f2:96:89:75:
                    e8:81:a1:57:16:f4:2c:54:b6:1f:98:e6:14:6e:f3:
                    61:17:bb:4c:f6:3f:cd:03:1f:90:71:7b:ea:57:6b:
                    5a:ce:b4:66:98:8e:98:82:19:d5:7c:dc:9d:83:32:
                    c6:48:6b:4e:f3:72:71:a3:cb:f0:3b:74:9d:fc:3a:
                    c2:cf:8a:09:13:14:3c:cd:96:55:39:9b:b1:43:3f:
                    a1:66:33:71:65:bf:a9:bc:11:e7:39:c6:dc:21:7e:
                    e8:0c:78:32:7f:dc:77:21:12:03:36:93:70:e9:30:
                    fd:7c:77:c5:cc:10:69:e0:36:27:72:37:4c:eb:1f:
                    24:5f:4f:8e:12:10:c3:46:c9:63:87:2b:63:79:db:
                    11:80:b6:ab:40:68:d1:ed:5d:10:10:a7:02:4d:3c:
                    f6:0c:32:4d:b6:e0:1d:1b:dd:33:f2:3f:80:37:61:
                    27:a8:af:3c:d1:7c:ed:2d:f5:97:83:b2:5f:8a:9e:
                    8b:77:ab:10:f8:50:18:fe:ba:21:0c:fb:46:2c:f3:
                    2a:8a:97:ef:fa:c2:7d:53:c0:cf:c2:21:47:fc:d6:
                    57:c9:41:7f:5d:76:ea:d0:df:e9:da:79:92:4b:53:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:71:8D:60:4D:DC:9C:69:3C:24:94:5C:23:07:20:99:C9:31:AC:FE
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383030343a3a2f34382d3438203d3e20323132323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:65:72:ea:3f:74:f2:0e:87:8b:c0:d9:7c:1e:81:dd:42:dd:
         36:70:d1:29:e8:7a:a7:9b:ea:4e:e3:ae:5b:36:cf:fd:77:58:
         ea:d0:b7:40:ff:8d:b6:c0:cb:cf:91:af:e8:8e:11:07:4f:d0:
         c4:7b:4c:ea:4a:28:74:61:f9:c2:ba:d8:bd:4f:63:5d:2d:9e:
         f1:6b:74:16:ab:5c:f2:80:3b:f7:96:92:47:4a:09:43:87:c2:
         66:53:d4:9c:fc:41:5b:3c:7a:8d:f0:9d:12:5c:44:72:32:ff:
         c9:91:28:54:8c:ba:cd:67:90:7c:11:fe:24:fc:10:db:29:c4:
         17:e0:d2:61:52:df:88:74:52:7e:99:e5:c5:d9:9b:ae:9e:b9:
         28:e2:f3:53:6c:02:af:67:bc:46:35:8f:1a:2b:d6:be:77:ad:
         de:17:2f:96:c6:5a:0f:f4:1c:6d:3a:b4:7c:03:0f:fb:fe:d3:
         64:dd:db:66:89:15:68:09:e0:c4:ff:5c:58:54:7a:28:b9:47:
         76:07:4d:92:dd:b1:d2:a4:d3:0b:5d:30:07:73:85:e3:23:d3:
         b5:14:e0:25:71:5e:f9:fe:29:a3:80:0e:97:9d:27:c9:31:46:
         2b:af:b1:9b:61:80:02:ce:b6:5b:c5:32:ad:c0:0d:fb:73:64:
         2b:2f:4c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----