Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383030363a3a2f34382d3438203d3e20323036303136.roa
File:                     326131323a646434373a383030363a3a2f34382d3438203d3e20323036303136.roa (raw, json)
Hash identifier:          k3VOYtpKNEAzut1kGP0AdFsgCAlwajrQVX9HIQQCDL0=
Subject key identifier:   BD:31:DB:5E:B3:D6:F6:67:00:9C:44:F3:42:E6:18:18:74:41:FD:87
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       5559D4B9F824A00F66252E62B758BE0FDEA81198
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383030363a3a2f34382d3438203d3e20323036303136.roa
Signing time:             Sat 08 Apr 2023 04:52:40 +0000
ROA not before:           Sat 08 Apr 2023 04:47:40 +0000
ROA not after:            Sat 06 Apr 2024 04:52:40 +0000
asID:                     206016
IP address blocks:        2a12:dd47:8006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:59:d4:b9:f8:24:a0:0f:66:25:2e:62:b7:58:be:0f:de:a8:11:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:47:40 2023 GMT
            Not After : Apr  6 04:52:40 2024 GMT
        Subject: CN=BD31DB5EB3D6F667009C44F342E618187441FD87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:41:c3:b2:78:1c:01:96:99:0d:cb:2b:47:
                    58:fe:57:b4:f8:d2:d7:39:9e:b1:a7:9b:98:18:9f:
                    48:80:0f:4d:8a:87:06:49:4c:ea:43:20:b2:6f:c2:
                    7b:a4:e1:79:3f:9c:ac:00:fe:a4:ea:a7:32:f2:7e:
                    a8:15:44:4e:cd:dc:2a:ab:2c:64:9e:b1:e6:5b:cd:
                    86:19:b6:4f:25:84:e4:ff:09:c7:88:5c:db:58:8d:
                    e2:6e:0e:d5:77:d2:4b:ce:42:00:89:cb:c0:c7:6a:
                    e9:e2:5b:91:67:48:f1:68:a0:cf:e5:97:cc:4e:4a:
                    31:dd:30:aa:d0:5b:8f:06:0c:80:86:fe:4c:ed:49:
                    a4:09:6e:89:f1:80:3e:fa:d2:0b:d4:bb:b8:12:7d:
                    20:6b:a5:d9:33:3a:be:8e:6d:4c:77:ea:35:31:08:
                    f1:b3:1e:9e:94:8d:6b:cf:57:f2:bf:4a:36:b4:63:
                    bb:14:25:a6:00:f2:f5:60:f3:61:83:9a:a1:4a:3d:
                    ac:2b:17:2f:c6:db:98:53:23:53:cf:36:81:30:0e:
                    b0:38:8a:35:e1:c7:2b:e9:4a:8a:df:97:85:46:6b:
                    5b:b3:17:18:1d:15:1a:f0:a5:cf:fd:44:e8:e2:e4:
                    3f:07:0d:2b:d5:5b:c3:b6:67:ce:58:73:8d:2f:4c:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:31:DB:5E:B3:D6:F6:67:00:9C:44:F3:42:E6:18:18:74:41:FD:87
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383030363a3a2f34382d3438203d3e20323036303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8006::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:6e:41:35:48:46:a0:35:1c:9c:46:9b:fa:a0:5b:12:f1:f8:
         7e:09:e5:88:4c:30:46:65:75:5d:a6:5d:47:7b:c8:ee:c6:a8:
         57:a3:9a:3a:79:31:31:08:31:9e:bc:29:f6:9f:50:51:5d:df:
         90:03:ec:54:9f:27:72:96:82:ed:66:08:45:f2:93:55:89:9b:
         68:b3:02:8c:40:26:e2:93:e4:d1:64:1b:35:b9:33:8b:84:96:
         6e:8d:65:bc:0d:5a:b8:81:fb:fd:0b:a6:65:f5:12:55:51:30:
         eb:86:cf:9a:06:56:ec:de:fe:e0:79:88:9e:89:f0:83:38:40:
         39:f9:2c:06:ee:45:f3:a4:b8:41:b3:88:23:3b:76:19:2b:57:
         bf:54:0d:26:c5:d5:c9:29:67:f5:73:19:7b:e6:2a:55:41:86:
         d7:f8:c0:09:68:00:1a:bf:65:ee:b8:0a:7d:c4:b5:96:13:ae:
         6d:cf:85:53:84:48:a8:ff:11:bf:b0:a0:cc:02:6e:c9:0c:f9:
         96:d6:0f:b8:cb:1d:29:99:67:41:e2:a4:d8:27:74:4a:89:25:
         5f:b3:ff:ef:c7:cd:0e:4c:bf:f8:f2:f2:18:b6:5b:2c:36:a1:
         54:5a:cb:9d:8f:e2:85:b4:15:9a:b2:21:a5:93:70:2d:90:96:
         a1:4c:69:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----