Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383033303a3a2f34342d3434203d3e203436313338.roa
File:                     326131323a646434373a383033303a3a2f34342d3434203d3e203436313338.roa (raw, json)
Hash identifier:          B6Fokh2h36sbGDIrJO4X8WoLbcsUb9gv6XVxXs4v50M=
Subject key identifier:   01:05:B1:70:50:BF:CD:F5:C2:8D:28:E3:67:61:E2:7B:52:65:AE:88
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       1A6F39AB8A49D8A4706C66FFE40D4BC1487DE792
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383033303a3a2f34342d3434203d3e203436313338.roa
Signing time:             Sat 08 Apr 2023 04:32:54 +0000
ROA not before:           Sat 08 Apr 2023 04:27:54 +0000
ROA not after:            Sat 06 Apr 2024 04:32:54 +0000
asID:                     46138
IP address blocks:        2a12:dd47:8030::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6f:39:ab:8a:49:d8:a4:70:6c:66:ff:e4:0d:4b:c1:48:7d:e7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:27:54 2023 GMT
            Not After : Apr  6 04:32:54 2024 GMT
        Subject: CN=0105B17050BFCDF5C28D28E36761E27B5265AE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:34:be:6f:15:8c:98:a3:0e:9b:6f:57:bf:28:
                    b5:c0:84:e6:1a:84:e6:98:61:47:46:50:1f:de:56:
                    dc:a2:eb:84:d5:bd:6e:e4:ce:23:a1:29:e4:f0:0d:
                    7e:0c:67:77:c5:64:81:54:57:d9:4c:a6:60:5a:78:
                    91:29:0e:65:43:40:fd:2e:a4:c9:cb:d1:c8:52:9d:
                    ff:6a:81:1d:30:f1:9e:69:80:9a:45:7e:ed:72:58:
                    23:39:b9:c0:23:76:2a:5c:9b:1e:9f:cd:67:90:21:
                    a4:de:95:7f:48:ee:6c:a1:c0:0f:be:6d:32:99:b2:
                    82:35:6e:0c:7d:11:16:56:61:02:18:80:92:9b:8e:
                    8e:1f:51:53:6e:5a:da:ed:f2:c0:d9:b0:18:df:0d:
                    73:41:5f:36:75:fa:3f:10:51:6d:f5:1f:97:40:17:
                    ca:0d:48:7e:f4:ac:52:5e:f3:af:1d:f9:c1:a6:7f:
                    7e:ea:5d:d5:04:c8:52:12:09:8d:1a:51:e7:aa:4a:
                    1f:fb:78:9b:e7:99:d7:4d:b4:25:eb:38:df:63:67:
                    a5:d0:48:20:9d:29:c3:a9:e0:6c:de:a4:1e:f5:91:
                    73:fe:53:d3:7d:c0:07:0f:a5:c3:9d:c6:46:c5:26:
                    d4:ad:5b:12:12:d4:45:b3:fc:c1:d1:92:69:c2:f1:
                    ad:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:B1:70:50:BF:CD:F5:C2:8D:28:E3:67:61:E2:7B:52:65:AE:88
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383033303a3a2f34342d3434203d3e203436313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8030::/44

    Signature Algorithm: sha256WithRSAEncryption
         3b:66:52:d1:9d:8a:6c:a6:51:63:de:46:4e:33:31:5a:6e:b0:
         35:05:9d:0a:66:ee:bc:b6:ea:ed:1f:93:75:17:09:cd:2f:c4:
         84:6c:84:cf:8e:3d:71:27:33:3b:a2:25:55:9b:12:b5:40:9a:
         c1:b5:84:48:bf:c3:90:fa:37:c4:0c:93:79:24:b7:12:a7:12:
         0d:b0:9d:ee:57:91:54:a6:be:84:14:00:11:1d:a3:b8:f7:b7:
         f4:97:7f:ec:af:1a:da:2d:1f:84:56:59:f2:40:f5:b9:f2:99:
         e1:27:62:b8:22:88:a7:a1:17:98:9b:d3:30:3d:29:00:19:a3:
         a5:61:86:67:ca:09:e5:0f:12:37:de:cd:48:6c:26:46:c4:09:
         f4:fc:ce:b4:fe:47:73:33:ef:9b:13:01:73:3a:c1:12:b6:fd:
         56:11:2e:28:82:e5:4e:2d:9c:27:0c:f3:3a:06:22:92:2c:eb:
         8c:b1:33:14:55:ad:89:32:aa:6c:55:4c:cb:37:15:87:62:6d:
         3a:ed:98:ac:73:cf:8a:f1:41:f0:7f:c1:a2:ef:de:44:e1:73:
         83:07:c3:d4:03:eb:54:53:8a:28:a3:0e:10:c0:01:69:68:bd:
         ca:0e:85:8b:4b:ce:7c:2b:40:35:59:69:e3:39:26:58:d1:6e:
         01:98:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----