Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383034333a3a2f34382d3438203d3e20323034333735.roa
File:                     326131323a646434373a383034333a3a2f34382d3438203d3e20323034333735.roa (raw, json)
Hash identifier:          r1lRFtvPub3/6F2DiZHVpqrxhJeW5DDsRrRvAQNV1Vg=
Subject key identifier:   93:B5:9D:20:C5:B1:0E:DB:E1:4C:BE:6C:85:03:05:21:8A:BF:01:70
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       0B8017A182A5581D985D519C8062D88D9D87BC29
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383034333a3a2f34382d3438203d3e20323034333735.roa
Signing time:             Sat 08 Apr 2023 05:04:06 +0000
ROA not before:           Sat 08 Apr 2023 04:59:06 +0000
ROA not after:            Sat 06 Apr 2024 05:04:06 +0000
asID:                     204375
IP address blocks:        2a12:dd47:8043::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:80:17:a1:82:a5:58:1d:98:5d:51:9c:80:62:d8:8d:9d:87:bc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:59:06 2023 GMT
            Not After : Apr  6 05:04:06 2024 GMT
        Subject: CN=93B59D20C5B10EDBE14CBE6C850305218ABF0170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:c4:c3:d5:e9:ac:2d:ab:95:3c:99:77:94:
                    ac:5b:16:d4:b0:f6:44:78:5c:4a:4c:ac:ed:39:4c:
                    fd:fd:ed:88:93:f2:ed:57:6a:c1:e3:1e:e8:5f:82:
                    66:9b:be:5a:08:aa:56:be:02:93:45:7b:55:0e:f0:
                    be:75:b0:f6:5c:6e:23:bf:e5:89:0e:11:8d:f5:4c:
                    e7:38:ea:58:8e:60:12:fa:5a:61:e9:26:dd:d6:7e:
                    b8:63:7f:61:ed:01:8c:5c:c1:ec:32:94:e9:17:aa:
                    5c:7e:b5:6a:38:3e:4a:4f:6a:2a:77:4e:fc:81:ce:
                    be:5f:dc:7b:dc:c8:65:e8:eb:7a:a8:65:f1:d4:76:
                    63:d8:6a:88:35:05:a0:ce:1a:9c:2d:0e:b1:4b:c3:
                    a5:35:68:f5:e0:b8:3b:cc:a7:c9:9e:f0:bf:52:3d:
                    78:42:13:47:28:51:ba:4f:59:01:83:77:61:45:8a:
                    0a:ad:d7:d9:01:9d:84:2e:37:b7:87:61:60:79:bf:
                    af:2a:87:88:24:35:69:ac:85:b2:e5:8c:b9:5b:1e:
                    e6:07:b6:fb:58:3b:96:cb:6a:49:13:d4:c4:2c:d0:
                    99:a8:01:85:97:ec:08:d8:31:2e:d0:18:64:00:cf:
                    18:4b:a6:c7:f1:8f:ef:5d:5b:56:40:3f:87:b3:92:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B5:9D:20:C5:B1:0E:DB:E1:4C:BE:6C:85:03:05:21:8A:BF:01:70
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383034333a3a2f34382d3438203d3e20323034333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8043::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:2f:fb:de:40:18:c5:f5:3c:ba:c9:20:ea:a0:5e:e7:ad:bf:
         22:f6:99:30:62:51:09:84:0a:26:42:27:1c:d8:0a:03:89:7d:
         02:19:79:7e:ed:41:43:83:8f:d4:44:2a:68:22:a1:35:1e:32:
         be:f5:ca:50:68:93:47:78:ff:c8:14:b4:91:f3:9c:db:ae:b8:
         8b:5a:b3:d3:af:37:01:3c:7c:20:fc:d0:85:39:31:23:1e:d8:
         7f:bf:32:39:df:aa:66:bf:94:bc:d6:b2:38:a3:af:d0:53:a4:
         00:1e:18:97:7b:ed:ac:87:cc:a8:ca:e1:26:95:0b:1b:49:f3:
         31:b7:84:ae:c3:29:c9:1d:5a:93:86:37:a6:20:ef:a3:49:21:
         c1:5b:de:26:83:5e:3c:6b:e6:5d:00:c7:29:4c:86:7f:67:d1:
         da:c5:79:9a:e4:0d:92:a1:18:9f:b1:40:8d:19:83:cd:6f:22:
         45:d5:57:f9:58:33:f2:dc:a9:a0:5f:ec:9f:7e:17:fe:88:a9:
         c5:76:b2:e9:40:dd:d8:32:e4:9b:fc:f8:10:ab:7d:01:bb:34:
         a8:a8:12:a0:7b:a5:e4:14:d9:e2:e4:36:10:00:96:dd:fe:a4:
         41:c7:e6:a1:6c:40:c7:b2:03:f2:f2:d4:fe:36:34:b7:43:3c:
         e6:b7:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----