Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383034643a3a2f34382d3438203d3e20323130343435.roa
File:                     326131323a646434373a383034643a3a2f34382d3438203d3e20323130343435.roa (raw, json)
Hash identifier:          XbABY7UNBaItZVHIK8f0gI0QMlV25DepKB6yIi3JE7c=
Subject key identifier:   09:67:C5:F0:F4:4B:B7:18:33:C3:76:D4:26:04:47:9E:60:80:B5:1C
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       0CF36697EDD2981EDAF4EA26893DE06176AFE487
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383034643a3a2f34382d3438203d3e20323130343435.roa
Signing time:             Sat 08 Apr 2023 04:59:54 +0000
ROA not before:           Sat 08 Apr 2023 04:54:54 +0000
ROA not after:            Sat 06 Apr 2024 04:59:54 +0000
asID:                     210445
IP address blocks:        2a12:dd47:804d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f3:66:97:ed:d2:98:1e:da:f4:ea:26:89:3d:e0:61:76:af:e4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:54:54 2023 GMT
            Not After : Apr  6 04:59:54 2024 GMT
        Subject: CN=0967C5F0F44BB71833C376D42604479E6080B51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:d9:d2:62:1e:e5:9a:4a:ae:34:f2:44:a0:
                    71:9d:c9:b8:68:3c:c4:5d:ff:70:b3:e8:35:87:eb:
                    cc:10:31:b8:9c:71:b2:6f:9b:16:78:66:2e:e5:e2:
                    d0:c1:35:06:fc:5b:08:90:15:d9:83:38:22:aa:da:
                    9a:67:3a:b1:30:1b:34:ea:7f:2b:af:5a:4d:c6:b4:
                    f3:61:00:17:d2:df:dc:a4:ac:11:7c:e2:73:ee:6c:
                    66:4f:f2:56:ae:3c:1c:e4:09:12:5c:71:03:10:f8:
                    6c:d7:2f:ac:65:0a:73:55:b6:94:64:fe:75:8f:e2:
                    7f:9a:dc:73:ae:89:d2:93:85:a6:bb:cd:8a:e2:82:
                    a5:3c:89:a6:14:b6:de:76:ae:c4:94:83:85:28:e3:
                    7d:01:d1:05:a7:ce:a6:10:07:66:e1:58:7d:8e:3f:
                    39:2f:5b:cd:6a:ae:4e:a1:10:5c:3a:9d:81:f1:99:
                    39:ba:7b:ec:43:8b:33:ec:03:66:e4:c1:84:26:1b:
                    8e:21:3c:f5:70:80:48:89:7f:7a:c0:d5:4e:10:4e:
                    9f:bf:60:82:4c:70:ac:aa:8f:55:fc:c2:42:4f:14:
                    f1:39:0c:04:21:7a:f4:04:e5:3e:ce:1c:61:79:a4:
                    1f:7c:b0:f9:e6:63:23:54:1a:f8:7d:9e:59:76:4b:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:67:C5:F0:F4:4B:B7:18:33:C3:76:D4:26:04:47:9E:60:80:B5:1C
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383034643a3a2f34382d3438203d3e20323130343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804d::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:59:76:6b:cc:20:f8:a8:9f:14:a9:89:0e:14:c7:11:7e:4b:
         01:d4:f8:ad:d3:3a:40:f7:ad:3a:0b:10:86:68:a8:b2:60:93:
         5e:b7:b4:85:62:16:1c:d8:38:87:40:a5:ae:eb:ad:12:3a:17:
         44:38:9c:e6:5c:9a:72:55:90:0e:b3:af:1a:b5:14:e7:18:d8:
         45:77:76:63:d4:74:05:36:c2:b4:d2:cd:bb:c9:ae:84:ee:58:
         63:82:4c:0b:d8:97:63:0a:71:47:0a:41:6e:56:a3:39:4d:c1:
         df:db:18:25:61:1d:58:95:fb:37:09:2d:aa:fd:f3:4f:15:8e:
         f2:1b:57:80:02:42:91:c4:ca:be:66:1c:d9:bb:1f:ac:60:a9:
         af:02:ac:15:03:ba:4e:72:0d:79:ca:e4:8f:ff:fe:0b:51:07:
         ed:19:9e:28:ab:a6:39:0d:f6:b1:d7:de:bb:63:cd:a0:a0:e8:
         31:0a:b7:42:65:73:cb:2e:f5:55:5b:ec:7e:8c:08:3e:fc:be:
         8d:71:79:2c:8d:5f:21:77:d0:6c:f8:e1:2b:8d:15:6f:f6:0a:
         28:b2:a0:8c:7e:a9:68:4b:eb:b7:c6:dd:04:c6:5f:9e:e6:ff:
         e9:9c:59:a7:66:51:a2:c3:9c:db:6d:14:7c:c6:bd:fa:ca:fb:
         70:03:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----