Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383034653a3a2f34382d3438203d3e203536383038.roa
File:                     326131323a646434373a383034653a3a2f34382d3438203d3e203536383038.roa (raw, json)
Hash identifier:          u6EZhr+rjM6sDp9Zlf64Fac7kD6uC9pUI3uO0EQ2c+Y=
Subject key identifier:   A6:38:78:8E:D8:DC:0B:68:A1:5F:AB:B6:7D:27:30:D8:27:31:50:EA
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       70F0AEB69491768938715BA324E70EFF19E4B548
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383034653a3a2f34382d3438203d3e203536383038.roa
Signing time:             Sat 08 Apr 2023 04:39:28 +0000
ROA not before:           Sat 08 Apr 2023 04:34:28 +0000
ROA not after:            Sat 06 Apr 2024 04:39:28 +0000
asID:                     56808
IP address blocks:        2a12:dd47:804e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f0:ae:b6:94:91:76:89:38:71:5b:a3:24:e7:0e:ff:19:e4:b5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:34:28 2023 GMT
            Not After : Apr  6 04:39:28 2024 GMT
        Subject: CN=A638788ED8DC0B68A15FABB67D2730D8273150EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:ba:25:ef:70:e7:fe:e6:25:83:bc:c4:61:
                    95:26:5d:0b:23:fb:e8:90:4b:78:7c:fd:1f:cd:70:
                    f9:be:0b:45:a0:5c:0c:a2:18:32:a9:a8:73:f6:fa:
                    ff:f4:2d:ed:22:eb:bc:58:7b:ad:c6:ea:24:cc:07:
                    4e:e8:db:2a:6d:8e:09:3f:70:c6:0d:89:6c:30:b3:
                    d4:6e:d7:2e:6f:d2:1c:3c:89:0d:55:70:e5:f1:a7:
                    bd:8d:e5:01:5d:61:8d:e8:58:af:e8:95:a3:f5:28:
                    cb:9d:ea:43:1b:9d:15:ce:12:94:99:22:e4:93:15:
                    86:1c:08:35:30:fc:22:b8:04:18:6b:35:c5:58:0e:
                    ef:57:d7:ab:f2:11:6e:51:16:bb:81:12:31:49:21:
                    79:41:dd:a8:b3:ce:8a:8b:d9:a3:8e:f6:20:24:4f:
                    01:67:69:3c:9f:e6:07:c3:29:3a:ba:1e:f0:4a:ee:
                    b8:b1:fa:0a:59:b7:02:8e:11:4e:ae:55:c9:4d:01:
                    3f:15:db:22:2a:9a:8a:ac:b0:bc:78:fa:71:9b:f9:
                    01:f1:3c:6a:a0:57:e0:51:d4:c0:aa:dd:00:4a:f8:
                    ce:41:17:e3:a4:6f:9c:28:12:c0:a4:4c:8d:fa:1a:
                    ba:d1:3c:c4:12:c4:ce:96:73:23:86:60:2f:5b:0f:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:38:78:8E:D8:DC:0B:68:A1:5F:AB:B6:7D:27:30:D8:27:31:50:EA
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383034653a3a2f34382d3438203d3e203536383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804e::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:f0:1f:e6:36:77:c5:cb:7f:e3:ea:47:40:c6:bf:a3:0b:72:
         fc:b5:a2:93:7e:64:b2:b3:04:65:79:e3:56:be:e0:57:6d:25:
         04:68:4d:a4:d0:7d:5c:4a:8e:8f:15:38:af:26:bf:8b:d8:9b:
         4e:24:2c:e2:99:52:a4:f0:54:c5:35:b2:92:be:c5:22:34:32:
         7f:ce:cd:2f:d9:0a:13:39:ce:86:0f:74:5d:f5:a4:d7:41:bc:
         dc:9b:ee:96:cd:9d:3f:04:4f:2b:d2:48:33:3d:33:b2:b1:56:
         1b:b4:90:2a:cc:59:e0:22:3c:4b:73:7c:e9:0e:de:bd:0f:2c:
         cd:4c:e1:d7:53:b4:ae:73:70:ff:59:cc:23:a6:30:07:6d:27:
         33:9c:76:7d:0c:a9:82:14:ad:a2:38:e0:d8:eb:a1:b2:89:1f:
         50:b8:97:c5:15:f3:ec:9c:df:7f:66:01:6a:98:7b:87:c0:6c:
         3a:f0:3d:09:3d:af:8d:1f:57:8e:46:61:7a:be:3d:b9:b7:01:
         ce:0d:52:09:e0:a5:20:02:59:9a:c8:7b:61:b4:05:e6:04:80:
         be:ab:ee:45:8e:73:4d:a9:de:a0:65:f0:5b:88:ab:a0:6f:11:
         3c:fe:17:de:52:dd:68:42:6c:9e:0d:80:e0:c6:4e:4b:dc:e1:
         a4:89:c3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:24 2023 by rpki-client on console-ams.rpki-client.org