Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383036303a3a2f34342d3438203d3e20323131343131.roa
File:                     326131323a646434373a383036303a3a2f34342d3438203d3e20323131343131.roa (raw, json)
Hash identifier:          MPaoMjHOUJUrgMVEUt0j9EJYrb/CbdH3kU4bYuqv81U=
Subject key identifier:   98:59:8A:24:17:DF:60:92:74:2E:E9:EE:00:1A:0D:C6:CE:E9:60:E0
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       21EC81A2AE5D5AD2829F554FA7AA1068295AC8A6
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383036303a3a2f34342d3438203d3e20323131343131.roa
Signing time:             Sat 08 Apr 2023 04:51:43 +0000
ROA not before:           Sat 08 Apr 2023 04:46:43 +0000
ROA not after:            Sat 06 Apr 2024 04:51:43 +0000
asID:                     211411
IP address blocks:        2a12:dd47:8060::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ec:81:a2:ae:5d:5a:d2:82:9f:55:4f:a7:aa:10:68:29:5a:c8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:46:43 2023 GMT
            Not After : Apr  6 04:51:43 2024 GMT
        Subject: CN=98598A2417DF6092742EE9EE001A0DC6CEE960E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:09:ea:94:b8:08:8b:ff:c4:5e:3b:18:89:9a:
                    24:43:d1:39:29:a3:64:e1:bb:00:d4:76:10:8c:92:
                    fb:5c:59:06:04:a4:4e:c5:1b:ab:98:6d:75:05:a7:
                    bd:30:f7:60:ab:b2:24:68:a3:c8:32:e4:c1:25:2e:
                    1c:8f:01:ab:a1:89:93:08:70:01:de:55:c4:b5:a0:
                    2f:ec:61:61:ba:13:4d:84:65:66:f1:89:cc:5f:dd:
                    af:e9:18:79:22:32:70:4e:0a:7d:aa:80:52:91:61:
                    9a:a8:1e:06:05:db:74:32:5d:8b:6b:af:41:89:c3:
                    f4:65:12:80:aa:b2:b6:55:6c:39:2c:81:cc:a5:c6:
                    88:c5:f2:cf:e6:b2:cf:21:5c:f9:f3:0e:b5:27:8c:
                    dc:66:81:fe:ff:83:0e:7d:92:7e:9f:29:e6:3c:20:
                    71:a5:f6:08:b3:4b:9a:d3:f6:f4:f2:29:52:63:63:
                    5b:c9:c1:67:da:6a:83:ea:9f:69:42:43:16:7d:08:
                    a0:47:2c:b5:10:5b:25:db:4e:e3:77:3f:d4:5a:35:
                    f3:c1:48:3e:f7:ab:a4:e4:c2:f8:2d:0e:df:38:cb:
                    1d:ec:46:05:e0:21:7b:a7:01:e7:d4:f8:c4:02:cf:
                    1b:e0:3d:94:a4:f4:f3:bb:7a:ec:d2:da:0b:8a:96:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:59:8A:24:17:DF:60:92:74:2E:E9:EE:00:1A:0D:C6:CE:E9:60:E0
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383036303a3a2f34342d3438203d3e20323131343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8060::/44

    Signature Algorithm: sha256WithRSAEncryption
         b0:f4:46:76:4b:12:2a:9f:28:ae:8e:e9:44:e3:0e:c6:ef:d0:
         d5:34:76:c0:d4:e3:e8:29:7a:23:63:b7:e7:57:87:2e:e6:db:
         7a:eb:55:49:45:ec:19:a8:f9:a7:d7:d5:53:c7:54:21:17:b7:
         4d:1a:a6:d5:a4:0d:7c:b1:45:cb:bb:d4:91:e5:05:f6:ba:bf:
         99:5a:27:5d:64:19:0e:6c:99:ff:1a:4f:3f:8d:87:b8:24:8f:
         10:af:95:c5:8d:e6:ad:96:02:33:1f:20:91:f7:21:21:c6:ef:
         6c:e7:b9:2a:4f:86:ec:ef:c1:e1:f3:c1:da:43:dd:28:41:d4:
         e0:ce:62:ae:93:ca:07:38:b9:da:d4:97:11:1f:9c:c1:42:d1:
         9c:4f:a3:05:da:84:54:e8:ec:ee:4c:27:1b:14:f6:0a:f8:a9:
         0c:b5:a4:60:fb:8a:b3:a6:85:95:7b:8f:88:c3:7f:84:51:b4:
         ba:02:44:75:3a:c3:4c:9f:20:f8:25:ea:81:b8:72:ae:34:ab:
         63:f3:21:9f:c7:a8:ec:e7:b0:32:17:c0:ad:d3:76:2b:ef:9a:
         8f:41:9f:a3:34:06:36:0d:ef:81:37:15:02:19:6f:0e:d9:80:
         c6:09:9a:e0:bc:b3:71:43:12:f8:8e:ad:90:61:9d:66:ac:08:
         f7:67:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----