Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383039303a3a2f34342d3434203d3e20323037313432.roa
File:                     326131323a646434373a383039303a3a2f34342d3434203d3e20323037313432.roa (raw, json)
Hash identifier:          DQKNIwYWmR5xT/ipNAbnEl5l/uUwu5KACb/e38sGOqI=
Subject key identifier:   62:B0:B1:26:6F:61:6C:61:99:52:94:AC:12:CD:0D:79:27:0D:B2:C2
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       523D27C13F4133E288D287436F5B5DCD6955976F
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383039303a3a2f34342d3434203d3e20323037313432.roa
Signing time:             Sat 08 Apr 2023 04:56:37 +0000
ROA not before:           Sat 08 Apr 2023 04:51:37 +0000
ROA not after:            Sat 06 Apr 2024 04:56:37 +0000
asID:                     207142
IP address blocks:        2a12:dd47:8090::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3d:27:c1:3f:41:33:e2:88:d2:87:43:6f:5b:5d:cd:69:55:97:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:51:37 2023 GMT
            Not After : Apr  6 04:56:37 2024 GMT
        Subject: CN=62B0B1266F616C61995294AC12CD0D79270DB2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:10:82:df:82:9a:4e:1d:1c:be:62:c3:55:
                    d7:20:a2:eb:08:85:28:7a:7d:08:3c:7e:6a:b2:c4:
                    4c:45:e3:35:ce:9b:09:6e:34:46:ca:be:c6:17:ba:
                    3c:90:3f:ff:1e:89:ac:f0:5d:12:77:8a:f9:26:80:
                    d9:69:03:50:40:39:7f:a9:5b:86:b5:6c:4a:c6:8b:
                    46:6f:7c:bd:fb:da:74:64:eb:e1:f5:f0:2b:ab:f9:
                    a4:df:a4:b0:90:b6:91:4f:b0:f3:c8:bd:f8:fe:27:
                    14:55:97:76:41:c3:59:34:21:8d:15:7b:e0:32:8f:
                    6d:36:52:93:89:8c:20:53:40:90:78:78:2b:42:62:
                    58:4a:ec:8b:94:f0:b0:5f:06:be:be:c1:2e:96:fd:
                    65:3b:ce:35:68:fc:8d:68:5e:52:b1:82:78:b9:6a:
                    6f:e0:2b:a5:e4:86:6a:10:18:8e:10:87:f9:84:20:
                    04:0a:52:37:f9:f3:34:4c:cb:48:bd:ab:40:4c:ab:
                    75:35:2d:82:b6:a2:b9:06:e8:22:e3:3a:ce:64:6b:
                    9b:ac:d7:3b:3f:84:18:3e:cb:13:22:2c:24:d3:7e:
                    4e:80:8c:59:f4:7a:bc:73:8a:38:7a:10:a2:60:64:
                    60:54:d5:be:98:77:06:d4:53:e8:3a:3d:ae:da:98:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B0:B1:26:6F:61:6C:61:99:52:94:AC:12:CD:0D:79:27:0D:B2:C2
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383039303a3a2f34342d3434203d3e20323037313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8090::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:c7:b6:66:f7:36:29:5d:de:87:ac:95:74:a0:13:10:44:1d:
         c6:eb:9b:71:bf:60:0a:d6:e7:29:8e:44:6a:b2:2f:d1:f2:a1:
         5f:bd:a8:77:5e:e2:65:c2:53:09:a7:6e:e1:13:27:94:b9:6c:
         3d:0d:8b:25:eb:d0:d0:d0:e4:1f:ed:ab:3f:26:9f:f3:58:29:
         28:4f:74:d1:8a:e4:e9:e5:9f:00:21:4d:c9:ea:30:c6:e0:d6:
         a1:14:85:9b:16:c7:c8:64:33:8e:70:f1:d4:3b:c8:95:57:82:
         b3:20:39:ff:e5:00:64:2a:3a:e6:62:65:c1:8f:92:b3:75:6b:
         0e:da:58:cd:a6:8b:7a:27:6a:2d:c9:e6:c1:03:5c:11:2b:a6:
         c2:1d:e2:f0:d0:2a:7e:58:78:ec:89:c3:7f:9f:31:8f:9e:a5:
         0e:46:11:8f:c6:7b:d0:e4:d9:68:ec:fe:91:40:04:9b:9e:6e:
         e2:a4:8e:58:12:5a:14:52:96:29:5a:c8:67:fe:43:f7:2a:a2:
         06:bc:6f:8f:12:6c:eb:ba:d2:f1:d3:a0:6a:22:09:0e:fd:00:
         e5:6b:b7:59:2d:19:43:42:0b:86:71:ae:ee:83:2f:ab:b5:8b:
         01:7a:88:cd:ea:7d:9e:28:49:f4:4e:5e:90:de:70:db:0a:b5:
         92:1f:13:18
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUUj0nwT9BM+KI0odDb1tdzWlVl28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNDUxMzdaFw0yNDA0MDYwNDU2MzdaMDMxMTAvBgNV
BAMTKDYyQjBCMTI2NkY2MTZDNjE5OTUyOTRBQzEyQ0QwRDc5MjcwREIyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCheBCC34KaTh0cvmLDVdcgousI
hSh6fQg8fmqyxExF4zXOmwluNEbKvsYXujyQP/8eiazwXRJ3ivkmgNlpA1BAOX+p
W4a1bErGi0ZvfL372nRk6+H18Cur+aTfpLCQtpFPsPPIvfj+JxRVl3ZBw1k0IY0V
e+Ayj202UpOJjCBTQJB4eCtCYlhK7IuU8LBfBr6+wS6W/WU7zjVo/I1oXlKxgni5
am/gK6XkhmoQGI4Qh/mEIAQKUjf58zRMy0i9q0BMq3U1LYK2orkG6CLjOs5ka5us
1zs/hBg+yxMiLCTTfk6AjFn0erxzijh6EKJgZGBU1b6YdwbUU+g6Pa7amMfJAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQUYrCxJm9hbGGZUpSsEs0NeScNssIwHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMH4G
CCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzODMwMzkzMDNhM2EyZjM0MzQy
ZDM0MzQyMDNkM2UyMDMyMzAzNzMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeAkDANBgkq
hkiG9w0BAQsFAAOCAQEAOMe2Zvc2KV3eh6yVdKATEEQdxuubcb9gCtbnKY5EarIv
0fKhX72od17iZcJTCadu4RMnlLlsPQ2LJevQ0NDkH+2rPyaf81gpKE900Yrk6eWf
ACFNyeowxuDWoRSFmxbHyGQzjnDx1DvIlVeCsyA5/+UAZCo65mJlwY+Ss3VrDtpY
zaaLeidqLcnmwQNcESumwh3i8NAqflh47InDf58xj56lDkYRj8Z70OTZaOz+kUAE
m55u4qSOWBJaFFKWKVrIZ/5D9yqiBrxvjxJs67rS8dOgaiIJDv0A5Wu3WS0ZQ0IL
hnGu7oMvq7WLAXqIzep9nihJ9E5ekN5w2wq1kh8TGA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:28 2023 by rpki-client on console-fra.rpki-client.org