Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383139303a3a2f34342d3434203d3e20323132303731.roa
File:                     326131323a646434373a383139303a3a2f34342d3434203d3e20323132303731.roa (raw, json)
Hash identifier:          /317e09vEqxnbum1MqgZABd79GrTIqLMTyylgJ6MjB0=
Subject key identifier:   84:A0:F0:C6:5A:9C:82:88:D5:A8:40:C2:B4:F7:BE:8F:4B:E1:16:DC
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       41614BB020CE4758CBA000EE5B0223C6EBA7B6DE
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383139303a3a2f34342d3434203d3e20323132303731.roa
Signing time:             Sat 08 Apr 2023 04:49:58 +0000
ROA not before:           Sat 08 Apr 2023 04:44:58 +0000
ROA not after:            Sat 06 Apr 2024 04:49:58 +0000
asID:                     212071
IP address blocks:        2a12:dd47:8190::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:61:4b:b0:20:ce:47:58:cb:a0:00:ee:5b:02:23:c6:eb:a7:b6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:44:58 2023 GMT
            Not After : Apr  6 04:49:58 2024 GMT
        Subject: CN=84A0F0C65A9C8288D5A840C2B4F7BE8F4BE116DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ea:4f:5a:88:92:f5:a1:5c:da:34:8b:94:25:
                    7f:57:09:79:e7:67:57:2f:a4:c0:6a:06:0a:0a:47:
                    90:60:ba:c4:2e:42:b5:86:91:8f:bf:aa:52:a2:5c:
                    92:9d:b5:15:8c:2f:ce:9a:dd:bb:75:e6:fb:62:82:
                    70:27:65:ae:00:dc:d1:4b:f0:26:11:95:26:43:3c:
                    d7:5c:c3:2c:20:01:02:94:9e:95:a7:35:ac:b5:c2:
                    8e:ed:46:9c:8b:29:7b:a6:f1:45:23:92:16:e1:0c:
                    c5:2e:2d:c0:af:c8:13:0a:43:e8:fe:36:a8:e7:22:
                    fd:41:8f:68:79:11:3c:ce:f6:2b:20:67:43:f4:76:
                    69:25:8c:5a:96:e9:f3:e2:96:19:da:c5:30:14:8d:
                    04:54:37:ed:d8:c3:01:c5:1f:aa:94:1a:c4:d6:b0:
                    6c:ff:7b:c6:a5:55:97:38:d8:b1:2f:7b:e3:65:78:
                    f2:23:9a:72:69:e3:25:85:16:0e:b1:65:db:84:d2:
                    cc:21:86:17:0e:d4:07:7a:b3:ae:0e:22:8a:14:94:
                    93:fe:23:ae:6e:eb:a8:03:1d:96:d0:6b:ea:f2:d3:
                    9c:41:9a:7b:f6:75:b4:42:22:be:57:ed:3a:3c:7e:
                    e3:df:0f:5b:6b:2f:7c:80:a1:de:70:79:2e:23:b4:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A0:F0:C6:5A:9C:82:88:D5:A8:40:C2:B4:F7:BE:8F:4B:E1:16:DC
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383139303a3a2f34342d3434203d3e20323132303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8190::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:cb:2f:63:21:05:2b:da:df:fc:98:93:b6:80:8a:4f:34:87:
         b4:a2:d7:bd:f4:d6:6c:95:a4:ef:eb:bb:8b:dd:dd:a4:9c:43:
         00:b0:a0:39:96:09:1c:37:1c:a6:f5:bc:2c:cd:1c:a1:b8:57:
         7d:6c:0c:a8:0c:4e:a9:ea:16:b5:89:f1:6d:91:1c:c4:6f:54:
         97:80:0a:97:b1:83:29:9b:08:0b:1c:a2:de:f9:31:fc:49:3f:
         b2:69:2e:fe:59:a3:71:47:80:bd:30:2a:16:b3:8f:ea:b3:de:
         33:c7:e9:40:ba:d4:75:87:fe:b1:39:a5:44:11:58:96:32:9e:
         91:de:07:53:8d:e0:9f:0e:2b:a5:4d:66:cd:66:a2:dc:71:ac:
         3a:2e:19:ed:eb:0c:77:43:a4:2f:b0:47:3a:fe:47:31:c4:6a:
         56:2e:92:47:1c:be:fc:29:40:71:43:8d:a7:9a:1e:7e:6b:d1:
         e2:75:a5:eb:10:d6:87:93:cc:79:b5:66:37:12:76:35:3f:bf:
         9e:6f:df:d7:20:7d:8f:d8:49:ce:0a:dc:13:c5:81:ab:c5:c3:
         6b:00:39:c7:ee:6a:1d:71:0d:94:79:dd:5a:a7:32:e9:02:d9:
         8c:82:ad:07:9b:fd:9c:a2:4e:d8:17:c3:8d:a7:b5:40:9b:73:
         57:1b:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----