Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383236303a3a2f34342d3438203d3e203537343036.roa
File:                     326131323a646434373a383236303a3a2f34342d3438203d3e203537343036.roa (raw, json)
Hash identifier:          GujAQrl1pc/HE6jKs/mlKujmr3xpyw0xxc61S2H3QWE=
Subject key identifier:   BD:68:16:95:2A:6D:7C:8C:7A:24:7A:93:49:42:BD:D6:DE:A6:F4:C7
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       7ABFFB1DE76D261ABAF4AC5F4C1B6769FB2A173E
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383236303a3a2f34342d3438203d3e203537343036.roa
Signing time:             Sat 08 Apr 2023 04:38:55 +0000
ROA not before:           Sat 08 Apr 2023 04:33:55 +0000
ROA not after:            Sat 06 Apr 2024 04:38:55 +0000
asID:                     57406
IP address blocks:        2a12:dd47:8260::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bf:fb:1d:e7:6d:26:1a:ba:f4:ac:5f:4c:1b:67:69:fb:2a:17:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:33:55 2023 GMT
            Not After : Apr  6 04:38:55 2024 GMT
        Subject: CN=BD6816952A6D7C8C7A247A934942BDD6DEA6F4C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e9:85:96:1b:ca:8d:06:6a:67:8f:79:6b:23:
                    a5:87:70:78:a0:49:38:a2:f4:18:84:9c:cb:a5:c1:
                    86:f7:42:64:9e:32:65:77:6b:61:54:13:de:1b:87:
                    21:55:da:26:76:ef:f2:47:1e:a0:83:d9:31:39:18:
                    42:f6:7b:2c:d2:36:34:3a:b7:30:f9:52:4f:cd:61:
                    18:bf:a4:03:7f:a0:7c:2c:d2:22:40:54:00:7d:7e:
                    6a:5e:37:60:80:16:73:b2:ab:34:a1:3a:8b:df:82:
                    e1:a8:10:47:85:75:b7:9e:6a:9f:27:ad:79:4f:b5:
                    01:e3:03:8f:1f:64:41:2b:ba:93:ce:86:de:af:0d:
                    4f:80:52:83:a5:2d:95:fe:7c:18:4e:c4:9e:63:f8:
                    a7:4d:8e:45:e6:72:de:a8:10:8e:74:97:08:f0:27:
                    94:fc:d5:93:84:6e:4c:87:32:47:76:bf:9d:2f:f5:
                    80:7e:c0:44:2a:c7:45:7f:f3:65:c5:78:0f:77:16:
                    73:91:fd:17:4d:65:04:e5:13:06:f3:c5:42:b0:b0:
                    38:8e:26:ad:75:af:7c:9b:9e:3b:3b:bf:5e:10:62:
                    16:fe:7a:2b:9f:5a:b7:a2:8c:a8:dc:f8:fa:59:9a:
                    07:1e:9b:8b:2d:2c:ea:b5:4c:e0:84:29:09:d7:2f:
                    ba:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:68:16:95:2A:6D:7C:8C:7A:24:7A:93:49:42:BD:D6:DE:A6:F4:C7
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383236303a3a2f34342d3438203d3e203537343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8260::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:f8:22:ce:a7:0d:87:5d:c2:e8:aa:11:91:04:7e:c9:b8:
         9f:6b:2a:5f:1c:13:59:94:cd:64:d8:2b:24:22:ae:7d:29:fe:
         c9:35:b2:58:67:8c:a1:bd:78:87:c0:8b:63:80:48:64:92:c1:
         7f:63:00:40:1e:cd:ec:ca:7a:aa:bd:fa:c5:5c:45:46:a8:c6:
         15:6d:49:20:ba:d5:b3:19:99:16:c5:d7:27:df:74:52:67:5b:
         48:d2:64:8d:21:dc:fc:39:bf:a4:13:aa:cb:f5:3f:8d:7c:5a:
         05:a2:82:43:6e:3f:19:a3:37:12:54:10:58:58:5a:15:71:33:
         42:3b:30:b8:0c:a7:3d:8b:b3:fa:11:a5:36:c1:14:47:35:65:
         5d:4a:20:9e:a3:cd:0a:70:38:51:9c:a4:ba:58:25:61:a0:eb:
         34:06:2b:a4:52:aa:14:b6:c8:20:b6:6a:8d:66:df:dc:1a:f4:
         14:15:0b:c0:42:76:8f:d4:b5:a9:d1:57:87:d3:ac:d6:d4:19:
         fc:92:0a:9c:7b:66:34:6b:c3:8b:3e:e3:b2:9e:3d:d8:09:32:
         7a:f1:39:df:ab:02:3b:65:e3:e4:34:09:1f:f9:9b:37:70:2b:
         15:e5:09:54:4f:7f:1e:c0:40:cf:2a:ea:dd:a6:5e:0a:19:92:
         91:48:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----