Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383333303a3a2f34382d3438203d3e20323133303336.roa
File:                     326131323a646434373a383333303a3a2f34382d3438203d3e20323133303336.roa (raw, json)
Hash identifier:          5zNrbhw06pcfY9DTRJ/TxuhkGH8MehGr+G5Polu3pWw=
Subject key identifier:   82:2A:1C:87:1C:19:89:47:7C:3D:53:92:13:39:CE:22:38:12:C8:39
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       08EB0F828B9931295997A3F73FB8351CD1A873F8
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383333303a3a2f34382d3438203d3e20323133303336.roa
Signing time:             Sat 08 Apr 2023 04:41:44 +0000
ROA not before:           Sat 08 Apr 2023 04:36:44 +0000
ROA not after:            Sat 06 Apr 2024 04:41:44 +0000
asID:                     213036
IP address blocks:        2a12:dd47:8330::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:eb:0f:82:8b:99:31:29:59:97:a3:f7:3f:b8:35:1c:d1:a8:73:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:36:44 2023 GMT
            Not After : Apr  6 04:41:44 2024 GMT
        Subject: CN=822A1C871C1989477C3D53921339CE223812C839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f8:22:2f:51:52:fa:3f:34:05:6d:46:7a:9a:
                    98:d1:d4:6a:a7:a2:19:9c:b3:af:bf:ab:28:04:d9:
                    da:6a:57:12:e7:c0:2c:da:43:46:24:22:19:bb:6b:
                    88:fe:03:05:ca:0f:b7:8d:f5:a3:ac:bb:4b:9c:f5:
                    f1:1c:1d:60:45:f3:f0:ec:4c:36:f0:57:16:f0:12:
                    ef:5e:c6:f7:10:c8:8e:ce:70:45:fe:89:2d:dd:5f:
                    c0:62:a8:48:20:2a:69:69:a8:af:29:f4:de:63:00:
                    56:05:ab:b1:4c:49:14:98:e5:2b:30:62:0f:3e:8e:
                    19:e8:03:93:03:7a:53:06:bb:4e:ec:10:c0:65:c7:
                    da:aa:97:bd:d1:59:28:60:92:a6:e4:47:86:5a:3c:
                    79:65:28:03:40:04:a0:d8:14:98:5e:a3:6f:32:39:
                    46:35:6e:08:ca:70:b7:25:4b:24:8f:b7:9b:02:94:
                    ff:2d:68:10:8b:d4:6e:27:e0:35:14:b7:49:62:81:
                    78:85:91:20:5a:20:a4:26:53:a4:a2:b1:b8:ca:57:
                    fb:ae:e1:6a:51:d9:b7:ac:36:60:97:bb:75:3f:26:
                    b9:a1:cd:7b:de:6a:7f:36:29:27:c9:19:58:a0:5c:
                    f6:56:9c:0e:74:b5:01:b0:9c:0e:63:f5:de:96:25:
                    4f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2A:1C:87:1C:19:89:47:7C:3D:53:92:13:39:CE:22:38:12:C8:39
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383333303a3a2f34382d3438203d3e20323133303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8330::/48

    Signature Algorithm: sha256WithRSAEncryption
         cd:c8:09:bc:b8:a4:0d:17:e1:c1:94:56:7b:90:ec:be:dd:87:
         4a:7a:c5:32:ea:9b:76:6c:77:a9:05:ba:92:0e:26:92:78:21:
         c3:cd:71:85:38:58:92:a4:b3:b5:be:c3:8d:bf:40:0f:01:f8:
         e8:12:f1:f5:f0:42:59:ec:53:39:6b:92:44:d7:18:90:18:d3:
         88:41:17:fa:32:6d:83:b2:e0:1b:10:c8:b6:52:0c:f8:84:d9:
         7f:3d:24:81:9d:da:a8:90:80:da:0a:f4:96:5f:da:08:54:25:
         f5:d1:27:b9:a5:f6:f1:c4:5f:75:49:a3:73:0e:be:ac:41:cc:
         e4:fb:ef:24:dc:26:83:06:08:04:83:44:b4:58:a3:4b:7c:1c:
         74:3f:19:84:c9:3b:37:52:e3:16:b5:2f:49:be:13:77:99:6f:
         a2:02:54:06:30:a2:58:9f:ca:1a:7c:09:20:08:bf:ff:15:1e:
         51:36:7d:db:3f:a3:1d:60:90:1c:a7:3e:13:4d:d7:d0:81:90:
         93:31:b7:cd:b4:2d:4a:ec:b5:5f:b6:08:6e:76:c0:83:48:48:
         29:a3:9c:28:55:e6:5f:8e:08:6c:25:00:e3:fc:c1:97:c7:ec:
         f7:4d:0d:c9:b1:43:1f:87:c9:7c:5d:4e:b9:ac:c0:94:52:97:
         05:f7:2d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----