Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383466653a3a2f34382d3438203d3e20323035343332.roa
File:                     326131323a646434373a383466653a3a2f34382d3438203d3e20323035343332.roa (raw, json)
Hash identifier:          JJPjXXtFQ/HZrzxXQ3dH0DOzyCgqfi9Op9Q/VFo1/rM=
Subject key identifier:   4B:6A:34:70:97:F0:60:51:61:3B:E8:A5:16:0B:C5:A4:FC:F0:73:71
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       3433D56CA8D4ABED896FF75A021FBD262A1120A9
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383466653a3a2f34382d3438203d3e20323035343332.roa
Signing time:             Sat 08 Apr 2023 05:07:23 +0000
ROA not before:           Sat 08 Apr 2023 05:02:23 +0000
ROA not after:            Sat 06 Apr 2024 05:07:23 +0000
asID:                     205432
IP address blocks:        2a12:dd47:84fe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:33:d5:6c:a8:d4:ab:ed:89:6f:f7:5a:02:1f:bd:26:2a:11:20:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 05:02:23 2023 GMT
            Not After : Apr  6 05:07:23 2024 GMT
        Subject: CN=4B6A347097F06051613BE8A5160BC5A4FCF07371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4d:3e:1f:74:d4:81:5a:bb:83:a3:e2:fe:35:
                    fb:a4:ce:ee:52:42:3f:f4:b3:76:3f:b2:b3:60:2b:
                    cb:52:8c:62:84:f1:d9:b9:05:18:3c:96:70:2a:6c:
                    76:bd:e5:6b:58:ad:cd:6e:a9:2c:bf:9d:ab:5f:23:
                    94:f0:df:a1:78:3e:a8:8e:1b:7f:77:29:a9:dc:81:
                    f6:e5:2c:3a:61:21:93:a6:9c:a0:ba:95:d0:49:7b:
                    82:d3:b2:97:48:21:b7:16:41:44:17:4b:bc:ff:15:
                    19:30:3c:6a:7e:c4:3c:8a:9e:91:f1:0e:a3:fe:c7:
                    60:5d:e1:25:8f:08:cd:6a:92:16:22:f9:66:b3:68:
                    f7:33:20:04:6d:80:76:12:00:fd:22:bf:12:56:9f:
                    15:85:89:76:1d:10:84:cc:5b:6d:4d:0a:14:a2:65:
                    ea:22:b1:e6:60:ba:34:8e:9f:23:cb:94:73:d2:db:
                    3c:76:cd:55:49:4f:32:61:95:33:b2:6f:30:df:cd:
                    9c:ca:84:18:be:f2:1f:12:36:ce:67:84:a0:46:80:
                    05:6c:26:16:f0:ce:bc:34:2e:4f:c3:a3:2d:df:68:
                    65:25:de:dd:a5:f6:c8:55:14:c9:bd:d8:b0:96:89:
                    1e:34:00:ed:1b:8b:7d:f6:db:1a:d5:1a:2e:56:fd:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6A:34:70:97:F0:60:51:61:3B:E8:A5:16:0B:C5:A4:FC:F0:73:71
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383466653a3a2f34382d3438203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:0d:c9:0e:45:fc:1a:ef:33:f2:b3:40:2c:85:5f:a0:61:4d:
         12:07:b7:dc:d8:74:8f:c3:85:0f:ae:b7:77:5d:80:c4:4d:3e:
         e4:8c:01:49:a3:8f:fc:f5:89:34:99:e3:c2:d5:0d:31:af:0a:
         08:70:29:6e:5a:fa:5f:ff:b4:38:ba:a6:64:1f:1e:ec:cb:17:
         9a:23:04:ec:a4:42:bc:01:aa:55:a4:6f:f2:93:b0:dd:e0:58:
         33:12:44:d6:67:60:c6:1f:42:05:e8:45:6d:c5:4e:5f:64:07:
         b2:19:5c:ff:c0:7f:82:03:e3:39:8c:cb:a1:c7:46:cc:42:4b:
         01:d0:da:c3:bc:f8:48:7e:29:e5:9a:69:a9:67:e6:5d:2e:c9:
         4c:d7:3d:66:ce:c0:6d:d0:6e:5e:09:71:e8:b6:1a:78:ae:d0:
         07:18:84:d8:1d:4a:52:39:94:b4:f9:f8:98:68:4f:ca:d5:96:
         88:65:77:d7:2f:08:8e:6f:68:44:19:91:34:fc:a6:26:9f:8e:
         e3:35:c6:6e:41:18:4c:bc:4f:35:aa:5e:3f:06:10:60:e8:6b:
         1a:ec:62:69:c1:50:68:f4:b5:12:a7:1c:ef:04:77:8a:c7:e8:
         17:2f:63:9b:a6:e3:7b:ae:16:96:51:0f:1e:c6:84:eb:6d:6d:
         24:99:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----