Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a386531303a3a2f34342d3434203d3e203531313239.roa
File:                     326131323a646434373a386531303a3a2f34342d3434203d3e203531313239.roa (raw, json)
Hash identifier:          U21h4TCu5tPNlQnaFlw0R7o7A9i5nHa4f3K6b0PBopQ=
Subject key identifier:   04:91:B3:D5:4B:16:40:8D:2B:A6:C5:BD:04:80:BC:85:29:6B:92:6F
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       21D2941CA603C3441F7B9D4E32223FC56ADC9C97
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a386531303a3a2f34342d3434203d3e203531313239.roa
Signing time:             Sat 08 Apr 2023 04:34:58 +0000
ROA not before:           Sat 08 Apr 2023 04:29:58 +0000
ROA not after:            Sat 06 Apr 2024 04:34:58 +0000
asID:                     51129
IP address blocks:        2a12:dd47:8e10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d2:94:1c:a6:03:c3:44:1f:7b:9d:4e:32:22:3f:c5:6a:dc:9c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:29:58 2023 GMT
            Not After : Apr  6 04:34:58 2024 GMT
        Subject: CN=0491B3D54B16408D2BA6C5BD0480BC85296B926F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:b8:01:d9:2f:00:98:5b:26:0a:22:ec:15:
                    31:ca:c8:1b:75:b2:4e:06:a6:53:dc:a2:32:2c:c5:
                    07:e9:b6:f5:f8:0f:b6:9d:3d:50:bd:4c:54:61:43:
                    03:25:5c:49:d5:01:47:ea:f9:68:16:24:bd:0c:09:
                    ec:24:2e:49:d4:1c:19:b2:f8:70:8b:7b:f8:1f:a7:
                    8b:db:4c:b5:84:1f:e8:f4:e4:6d:86:05:17:db:e8:
                    99:5f:b2:32:ff:78:43:e2:37:6c:ec:96:65:7d:06:
                    79:b2:01:c6:f3:65:07:65:df:bd:26:5b:2a:27:b2:
                    3d:94:60:bd:d8:1d:b2:ac:17:02:60:9e:09:d5:aa:
                    8e:90:e7:72:8d:03:4c:e9:64:87:f8:5a:20:f3:66:
                    ba:d1:3d:41:6e:e8:7c:05:d3:ab:e9:39:70:c5:bf:
                    1e:77:e8:a2:31:ff:d3:05:1b:ee:f5:5c:c2:1d:40:
                    6f:34:09:5d:8b:b0:80:b1:8c:6c:db:ef:a2:00:e4:
                    44:97:19:7d:49:95:45:1b:e7:8b:9b:be:14:54:72:
                    df:9d:26:54:29:af:d0:45:1c:0a:e9:67:4f:59:fe:
                    2e:c8:86:c5:78:9f:08:15:3f:c7:70:dd:66:d1:7b:
                    6c:f1:d6:3b:a1:73:77:a9:48:f0:be:00:14:43:78:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:91:B3:D5:4B:16:40:8D:2B:A6:C5:BD:04:80:BC:85:29:6B:92:6F
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a386531303a3a2f34342d3434203d3e203531313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e10::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:81:84:3c:1d:5c:eb:be:38:83:d6:b0:91:eb:54:2a:9c:0a:
         53:1f:65:45:3b:d6:6c:52:d8:01:b6:b3:43:a9:d7:a1:23:34:
         5d:0b:ec:fc:2e:a5:0a:00:d2:8d:aa:03:34:c4:e8:aa:67:8e:
         67:8c:97:d2:e1:46:80:ad:15:b6:2e:53:61:b7:d7:4b:54:84:
         0f:89:80:ba:b6:46:f9:cb:30:25:89:f5:8c:7d:ee:49:75:57:
         53:49:0f:4a:8d:d2:1b:24:2e:b7:eb:33:79:9f:cc:54:ab:78:
         cf:01:5a:48:78:6a:c9:04:c7:64:fc:02:1e:1d:32:9a:e5:42:
         57:83:0f:58:9a:6f:41:02:e0:59:5c:fb:81:c3:96:61:f7:c9:
         24:ea:a8:ac:85:bb:24:2b:20:85:52:a6:5a:63:67:4e:e9:6a:
         75:e5:59:b6:4a:37:15:c7:e5:02:16:52:9e:0d:0a:85:3b:14:
         95:b9:83:f6:0d:02:31:7e:da:5e:79:e0:4d:a8:7c:5f:49:ba:
         be:49:ab:e6:c8:4a:85:ba:5e:59:98:90:f0:ca:e0:df:36:56:
         6c:9d:b5:2e:8c:16:30:b4:82:53:9d:77:a7:70:a6:ae:46:fb:
         2e:83:a9:f1:e3:7f:f0:83:8a:41:75:23:f6:2e:7b:d5:8f:b7:
         8e:3b:c4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----