Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a386532303a3a2f34342d3434203d3e203536373331.roa
File:                     326131323a646434373a386532303a3a2f34342d3434203d3e203536373331.roa (raw, json)
Hash identifier:          kY5UYA7lZwRuSnx9l/Z+U4XJgR2eSUyWd6zGy89aw+Q=
Subject key identifier:   50:CB:1B:0C:35:30:B6:77:A3:C2:DE:07:66:E8:8A:0A:5C:55:1C:76
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       3065F70FD999EE3A30E5C50CF9E50E4E4D7AD54E
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a386532303a3a2f34342d3434203d3e203536373331.roa
Signing time:             Sat 08 Apr 2023 04:35:23 +0000
ROA not before:           Sat 08 Apr 2023 04:30:23 +0000
ROA not after:            Sat 06 Apr 2024 04:35:23 +0000
asID:                     56731
IP address blocks:        2a12:dd47:8e20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:f7:0f:d9:99:ee:3a:30:e5:c5:0c:f9:e5:0e:4e:4d:7a:d5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:30:23 2023 GMT
            Not After : Apr  6 04:35:23 2024 GMT
        Subject: CN=50CB1B0C3530B677A3C2DE0766E88A0A5C551C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:73:a8:5d:22:1f:64:a8:d3:ef:92:8b:9d:
                    0b:2e:81:ec:54:d2:3a:48:43:cb:e8:63:7b:57:f3:
                    a2:db:50:51:82:a0:f0:f9:17:6f:52:56:ed:9c:a3:
                    b9:4b:4f:97:4e:3e:6d:df:bc:31:eb:09:8a:84:36:
                    c7:10:91:1c:e2:35:8e:93:07:b1:66:96:14:22:26:
                    c2:b5:44:65:29:14:82:24:77:65:22:f2:78:b8:b8:
                    3d:2c:95:0f:aa:6e:c5:42:86:4b:91:7e:97:ab:90:
                    70:10:79:8a:8c:b3:e5:88:d9:9f:ff:cf:56:79:1d:
                    5f:55:64:bd:bf:8c:a3:48:2b:99:55:75:2e:eb:35:
                    63:ac:5c:2d:52:71:bb:9c:27:93:94:2d:35:dd:64:
                    70:9e:9a:d6:52:f8:ae:d8:48:4a:0b:10:2a:55:39:
                    17:aa:2f:ec:d4:56:d5:f0:50:c2:6d:80:20:9a:2d:
                    13:cb:fd:f5:50:7e:b3:1a:6e:a3:9a:95:94:aa:9b:
                    5c:73:a8:f6:e1:b7:0c:70:02:8e:6a:60:a0:84:c5:
                    02:14:41:0f:b6:21:23:52:24:e8:5f:75:0c:1f:a9:
                    1d:91:f6:b3:29:79:fc:d7:50:ee:80:d1:cc:07:f8:
                    b1:c5:63:44:77:97:e7:43:55:6d:ff:07:08:40:f5:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CB:1B:0C:35:30:B6:77:A3:C2:DE:07:66:E8:8A:0A:5C:55:1C:76
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a386532303a3a2f34342d3434203d3e203536373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:1c:a4:74:2f:eb:e9:b1:42:bd:8b:d3:9a:e8:5e:0d:d9:
         3f:6c:04:e4:93:62:46:9c:52:6c:ec:d3:94:af:19:d5:70:e6:
         c6:10:39:99:1e:ae:c9:7c:03:a8:dc:5a:02:f7:57:61:87:49:
         07:9b:54:4e:75:34:fe:99:f8:83:af:6a:7b:95:35:b2:61:6d:
         42:a5:df:c1:59:c3:5a:ea:91:5d:b3:38:4c:f0:a5:25:90:55:
         78:04:1e:7a:68:83:c0:2a:9c:7d:3a:af:33:e9:31:8c:b3:b3:
         8d:80:4b:e2:82:65:44:42:d8:e0:9b:b8:06:ff:f5:6f:49:4c:
         b7:9e:63:f6:53:0b:61:2d:97:2d:f8:4b:96:44:31:97:b2:86:
         2e:9f:5d:6a:2e:f0:08:aa:fd:bd:e0:3e:1d:8f:d3:4d:3c:58:
         34:10:b5:7e:69:07:4d:6c:69:94:e3:4e:83:00:73:4a:50:56:
         76:c4:06:40:f9:86:8e:7a:5a:11:24:65:d5:97:98:b6:a7:40:
         ef:72:fc:49:bc:a7:e5:f4:4f:58:9e:27:3f:5d:16:11:7c:a7:
         06:0b:f0:ff:33:6e:7b:13:9e:c3:de:c5:67:c1:ec:22:5d:76:
         de:d5:26:8e:b9:21:91:55:22:df:c2:9a:d0:35:4e:ce:8b:08:
         9c:f8:30:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:28 2023 by rpki-client on console-fra.rpki-client.org