Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a386534303a3a2f34342d3434203d3e20323039333931.roa
File:                     326131323a646434373a386534303a3a2f34342d3434203d3e20323039333931.roa (raw, json)
Hash identifier:          U5XoTy5r02SIJJlVhIeflLjHPn7PZPMB9cVzR8wLE7w=
Subject key identifier:   25:F1:72:CA:1C:BC:D7:00:07:88:D6:19:53:65:8C:18:E2:94:BC:D4
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       19166CDBBFB97B223C71B0D37B06DFF28B22D04F
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a386534303a3a2f34342d3434203d3e20323039333931.roa
Signing time:             Sat 08 Apr 2023 04:59:30 +0000
ROA not before:           Sat 08 Apr 2023 04:54:30 +0000
ROA not after:            Sat 06 Apr 2024 04:59:30 +0000
asID:                     209391
IP address blocks:        2a12:dd47:8e40::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:16:6c:db:bf:b9:7b:22:3c:71:b0:d3:7b:06:df:f2:8b:22:d0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:54:30 2023 GMT
            Not After : Apr  6 04:59:30 2024 GMT
        Subject: CN=25F172CA1CBCD7000788D61953658C18E294BCD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b9:fa:57:0b:52:3a:7d:49:b1:1a:2b:1c:40:
                    c4:04:c4:8d:b6:77:e6:56:73:5d:de:fd:92:a3:67:
                    61:02:5b:af:bc:83:f5:fc:97:27:f0:b0:ff:8a:a7:
                    8d:46:78:3e:7f:2c:dc:5a:0f:e1:21:8e:45:6c:fe:
                    13:1c:96:fc:99:98:88:31:01:3a:b0:73:09:f3:a0:
                    02:3f:07:b1:ed:7d:8c:9e:0f:4c:16:23:92:98:d1:
                    59:8b:4d:63:45:38:12:1d:7e:1d:73:7a:09:27:2f:
                    e1:9e:50:a7:df:84:34:66:2f:13:34:64:22:1a:dc:
                    46:4a:56:c5:c0:a2:11:f8:b7:38:ba:a9:9e:00:4e:
                    f2:ae:dc:2c:c7:0b:37:ca:35:86:82:d9:fd:1e:1f:
                    51:08:e5:9f:f8:28:00:31:18:13:bc:2f:04:f5:71:
                    13:26:35:33:79:2a:7b:86:54:77:d6:b2:c4:5c:21:
                    ed:00:31:8d:fb:77:d2:1a:c4:e5:e2:b5:dd:00:b9:
                    31:9e:47:69:a5:80:d3:2d:1c:52:3f:41:06:00:be:
                    ee:9c:8d:44:2b:f8:71:d6:70:11:40:69:49:0f:11:
                    a1:c3:cd:cd:9f:a3:8d:fd:a9:08:3f:1d:fd:c7:91:
                    96:e3:bb:96:68:f7:f8:aa:07:a0:87:ea:3d:da:68:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F1:72:CA:1C:BC:D7:00:07:88:D6:19:53:65:8C:18:E2:94:BC:D4
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a386534303a3a2f34342d3434203d3e20323039333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e40::/44

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:56:ab:fe:07:c3:73:13:5a:00:63:ac:01:3b:c7:20:9d:
         b6:ce:cc:41:84:ac:22:1f:5b:92:f4:9a:a9:0e:1e:2b:34:57:
         63:03:f3:18:ad:f5:91:c7:33:e6:44:ab:85:52:68:59:79:07:
         f1:75:95:cf:2f:a1:1b:07:ef:4d:6f:16:fa:97:e1:04:3c:08:
         fd:56:72:e8:98:5b:c0:41:a5:a5:27:4f:c0:ac:24:e4:4c:e0:
         37:ab:33:09:aa:26:48:31:7a:07:7c:81:72:28:09:09:25:81:
         56:5c:14:b3:3f:79:1e:40:c5:75:ab:29:df:2a:83:a7:44:2f:
         c2:4c:21:3c:89:44:46:27:16:9e:e5:54:e6:56:d1:4d:4f:2d:
         92:9d:13:39:13:ec:71:0e:a3:ba:fe:dd:d8:9d:17:af:1b:ce:
         45:da:0c:5e:d0:3f:1f:c9:33:35:b2:e3:5e:c5:95:41:aa:58:
         55:ed:d2:02:de:4b:01:35:4a:7b:fc:07:62:06:1c:4c:a2:f9:
         28:87:1a:52:e3:e4:90:4b:60:d0:c1:fe:29:c7:da:19:63:c5:
         79:be:8a:e7:85:04:aa:72:3e:a0:2a:48:88:57:d7:52:4c:3d:
         9f:21:91:02:08:78:85:a8:a8:88:7f:db:6c:93:26:eb:7d:e5:
         fa:24:27:27
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUGRZs27+5eyI8cbDTewbf8osi0E8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNDU0MzBaFw0yNDA0MDYwNDU5MzBaMDMxMTAvBgNV
BAMTKDI1RjE3MkNBMUNCQ0Q3MDAwNzg4RDYxOTUzNjU4QzE4RTI5NEJDRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiufpXC1I6fUmxGiscQMQExI22
d+ZWc13e/ZKjZ2ECW6+8g/X8lyfwsP+Kp41GeD5/LNxaD+EhjkVs/hMclvyZmIgx
ATqwcwnzoAI/B7HtfYyeD0wWI5KY0VmLTWNFOBIdfh1zegknL+GeUKffhDRmLxM0
ZCIa3EZKVsXAohH4tzi6qZ4ATvKu3CzHCzfKNYaC2f0eH1EI5Z/4KAAxGBO8LwT1
cRMmNTN5KnuGVHfWssRcIe0AMY37d9IaxOXitd0AuTGeR2mlgNMtHFI/QQYAvu6c
jUQr+HHWcBFAaUkPEaHDzc2fo439qQg/Hf3HkZbju5Zo9/iqB6CH6j3aaFtnAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQUJfFyyhy81wAHiNYZU2WMGOKUvNQwHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMH4G
CCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzODY1MzQzMDNhM2EyZjM0MzQy
ZDM0MzQyMDNkM2UyMDMyMzAzOTMzMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeOQDANBgkq
hkiG9w0BAQsFAAOCAQEAOwJWq/4Hw3MTWgBjrAE7xyCdts7MQYSsIh9bkvSaqQ4e
KzRXYwPzGK31kccz5kSrhVJoWXkH8XWVzy+hGwfvTW8W+pfhBDwI/VZy6JhbwEGl
pSdPwKwk5EzgN6szCaomSDF6B3yBcigJCSWBVlwUsz95HkDFdasp3yqDp0Qvwkwh
PIlERicWnuVU5lbRTU8tkp0TORPscQ6juv7d2J0XrxvORdoMXtA/H8kzNbLjXsWV
QapYVe3SAt5LATVKe/wHYgYcTKL5KIcaUuPkkEtg0MH+KcfaGWPFeb6K54UEqnI+
oCpIiFfXUkw9nyGRAgh4haioiH/bbJMm633l+iQnJw==
-----END CERTIFICATE-----