Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a386630303a3a2f34302d3438203d3e20323132343833.roa
File:                     326131323a646434373a386630303a3a2f34302d3438203d3e20323132343833.roa (raw, json)
Hash identifier:          /X+AElLQfdMOkusHEQ7eZSp2R+uQOSzeHJrfF1R2ENU=
Subject key identifier:   F7:39:E3:79:DB:1B:58:AA:C3:24:90:EB:FD:F1:00:EE:CF:D4:7D:CE
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       21A33A0A9FF2FC7BFB874822AFEC979079DE51F5
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a386630303a3a2f34302d3438203d3e20323132343833.roa
Signing time:             Sat 08 Apr 2023 04:44:33 +0000
ROA not before:           Sat 08 Apr 2023 04:39:33 +0000
ROA not after:            Sat 06 Apr 2024 04:44:33 +0000
asID:                     212483
IP address blocks:        2a12:dd47:8f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a3:3a:0a:9f:f2:fc:7b:fb:87:48:22:af:ec:97:90:79:de:51:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:39:33 2023 GMT
            Not After : Apr  6 04:44:33 2024 GMT
        Subject: CN=F739E379DB1B58AAC32490EBFDF100EECFD47DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:65:a4:d7:68:46:90:80:b4:5f:55:63:4f:
                    22:34:3f:f0:3f:d2:79:29:a0:c7:80:6f:75:50:0e:
                    45:96:df:3f:3c:11:2c:e7:75:80:94:54:ba:fd:98:
                    3c:ee:7e:3c:a3:5c:c1:b7:49:2a:b5:46:32:b7:e5:
                    94:59:b2:79:3e:28:c2:cd:07:9f:a5:44:6b:e9:59:
                    ca:ed:18:e4:a1:d2:fc:ee:e3:ab:41:db:60:95:79:
                    f5:15:86:31:3e:f8:b7:cb:6a:c8:a7:a7:4d:64:a0:
                    bd:d5:fb:90:61:ea:51:8a:28:1f:df:7c:ff:b9:39:
                    5b:42:c2:4b:01:5b:27:0d:03:cb:c8:ff:7d:f4:e8:
                    d3:20:f5:c6:72:74:fb:47:af:53:ab:27:65:8d:01:
                    4f:14:38:1f:95:b5:35:f5:ea:80:c8:f2:4d:6a:6e:
                    ca:c6:71:6b:72:6a:97:f3:91:83:3d:6d:91:68:a7:
                    ef:49:d4:3a:ae:95:0b:ca:f7:ba:84:8e:71:8e:5f:
                    55:5f:ca:70:db:f9:8a:7d:0e:db:17:a0:c3:23:7b:
                    27:f1:c7:0d:be:a3:21:20:ce:6b:bf:63:58:c4:ed:
                    21:88:1b:fa:47:8a:87:6c:36:1a:db:3f:26:40:2e:
                    f3:f8:51:df:bc:80:0a:6c:88:45:cc:67:84:55:04:
                    fb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:39:E3:79:DB:1B:58:AA:C3:24:90:EB:FD:F1:00:EE:CF:D4:7D:CE
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a386630303a3a2f34302d3438203d3e20323132343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:d4:93:b3:65:ad:d7:27:81:43:e7:37:e2:f8:22:55:b8:78:
         f7:4e:90:1e:da:74:00:5e:5e:77:64:f3:23:03:f1:ef:46:7c:
         7a:ed:01:f7:5e:ae:17:8f:c0:e1:b5:2a:c6:ea:7d:d9:ba:81:
         d4:1d:88:4f:97:0d:ba:80:19:84:a5:7e:e7:02:b7:e1:47:88:
         26:40:a7:ab:4c:b9:4c:18:1d:82:9d:af:cb:c2:df:05:79:da:
         7b:bb:4e:5a:7a:9d:6d:71:bf:bb:40:40:1e:2d:93:19:fd:28:
         4f:82:d4:2f:69:4c:88:0d:cf:4a:3d:6c:3b:7c:35:06:9a:33:
         6d:3e:04:7a:d2:27:4a:81:73:1f:ec:b4:66:be:66:d6:da:d0:
         4e:ec:d2:0b:4e:04:f8:f7:ca:82:39:98:1d:a9:bc:3d:04:a9:
         48:e4:5a:55:14:c9:69:30:0b:f5:02:70:bd:41:07:6f:49:f7:
         52:b5:f2:f3:4f:05:d2:3d:13:e3:e7:c7:91:cd:36:50:9a:d8:
         f3:48:c9:8a:44:7c:20:bf:63:db:51:e7:22:52:74:c8:4a:74:
         d3:09:cf:57:2f:6b:60:2e:00:ec:89:c0:3d:ad:a9:36:22:e6:
         33:f0:9f:8c:17:d1:b8:4c:69:99:76:f8:be:ef:31:d3:0b:34:
         21:c6:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----