Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a643230303a3a2f34302d3438203d3e20323131393436.roa
File:                     326131323a646434373a643230303a3a2f34302d3438203d3e20323131393436.roa (raw, json)
Hash identifier:          meb6tFLYglvGwTdvzpRNU7YlgiC/mqgJehsyWOeB2Us=
Subject key identifier:   1A:7B:8F:A2:45:88:E8:79:D3:2C:84:01:34:1F:D8:AE:52:BC:F5:3D
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       6831BEE1066526FEFE00AD6495BF7745DD0E78B1
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a643230303a3a2f34302d3438203d3e20323131393436.roa
Signing time:             Sat 08 Apr 2023 04:49:37 +0000
ROA not before:           Sat 08 Apr 2023 04:44:37 +0000
ROA not after:            Sat 06 Apr 2024 04:49:37 +0000
asID:                     211946
IP address blocks:        2a12:dd47:d200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:31:be:e1:06:65:26:fe:fe:00:ad:64:95:bf:77:45:dd:0e:78:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:44:37 2023 GMT
            Not After : Apr  6 04:49:37 2024 GMT
        Subject: CN=1A7B8FA24588E879D32C8401341FD8AE52BCF53D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:29:06:4d:f7:72:75:94:33:4e:02:55:bb:e2:
                    e9:f9:40:be:45:18:a8:57:d6:6a:fc:65:ec:13:7b:
                    f7:f4:8c:4b:ae:d7:1e:38:4f:0e:73:04:11:47:cd:
                    de:13:7e:f3:fb:68:9a:9e:bc:7c:eb:8f:9b:f3:5a:
                    f9:22:6b:ec:8e:e6:ca:6a:04:f2:a5:cc:de:16:e7:
                    65:ec:34:14:57:e9:ed:7e:a0:20:ce:fc:e2:c2:67:
                    20:52:bf:64:8a:41:bf:36:17:d4:c3:2f:18:f0:a3:
                    09:45:ed:04:a0:a6:ca:a2:4d:b3:02:54:37:dd:37:
                    fb:94:b0:89:ae:57:a8:c9:44:92:88:35:85:b8:5e:
                    71:b2:8c:a4:a0:27:d3:bb:40:8e:45:80:9c:47:0f:
                    02:ed:fd:a1:54:a2:4c:47:67:8f:17:35:43:07:31:
                    b9:06:77:3e:0d:64:ad:70:6d:7f:24:eb:4e:da:0d:
                    63:6b:b5:4a:d7:fd:3e:fe:c2:bd:0b:08:36:68:18:
                    18:48:bb:cc:3e:a9:cc:92:4a:db:93:22:37:22:84:
                    e1:6d:f3:b9:00:d2:53:41:fd:82:62:88:90:32:58:
                    9b:4d:25:46:c1:ce:17:7b:30:ac:ee:bf:96:df:25:
                    83:5a:bc:98:e5:86:37:84:38:c7:cd:56:4e:5c:57:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7B:8F:A2:45:88:E8:79:D3:2C:84:01:34:1F:D8:AE:52:BC:F5:3D
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a643230303a3a2f34302d3438203d3e20323131393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:36:c6:c1:9b:df:fd:4c:f5:9f:9a:38:94:55:c4:58:03:78:
         bb:7c:5a:da:5e:18:78:50:46:44:38:5e:ff:c8:9c:32:77:5d:
         c2:ea:74:44:65:80:ad:4d:cb:28:0d:f1:fc:f1:8c:3b:be:55:
         d0:76:1d:c5:de:68:8a:f2:35:7c:ce:0c:d8:84:56:29:63:9d:
         6d:c1:a1:50:cf:86:55:6e:d3:43:f3:74:1a:1b:dc:4f:eb:c2:
         36:88:bf:8b:07:0b:0e:54:50:46:cb:db:83:7e:c6:5d:d8:05:
         03:b9:1e:73:72:a8:bc:b5:06:fb:e2:79:b8:84:1a:0f:37:e9:
         70:45:bb:c3:d6:a7:89:cc:71:39:d9:1a:5b:33:6b:1f:02:38:
         65:8f:1d:5b:bc:8c:d6:6f:95:d1:3c:95:3d:e0:8b:4a:6e:75:
         f5:ea:54:f3:d6:99:0b:6e:ca:fc:cb:ec:46:d8:7e:20:3f:74:
         e8:c3:8f:19:84:ad:47:d6:36:9d:92:df:31:67:04:be:4b:91:
         a5:3d:5c:6b:9d:fe:f2:f6:ee:59:e9:5f:63:02:28:0f:b6:c4:
         ff:f8:df:70:b3:b0:0e:9e:61:3e:ab:a1:c7:e3:02:ce:7e:1e:
         80:01:4a:35:a7:59:3d:fc:9f:85:3a:96:e0:c6:a9:8a:f0:6f:
         05:93:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----