Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a666330303a3a2f33382d3338203d3e20323030383237.roa
File:                     326131323a646434373a666330303a3a2f33382d3338203d3e20323030383237.roa (raw, json)
Hash identifier:          2bdlzfwHv98Vc2k0Soiy23d1xTe5MIlg8YfCO2Al9vQ=
Subject key identifier:   04:6B:AF:AB:72:C4:C7:23:02:AB:22:06:1B:0B:91:99:2E:11:68:86
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       0FEE79608A3E13829F2E75B9B316C6A24B6B4A38
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a666330303a3a2f33382d3338203d3e20323030383237.roa
Signing time:             Sat 08 Apr 2023 05:23:02 +0000
ROA not before:           Sat 08 Apr 2023 05:18:02 +0000
ROA not after:            Sat 06 Apr 2024 05:23:02 +0000
asID:                     200827
IP address blocks:        2a12:dd47:fc00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ee:79:60:8a:3e:13:82:9f:2e:75:b9:b3:16:c6:a2:4b:6b:4a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 05:18:02 2023 GMT
            Not After : Apr  6 05:23:02 2024 GMT
        Subject: CN=046BAFAB72C4C72302AB22061B0B91992E116886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:ad:73:6f:d3:2a:8a:ac:40:86:db:12:79:
                    a3:77:61:47:07:c4:64:95:bd:10:26:2a:53:25:f8:
                    13:41:78:b6:9f:2f:63:39:24:35:d7:20:42:51:73:
                    df:ee:da:0a:57:c6:24:cd:60:91:c9:4b:d3:a5:5f:
                    d7:0e:1f:84:4b:23:d4:a6:74:bf:70:18:98:57:1c:
                    83:82:0c:e1:35:d3:9b:b5:86:67:0e:90:94:a1:62:
                    98:2d:4c:74:a5:09:e6:f4:54:24:84:03:93:b0:db:
                    bb:9c:53:17:67:dc:6b:9b:4d:f5:47:5a:bc:8d:fa:
                    28:13:c6:06:6d:d6:f7:bc:a3:c9:21:e1:04:50:9d:
                    75:f2:63:6c:4b:a1:45:98:d4:db:a6:35:27:f3:5c:
                    c9:32:c9:47:a8:36:be:fe:f2:23:18:e2:39:5a:8d:
                    85:88:30:28:f5:f5:ed:46:ea:b8:55:89:9b:13:19:
                    22:3a:c1:fe:23:5b:c5:fb:73:0d:6f:66:b2:6e:bd:
                    d4:0f:ed:f3:85:ea:7a:bb:87:79:20:a1:47:0a:4a:
                    e8:19:59:c6:77:46:84:4d:a3:89:a8:c0:b5:db:10:
                    54:e1:27:ed:a2:34:cb:94:a3:3d:77:c0:49:e0:9e:
                    59:76:0f:32:bf:06:81:dc:0a:de:1d:6d:40:24:52:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6B:AF:AB:72:C4:C7:23:02:AB:22:06:1B:0B:91:99:2E:11:68:86
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a666330303a3a2f33382d3338203d3e20323030383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         42:46:6a:e3:de:5e:7f:71:d0:75:8c:43:d2:e0:5f:a2:a6:24:
         a8:a1:a3:b2:01:ae:bf:44:85:5e:0f:6b:cf:4a:47:36:37:62:
         57:f3:cb:7b:4c:67:a9:bf:83:a9:f8:02:92:ee:d7:f5:6c:6a:
         a2:96:35:8a:4f:8e:93:2e:df:36:7e:07:b5:c9:73:76:ce:eb:
         35:43:87:77:f7:c1:2a:1b:62:9a:ac:f4:bf:e0:81:69:30:c2:
         f3:08:53:bc:9f:2a:58:5a:db:04:31:76:71:4d:2d:62:89:49:
         fe:6c:31:cc:42:98:39:58:c0:b4:a8:04:21:8a:58:c2:06:be:
         ea:ca:3c:36:b9:51:e6:d5:d5:b0:37:f4:f8:f8:bc:49:f4:71:
         d5:af:86:46:01:13:c6:1d:cd:59:d9:46:8f:fb:ba:7b:07:c1:
         af:50:8e:34:02:61:b2:7d:f5:b1:65:3e:44:e6:ee:77:3f:e5:
         e5:6a:78:b2:93:a8:36:bc:c6:83:2d:18:7d:cc:64:16:15:5b:
         75:df:6d:65:64:6d:ae:d5:19:49:80:e3:af:67:02:87:85:16:
         eb:9d:9a:39:f9:ea:7b:20:75:ea:dd:c4:7c:dc:35:02:e2:15:
         55:bd:1e:61:f8:22:d7:45:32:ad:f5:67:6d:1b:cc:ad:f5:d1:
         3f:66:39:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----