Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/7/323630323a666234343a3230303a3a2f34302d3430203d3e2031303132.roa
File:                     323630323a666234343a3230303a3a2f34302d3430203d3e2031303132.roa (raw, json)
Hash identifier:          WFlgSLIJspNx+ZMNzDCnUUmf5lFW4hP6YDmEPJmb6w0=
Subject key identifier:   63:4E:AA:DB:3D:43:D9:5C:1B:C8:4E:66:28:7C:9D:24:08:C6:E4:04
Certificate issuer:       /CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
Certificate serial:       246882458EA052A32F058B5D919A7151C236276A
Authority key identifier: 21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0
Authority info access:    rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer
Subject info access:      rsync://rpki.co/repo/August/7/323630323a666234343a3230303a3a2f34302d3430203d3e2031303132.roa
Signing time:             Sat 08 Apr 2023 09:22:01 +0000
ROA not before:           Sat 08 Apr 2023 09:17:01 +0000
ROA not after:            Sat 06 Apr 2024 09:22:01 +0000
asID:                     1012
IP address blocks:        2602:fb44:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:68:82:45:8e:a0:52:a3:2f:05:8b:5d:91:9a:71:51:c2:36:27:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
        Validity
            Not Before: Apr  8 09:17:01 2023 GMT
            Not After : Apr  6 09:22:01 2024 GMT
        Subject: CN=634EAADB3D43D95C1BC84E66287C9D2408C6E404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:d6:27:df:41:37:44:77:2a:5f:d8:e9:8c:
                    e0:ca:87:8f:73:d1:14:82:26:e6:b5:a9:91:a5:1c:
                    11:c3:56:49:14:17:0f:5a:a9:15:76:c6:7f:af:f1:
                    b6:c3:80:03:e8:75:51:e1:2e:06:0d:dd:74:b4:09:
                    ba:bb:db:6d:1d:fe:11:e4:19:e1:f4:2b:34:9e:3a:
                    8c:8d:96:aa:6a:4d:67:ff:0b:2c:59:ed:3a:8f:0b:
                    d6:37:80:ee:71:a4:91:ab:2f:7c:c8:bf:2c:80:e4:
                    4b:82:02:fd:64:dd:a4:b9:03:64:38:66:68:8a:8c:
                    75:2b:17:d9:10:b9:1b:ad:7d:ac:7c:ab:03:7a:ce:
                    20:28:13:29:06:ae:c8:06:bd:7c:5d:1d:32:03:b7:
                    81:6a:ec:4e:58:09:45:ec:70:cf:27:fd:25:bf:fa:
                    2c:fd:f4:20:c2:09:b9:d1:0b:02:a3:ae:e4:b7:88:
                    d7:42:2e:3d:04:89:8c:0f:a6:e9:41:d2:3a:75:82:
                    ec:55:e1:3b:3f:d6:54:04:34:0d:26:15:ac:f5:20:
                    a9:28:bd:19:33:2c:5b:31:b3:13:9d:44:d8:f1:3f:
                    be:09:b2:72:9f:6b:3b:6d:ee:2a:59:ae:1d:cc:3f:
                    82:7e:7a:aa:86:62:8a:28:8f:b0:ea:e9:b3:68:1a:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4E:AA:DB:3D:43:D9:5C:1B:C8:4E:66:28:7C:9D:24:08:C6:E4:04
            X509v3 Authority Key Identifier:
                keyid:21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/7/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/7/323630323a666234343a3230303a3a2f34302d3430203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb44:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:54:c2:49:7e:fa:5e:d2:e3:75:bc:3d:eb:f2:94:88:47:82:
         eb:4c:5d:5a:5d:20:96:7b:11:09:f3:53:62:85:d7:cc:81:55:
         95:b3:da:1e:84:1d:6a:41:6c:1e:5d:32:db:8b:66:a6:ff:83:
         4c:2c:9c:11:31:4f:d4:cf:b5:7e:68:af:2d:0a:3e:32:00:f5:
         df:a0:32:fc:3c:c4:cd:8b:39:2f:fd:f4:22:b0:e6:bd:7e:a9:
         52:f1:76:e8:d8:6b:6c:31:05:8a:4b:c9:b7:97:47:89:06:c6:
         2c:22:30:7c:2e:9b:3f:66:91:16:f0:2b:56:d3:a4:68:2c:40:
         7e:e3:d5:42:2a:1e:54:a4:21:c5:1c:31:10:2e:b1:b6:a8:46:
         b5:d9:52:c5:c5:a3:c0:0a:94:0c:39:74:e4:6e:46:27:07:37:
         48:ec:1a:7a:4d:0c:4d:ae:ff:b1:64:01:3f:a4:63:99:98:8b:
         8d:ec:e8:63:b2:52:9f:a4:23:c0:22:0d:75:84:b9:25:eb:3b:
         a7:6c:d0:f7:a1:c8:0a:58:ae:9f:a1:71:06:53:74:09:ff:f8:
         fc:eb:8b:c1:ab:3d:62:e7:f4:21:09:2e:5c:46:62:59:59:7a:
         1e:27:ff:1d:c9:f3:87:08:4c:88:c3:1e:9e:a5:1b:6d:67:07:
         44:42:4c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:30 2023 by rpki-client on console-fra.rpki-client.org