Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/7/323630323a666234343a3a2f34302d3430203d3e2031303132.roa
File:                     323630323a666234343a3a2f34302d3430203d3e2031303132.roa (raw, json)
Hash identifier:          sea6hTRCgP8b5pdTtNMvpiFmvqW4qR67sH5YMoh93pI=
Subject key identifier:   C1:37:2B:76:C9:A4:E0:14:33:33:7C:32:24:E4:8E:A8:55:CC:45:C8
Certificate issuer:       /CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
Certificate serial:       3B9C44D0BB1F7F1E1C236A437B50D19B2B057600
Authority key identifier: 21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0
Authority info access:    rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer
Subject info access:      rsync://rpki.co/repo/August/7/323630323a666234343a3a2f34302d3430203d3e2031303132.roa
Signing time:             Sat 08 Apr 2023 09:22:01 +0000
ROA not before:           Sat 08 Apr 2023 09:17:01 +0000
ROA not after:            Sat 06 Apr 2024 09:22:01 +0000
asID:                     1012
IP address blocks:        2602:fb44::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9c:44:d0:bb:1f:7f:1e:1c:23:6a:43:7b:50:d1:9b:2b:05:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
        Validity
            Not Before: Apr  8 09:17:01 2023 GMT
            Not After : Apr  6 09:22:01 2024 GMT
        Subject: CN=C1372B76C9A4E01433337C3224E48EA855CC45C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:94:c0:f1:6c:30:ec:36:4e:f3:22:24:2c:ea:
                    a5:df:21:fc:50:d8:33:14:42:f3:01:fd:9b:6b:6b:
                    49:df:4f:7a:4a:ce:78:49:bb:2e:f9:0b:6b:f6:01:
                    60:2e:d0:c4:7b:21:0e:d8:49:99:c5:fb:08:ca:9c:
                    c5:21:02:e1:4e:a8:f3:e7:39:96:1a:39:0a:0d:1f:
                    97:d3:92:c9:48:be:df:1a:e8:a3:90:e4:bb:46:b8:
                    48:8e:54:c9:24:11:93:82:02:4d:34:91:3c:3b:e0:
                    e4:b1:d8:06:28:f0:6b:21:4e:bb:3d:17:cd:0f:51:
                    16:e5:94:f6:d7:a4:06:43:cf:96:62:4d:61:1a:22:
                    84:b9:2a:b6:fc:5e:14:b8:eb:e2:65:b7:cf:17:d4:
                    34:b9:50:b4:7c:22:17:2a:0f:28:88:ab:5b:c9:f9:
                    6f:84:96:72:36:d7:1e:97:04:e9:f8:be:6f:58:6c:
                    7b:d7:c0:6f:f8:03:72:38:62:de:6a:94:0f:ee:8c:
                    51:4a:1d:62:17:11:6c:07:4a:51:1b:01:ad:25:f8:
                    33:af:4a:88:3a:9f:14:40:6a:ed:36:55:a5:e6:b7:
                    95:0d:39:12:2a:de:17:89:c4:ae:b0:76:14:92:bb:
                    1e:e7:22:a4:75:50:2d:c9:d8:58:e2:af:ef:d5:1d:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:37:2B:76:C9:A4:E0:14:33:33:7C:32:24:E4:8E:A8:55:CC:45:C8
            X509v3 Authority Key Identifier:
                keyid:21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/7/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/7/323630323a666234343a3a2f34302d3430203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb44::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:69:80:d6:44:5d:ca:e1:0d:fb:34:6b:c3:e1:93:1d:55:04:
         01:7a:f1:da:2f:eb:de:9e:b9:99:36:6a:73:74:0b:10:1e:dd:
         c3:9b:f8:84:8b:ce:ba:1c:b0:6c:4b:f4:b7:92:19:84:b8:20:
         23:38:85:0b:1a:a5:ca:67:b8:0e:75:32:81:a6:3f:ab:8c:65:
         a7:73:7c:0c:22:00:d8:7f:27:6c:c0:63:28:13:3c:c3:1a:f8:
         59:cf:01:b5:01:a7:ad:d4:96:12:bb:ea:4f:20:86:4b:a9:42:
         47:38:dc:df:d3:6b:b3:0f:5d:e0:aa:9e:a2:04:da:b3:57:ce:
         90:37:f1:27:b8:a1:a1:ad:a9:11:13:ba:1b:93:bd:26:06:1d:
         bc:f5:6d:87:3a:6a:d3:db:ad:6d:65:37:72:8f:4c:e1:2c:2c:
         5c:5a:99:f4:61:59:4e:fc:4f:f0:9f:2d:98:bf:6f:bc:c5:e3:
         26:01:ca:a3:57:40:e7:66:dc:53:22:46:c7:53:c0:cb:78:aa:
         b1:61:5b:0b:84:b1:ad:88:11:b3:72:b4:a3:51:e3:b9:37:bb:
         05:51:74:d6:b1:91:05:c2:63:43:77:58:da:a0:53:b8:01:7d:
         2d:91:aa:12:7f:e3:34:0b:83:4f:23:87:64:5b:25:d0:11:f8:
         86:57:15:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----