Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa
File:                     323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa (raw, json)
Hash identifier:          1531ZmVqDGfKpEyFQSzjUnv9WMH3EiAtQW1OyRLksSY=
Subject key identifier:   F7:28:B7:E0:BC:93:C0:37:C4:2A:10:3A:D3:23:29:9B:32:39:9F:60
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       2BCCAC39769E907FAF353EA5D196D3E2F08D891A
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa
Signing time:             Sat 08 Apr 2023 09:22:05 +0000
ROA not before:           Sat 08 Apr 2023 09:17:05 +0000
ROA not after:            Sat 06 Apr 2024 09:22:05 +0000
asID:                     51818
IP address blocks:        2001:7f8:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cc:ac:39:76:9e:90:7f:af:35:3e:a5:d1:96:d3:e2:f0:8d:89:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:05 2023 GMT
            Not After : Apr  6 09:22:05 2024 GMT
        Subject: CN=F728B7E0BC93C037C42A103AD323299B32399F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:85:67:5e:da:4c:84:b1:31:27:86:ad:ce:
                    d2:a2:3d:5d:9d:d9:86:a9:35:1f:bb:d9:2a:ed:26:
                    ed:f2:c0:2e:23:04:93:aa:c7:2e:5d:b5:3e:38:0a:
                    bf:fd:87:10:b5:78:ad:b0:fa:05:ba:11:25:06:38:
                    99:58:f5:3f:bd:8c:b9:73:b8:73:14:2c:f9:35:c6:
                    fe:ca:67:43:4c:80:6c:7c:c1:e2:f9:d9:6c:5b:e5:
                    01:8b:7f:a1:49:b9:3c:41:61:1b:36:82:c5:22:f1:
                    dd:07:a0:a7:4b:7d:9b:25:28:65:8d:de:eb:ab:f9:
                    40:14:e7:af:a7:f8:c1:b3:86:77:5d:51:14:37:e7:
                    ff:ff:a9:dd:2b:d2:e6:82:77:65:90:5b:40:06:c7:
                    a6:75:85:aa:d6:12:98:08:e6:2a:6b:a3:8a:93:a2:
                    c9:a0:5b:b4:8e:38:e9:92:79:08:53:ee:79:fe:7d:
                    09:db:49:a5:3c:d5:19:8d:8a:cf:b9:c7:c3:d3:f5:
                    fa:65:47:72:b1:19:ac:63:26:09:67:10:d8:f8:26:
                    ce:3c:62:c4:26:46:66:3a:8e:c5:ba:c8:96:c5:51:
                    5e:7a:8f:7d:b7:1d:da:8f:42:ac:43:e3:34:27:67:
                    9f:75:a9:a7:dd:78:b6:7e:6a:69:54:2c:8d:f9:46:
                    6b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:28:B7:E0:BC:93:C0:37:C4:2A:10:3A:D3:23:29:9B:32:39:9F:60
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7f8:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:b3:e9:63:cf:20:f5:46:f6:b5:19:d7:8f:23:4e:dd:a5:
         a3:d1:4c:53:d2:ac:8a:b1:d9:5a:9b:9f:e6:88:a4:c8:d5:6a:
         a0:22:56:6a:63:32:ee:b1:ab:67:b7:74:06:59:28:b0:9e:ed:
         b8:6d:c6:16:3c:33:3e:96:8e:0f:78:db:b6:69:aa:ab:84:c1:
         65:68:87:f3:f7:03:9d:94:1b:f1:35:e2:fe:66:f3:58:2e:48:
         67:17:7e:cb:20:b2:a9:61:bd:01:db:67:74:25:25:8e:e9:af:
         8b:ba:a1:cc:8d:e3:1a:b0:9d:86:99:e5:dd:c5:29:f3:e9:4a:
         ed:0b:16:eb:7e:ed:25:8b:c9:36:ca:f2:fb:64:fa:c3:e3:f3:
         e3:1d:d1:1d:aa:33:d5:c1:89:56:1d:86:ae:72:7e:1c:fa:9b:
         bf:dd:9c:46:7e:65:3c:d4:46:19:36:cd:78:96:97:9c:48:ad:
         c4:65:82:53:8e:a6:dc:f2:1b:1d:32:8f:12:69:d2:4d:ca:b2:
         cf:c4:22:61:b9:fb:95:ba:e2:72:e1:f2:67:86:fe:37:18:ce:
         6f:47:0b:1a:46:bf:cd:7a:d0:1d:98:ea:12:6f:d7:20:d7:9b:
         85:89:c9:34:58:88:94:19:36:59:39:c8:9d:2e:b4:6c:87:15:
         78:6e:13:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----