Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030303a3a2f33322d3332203d3e20393435.roa
File:                     326131333a633030303a3a2f33322d3332203d3e20393435.roa (raw, json)
Hash identifier:          jqqp3REeNfe/20J/8y96MQf3rEAdM7iUDGrH5PMBzhY=
Subject key identifier:   61:53:20:70:B4:37:52:39:CC:DC:1D:0C:8E:76:1D:27:9A:6C:12:B0
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       45017D11C22ECA8C9765A3A1B0E3879664906604
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030303a3a2f33322d3332203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 09:22:06 +0000
ROA not before:           Sat 08 Apr 2023 09:17:06 +0000
ROA not after:            Sat 06 Apr 2024 09:22:06 +0000
asID:                     945
IP address blocks:        2a13:c000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:01:7d:11:c2:2e:ca:8c:97:65:a3:a1:b0:e3:87:96:64:90:66:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:06 2023 GMT
            Not After : Apr  6 09:22:06 2024 GMT
        Subject: CN=61532070B4375239CCDC1D0C8E761D279A6C12B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1c:d1:50:36:5f:7f:ee:57:d0:ba:9f:9d:9a:
                    e3:7b:ce:2f:33:ab:03:e4:f0:be:53:6e:06:da:21:
                    1d:d3:89:2d:9a:06:61:58:7a:1e:f5:db:87:75:ee:
                    aa:d5:71:5f:ca:1f:49:6c:e2:2f:68:72:87:2c:57:
                    a6:fc:f3:a0:89:7b:8f:50:c7:d7:28:13:e4:36:b7:
                    8f:e7:b6:e1:d9:25:4e:7e:fb:66:78:39:e1:6a:76:
                    ac:b3:f1:67:4a:7d:c0:ee:a1:aa:10:0d:c0:e0:b0:
                    56:37:4d:81:3d:ae:2e:ee:04:0f:ef:7d:8d:d2:68:
                    9f:fe:29:fa:cb:36:05:35:e4:7d:9a:0e:5d:38:c9:
                    f6:d1:0e:6a:e1:b7:da:d9:71:85:82:ee:86:1b:3f:
                    3e:a7:3e:98:08:20:4f:b0:31:a0:d7:01:65:07:f7:
                    75:59:9a:2c:90:89:e3:f8:19:60:91:da:79:59:f6:
                    76:65:67:39:d2:a2:1e:f2:a6:b8:88:bb:de:b4:d2:
                    58:85:6b:f7:55:b1:dd:7c:14:6b:71:79:f9:9a:46:
                    94:59:d3:8a:a6:4e:4a:97:70:18:36:78:5b:65:cf:
                    49:57:69:b1:a8:e1:f3:4c:d0:c3:ae:6b:93:4f:75:
                    26:7c:e4:4c:08:5d:dc:0a:32:cc:b5:25:97:1a:9f:
                    6a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:53:20:70:B4:37:52:39:CC:DC:1D:0C:8E:76:1D:27:9A:6C:12:B0
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030303a3a2f33322d3332203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:96:fe:a6:13:11:21:77:b4:76:41:83:1d:52:31:01:2d:61:
         fc:5c:8e:34:10:b3:cf:7b:12:6a:ef:31:d3:99:98:99:dc:e6:
         9c:99:3c:5d:d9:64:ff:0e:8e:fb:4d:e5:21:8b:6e:5c:6e:11:
         09:90:e0:6e:7a:23:47:47:1b:ab:4e:40:3a:82:5c:1e:c1:47:
         e1:32:8e:e4:67:5c:45:55:c6:21:88:a8:64:86:92:55:c3:b7:
         ae:d1:45:4e:4c:df:3d:5c:9f:fd:1e:81:7e:8d:22:ff:53:b6:
         e9:20:35:69:53:63:08:49:fe:c6:22:3d:f2:dc:d0:a4:f9:c9:
         45:92:89:13:a4:ff:3f:bf:bd:d3:f0:17:d8:36:9a:a8:17:b3:
         47:a5:52:ad:ee:43:c0:b5:ce:ed:2e:2c:af:76:c2:b8:e3:f1:
         d1:25:38:d4:7a:9c:b7:27:07:6f:d2:f4:19:7f:12:74:0f:1b:
         37:66:44:cb:70:e2:74:5f:1d:40:78:7b:33:ef:90:5b:63:f1:
         e9:87:cf:7c:21:98:92:57:24:d4:19:28:c1:f5:74:64:d2:05:
         0d:97:e3:e5:94:69:46:c2:b9:c3:12:e9:35:0c:01:a5:e3:51:
         54:fc:c7:35:19:27:1d:a7:c6:cc:5b:4a:dd:97:4e:37:71:e3:
         fc:8c:1a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----