Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa
File:                     326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa (raw, json)
Hash identifier:          D0ncu+Kn6vlCWHBtp5ZzHtERTl8WMcVBtKzh383p9GE=
Subject key identifier:   42:01:5D:EA:00:54:F4:A2:DD:C3:3F:E5:3E:E6:57:41:D6:5B:A5:03
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       2D54334FC1FE6C3B1FE9D21B4416AAF94253AD60
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa
Signing time:             Sat 08 Apr 2023 09:22:06 +0000
ROA not before:           Sat 08 Apr 2023 09:17:06 +0000
ROA not after:            Sat 06 Apr 2024 09:22:06 +0000
asID:                     199266
IP address blocks:        2a13:c007:8014::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:54:33:4f:c1:fe:6c:3b:1f:e9:d2:1b:44:16:aa:f9:42:53:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:06 2023 GMT
            Not After : Apr  6 09:22:06 2024 GMT
        Subject: CN=42015DEA0054F4A2DDC33FE53EE65741D65BA503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:ea:2c:19:46:f3:60:6b:bc:60:32:f0:98:
                    4a:6d:94:00:f7:f2:dc:5f:bd:d5:4e:70:9c:18:d9:
                    0d:05:9e:0b:32:b2:e9:f5:43:63:24:53:9f:46:55:
                    90:80:42:0b:6c:a3:c3:bd:83:4c:a9:e5:58:e8:e2:
                    05:92:5b:98:0b:f3:d9:af:5b:74:34:34:50:b3:ae:
                    d0:de:c0:48:40:85:8e:07:28:d0:76:f7:b9:56:29:
                    6f:f7:36:4d:08:5e:7f:29:42:e0:63:79:d3:17:6e:
                    5f:24:33:61:5c:08:4b:95:ec:7b:a5:42:76:42:5c:
                    4b:e6:4a:9c:dc:ef:03:5b:21:27:b6:92:c5:a9:0c:
                    66:c0:39:d6:a7:0b:6e:c7:00:17:27:af:b3:22:cf:
                    2f:da:6a:ae:8c:d9:35:a3:7c:8f:1a:27:92:d3:30:
                    40:ba:1b:11:df:49:09:82:58:7a:e9:d5:17:ce:2b:
                    9b:2a:d0:b5:c9:b9:56:58:0b:d8:f5:09:8d:a1:0b:
                    84:1f:24:ec:ee:63:d8:6d:80:20:24:72:96:cf:2f:
                    55:a4:1a:e3:2e:d7:99:a5:b2:a5:c5:b4:10:07:c8:
                    73:99:48:e1:cd:39:4d:21:c8:ad:aa:95:9e:0c:51:
                    ec:1d:62:00:b0:ef:50:4d:f2:9a:96:8b:b8:bb:02:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:01:5D:EA:00:54:F4:A2:DD:C3:3F:E5:3E:E6:57:41:D6:5B:A5:03
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8014::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:2d:30:cc:08:20:a7:8c:b4:fa:9e:9f:61:97:b3:ab:07:be:
         2f:74:df:8f:34:3d:e3:35:96:e3:ab:3e:10:c3:b1:18:ff:d5:
         29:f3:24:38:88:ba:a6:ab:8a:e5:0a:b2:dc:3e:cc:79:91:20:
         e9:6d:2b:68:53:2b:f6:13:a7:e8:05:2b:95:a5:42:44:81:4a:
         07:e4:5e:bd:98:93:89:b5:55:97:8f:eb:a3:aa:75:ba:d1:fd:
         46:c7:94:7a:50:00:4b:12:b8:ff:74:16:17:bb:aa:fa:36:e6:
         d0:53:e4:26:58:2c:12:9f:c5:54:fd:78:cf:7b:b3:d0:62:69:
         4a:5e:c9:9f:2c:30:0c:fa:fc:72:53:f7:5f:a8:53:3c:24:7b:
         8c:bb:54:78:e4:4c:f7:18:b3:92:40:1d:13:62:53:1a:b3:63:
         be:c5:78:b3:e4:f1:35:da:58:4d:58:81:10:4b:ab:9b:30:91:
         a3:bf:5d:d2:d3:7b:ff:30:40:75:2e:48:2e:0a:74:70:16:59:
         0e:01:8f:7d:df:c1:8f:fd:e7:f8:45:f2:ec:6b:b1:bf:9b:c1:
         c3:6a:8c:23:d1:cc:84:2c:95:96:66:08:16:c5:f4:8d:46:3b:
         32:af:57:d9:dd:bf:e7:2a:da:d3:92:36:dc:a7:b9:bf:d9:f5:
         21:cc:35:c6
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgIULVQzT8H+bDsf6dIbRBaq+UJTrWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0MzcxQURFMTNEQThFOTZCOTdBRkEwQ0YzREYzMDk0
QUFCMERCMDAeFw0yMzA0MDgwOTE3MDZaFw0yNDA0MDYwOTIyMDZaMDMxMTAvBgNV
BAMTKDQyMDE1REVBMDA1NEY0QTJEREMzM0ZFNTNFRTY1NzQxRDY1QkE1MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeUeosGUbzYGu8YDLwmEptlAD3
8txfvdVOcJwY2Q0Fngsysun1Q2MkU59GVZCAQgtso8O9g0yp5Vjo4gWSW5gL89mv
W3Q0NFCzrtDewEhAhY4HKNB297lWKW/3Nk0IXn8pQuBjedMXbl8kM2FcCEuV7Hul
QnZCXEvmSpzc7wNbISe2ksWpDGbAOdanC27HABcnr7Mizy/aaq6M2TWjfI8aJ5LT
MEC6GxHfSQmCWHrp1RfOK5sq0LXJuVZYC9j1CY2hC4QfJOzuY9htgCAkcpbPL1Wk
GuMu15mlsqXFtBAHyHOZSOHNOU0hyK2qlZ4MUewdYgCw71BN8pqWi7i7Aq0hAgMB
AAGjggHWMIIB0jAdBgNVHQ4EFgQUQgFd6gBU9KLdwz/lPuZXQdZbpQMwHwYDVR0j
BBgwFoAUDUNxreE9qOlrl6+gzz3zCUqrDbAwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC85LzBENDM3
MUFERTEzREE4RTk2Qjk3QUZBMENGM0RGMzA5NEFBQjBEQjAuY3JsMGUGCCsGAQUF
BwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC8x
NC8wRDQzNzFBREUxM0RBOEU5NkI5N0FGQTBDRjNERjMwOTRBQUIwREIwLmNlcjB+
BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5jby9yZXBv
L0F1Z3VzdC85LzMyNjEzMTMzM2E2MzMwMzAzNzNhMzgzMDMxMzQzYTNhMmYzNDM4
MmQzNDM4MjAzZDNlMjAzMTM5MzkzMjM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE8AHgBQwDQYJ
KoZIhvcNAQELBQADggEBAIctMMwIIKeMtPqen2GXs6sHvi903480PeM1luOrPhDD
sRj/1SnzJDiIuqariuUKstw+zHmRIOltK2hTK/YTp+gFK5WlQkSBSgfkXr2Yk4m1
VZeP66OqdbrR/UbHlHpQAEsSuP90Fhe7qvo25tBT5CZYLBKfxVT9eM97s9BiaUpe
yZ8sMAz6/HJT91+oUzwke4y7VHjkTPcYs5JAHRNiUxqzY77FeLPk8TXaWE1YgRBL
q5swkaO/XdLTe/8wQHUuSC4KdHAWWQ4Bj33fwY/95/hF8uxrsb+bwcNqjCPRzIQs
lZZmCBbF9I1GOzKvV9ndv+cq2tOSNtynub/Z9SHMNcY=
-----END CERTIFICATE-----