Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383037303a3a2f34342d3434203d3e203231373338.roa
File:                     326131333a633030373a383037303a3a2f34342d3434203d3e203231373338.roa (raw, json)
Hash identifier:          bF14krCXl5Ju2Udim99yZYLgj5aUUBc9dxb7O/8bybo=
Subject key identifier:   47:EF:CD:2E:B5:62:30:6E:D5:27:89:1A:69:49:2F:9C:24:C2:93:AE
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       401F5FB8794FC39C1F8651260AEFF1C28F462FCC
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383037303a3a2f34342d3434203d3e203231373338.roa
Signing time:             Sat 08 Apr 2023 09:22:03 +0000
ROA not before:           Sat 08 Apr 2023 09:17:03 +0000
ROA not after:            Sat 06 Apr 2024 09:22:03 +0000
asID:                     21738
IP address blocks:        2a13:c007:8070::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1f:5f:b8:79:4f:c3:9c:1f:86:51:26:0a:ef:f1:c2:8f:46:2f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:03 2023 GMT
            Not After : Apr  6 09:22:03 2024 GMT
        Subject: CN=47EFCD2EB562306ED527891A69492F9C24C293AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:7b:ad:ef:0c:db:09:e9:f6:b2:67:50:ff:
                    55:1a:44:5d:e3:5c:71:09:53:82:de:d1:4a:2d:65:
                    49:9f:36:6a:38:ca:5a:89:07:51:b1:53:f9:15:95:
                    eb:d3:86:d3:6b:b7:0d:b6:b8:d4:80:ce:cf:4f:03:
                    c1:2d:39:58:ea:89:1a:84:71:1a:37:80:28:d3:17:
                    6f:58:2e:02:02:60:fa:1e:87:aa:6f:db:0e:65:bb:
                    ec:08:56:90:10:35:9b:29:b6:5e:e3:7f:53:d8:a3:
                    87:c0:06:81:32:c8:1e:1b:c1:3a:13:ad:9a:84:2f:
                    13:30:9d:19:6f:3d:75:09:4f:bc:a0:4b:76:15:7f:
                    ca:7c:8f:bd:a1:23:a9:41:62:f8:4d:a6:6f:2f:bc:
                    a8:a9:10:f1:e7:c7:9c:43:ea:b0:a3:b7:c6:ab:e4:
                    c4:16:1f:a5:57:24:dc:71:17:e7:f0:aa:fd:32:24:
                    2a:e8:a5:fd:dd:87:d3:bf:6c:12:d9:c1:95:8b:64:
                    7d:90:4f:ec:90:29:4c:c1:b2:1a:f7:aa:ef:e4:0e:
                    4d:e2:13:c3:70:40:79:0e:fd:cd:20:42:7b:64:cc:
                    ca:ee:42:8e:a9:df:bf:8d:23:ce:63:64:7d:d8:ec:
                    e5:66:46:0a:34:33:f4:e1:9b:56:49:5f:f7:ba:a1:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EF:CD:2E:B5:62:30:6E:D5:27:89:1A:69:49:2F:9C:24:C2:93:AE
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383037303a3a2f34342d3434203d3e203231373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8070::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:fb:6a:37:64:7d:c3:8d:00:a3:a7:df:e2:a5:e6:14:f2:88:
         74:bb:17:8b:02:8f:b1:e1:d4:c6:c8:b5:14:e3:a9:14:ae:24:
         03:28:ce:fe:1f:1f:a8:03:43:30:fd:71:68:ea:eb:bf:03:10:
         5b:90:65:44:1b:32:fe:3d:0c:f1:f2:2a:e5:66:9b:5b:b9:01:
         92:0f:cf:9f:3a:36:49:4f:f9:5e:b6:b6:5c:e8:b0:bc:e4:86:
         37:b6:73:36:e7:72:f6:c5:e6:1c:70:66:37:a4:a2:41:4e:9f:
         19:94:97:b5:68:1a:3f:28:77:b9:9d:47:e5:dd:18:0c:cb:5d:
         f6:05:b3:c2:e7:04:4a:d2:6a:bc:16:19:ae:07:d4:38:60:e6:
         16:b9:7e:d1:1b:a7:70:f3:9f:47:33:57:09:c8:50:70:ba:b1:
         93:ae:5c:65:b4:7e:4e:b3:bc:e9:a3:a1:31:49:ab:b5:55:a9:
         51:eb:db:40:73:c5:d1:cd:7f:b1:17:32:38:d6:8f:b6:53:9d:
         03:fa:1e:93:a5:00:90:4a:e2:de:bd:59:80:5b:f3:2e:98:f1:
         88:f4:19:7e:1c:d5:b2:fe:51:c8:61:e6:58:1e:47:1d:5f:40:
         06:77:93:68:05:02:19:ec:97:a6:2c:7a:16:c5:b5:20:a9:d3:
         51:4a:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----