Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383062303a3a2f34342d3434203d3e20313939313833.roa
File:                     326131333a633030373a383062303a3a2f34342d3434203d3e20313939313833.roa (raw, json)
Hash identifier:          x6NxA1yOUw8pRGLypigkJ/GpAzfannDIeXadtEoogjs=
Subject key identifier:   13:9A:09:A7:04:C3:6A:13:B0:4B:B4:5A:18:53:CE:85:F2:0B:D6:B2
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       39C09F204DC6959D5E975FA1723DFE16367D08CD
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383062303a3a2f34342d3434203d3e20313939313833.roa
Signing time:             Sat 08 Apr 2023 09:22:03 +0000
ROA not before:           Sat 08 Apr 2023 09:17:03 +0000
ROA not after:            Sat 06 Apr 2024 09:22:03 +0000
asID:                     199183
IP address blocks:        2a13:c007:80b0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c0:9f:20:4d:c6:95:9d:5e:97:5f:a1:72:3d:fe:16:36:7d:08:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:03 2023 GMT
            Not After : Apr  6 09:22:03 2024 GMT
        Subject: CN=139A09A704C36A13B04BB45A1853CE85F20BD6B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:ce:44:bc:7a:d9:d0:51:ba:bf:a3:0e:b5:
                    4c:d6:6f:f2:98:73:ea:a5:2e:14:f7:b0:1f:60:03:
                    fd:34:85:4c:cb:d5:f9:b3:f6:ec:df:f4:0f:e1:7e:
                    44:9c:47:a6:4a:59:85:42:28:df:a4:d9:5a:cc:ca:
                    c5:76:dc:1b:14:d2:ff:8f:54:4c:2c:79:f9:f3:8b:
                    b8:2c:03:ce:05:52:dc:05:58:69:9a:c2:d4:f4:a1:
                    23:f6:d9:f2:24:59:8c:c5:f5:dd:f8:6a:1f:dc:46:
                    d3:1c:66:d9:ca:ce:b8:e9:64:4b:42:ce:d2:46:79:
                    13:ca:3d:98:85:f1:a7:f0:fd:26:b8:e6:da:59:75:
                    79:0b:7d:d0:01:56:35:ad:a7:58:11:ed:66:e9:27:
                    2a:fa:69:8c:3f:38:7e:bd:27:e3:c0:8d:46:61:15:
                    c1:70:5a:6b:c0:d8:aa:f6:d7:11:40:f6:53:97:23:
                    77:73:be:67:5b:c4:4b:3b:60:1e:39:8d:dd:73:4a:
                    7f:97:14:92:f1:cb:a8:45:7e:95:5e:46:94:d8:3a:
                    f4:25:12:82:ae:ba:bf:5c:76:8f:cd:ab:2c:20:7b:
                    b9:5d:06:e0:e1:52:bd:70:61:8d:7a:2a:ee:f9:d0:
                    5b:77:9b:2b:a0:52:93:f1:59:cb:c8:72:cb:5a:87:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9A:09:A7:04:C3:6A:13:B0:4B:B4:5A:18:53:CE:85:F2:0B:D6:B2
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383062303a3a2f34342d3434203d3e20313939313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:80b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:2e:ec:46:5a:1c:c2:6d:6b:75:0b:ca:9e:14:ff:63:26:d5:
         e5:dd:6b:10:94:9b:cb:b5:2c:4b:83:b5:51:89:fb:3f:28:20:
         cf:53:ef:96:54:8b:b2:1c:ef:c3:2d:dd:b6:bb:0e:89:e2:48:
         32:d9:85:46:93:2d:22:0e:60:45:90:2c:37:aa:f7:d0:b1:05:
         53:16:d7:df:a1:6b:6d:0e:4c:a5:11:93:aa:c6:5e:1f:82:71:
         5d:89:63:64:3f:67:46:d2:cd:fa:21:5f:59:35:ce:de:56:82:
         bf:67:04:b5:7b:2f:9a:27:55:9c:eb:a4:3d:32:50:6f:66:7b:
         fe:a8:a6:b6:79:23:c3:29:7c:27:9d:68:03:a7:03:d7:20:a9:
         6a:12:64:c6:de:bf:5d:48:99:36:f8:1d:c1:6b:25:3d:60:75:
         56:0d:4c:25:c1:31:56:43:84:71:5a:76:1a:44:2a:be:07:99:
         46:c6:94:9e:25:52:c8:e2:67:f6:4f:6f:b1:c8:e4:91:0e:48:
         81:5f:45:5d:fe:45:83:db:e4:50:56:1b:e2:54:b6:bd:74:79:
         97:ee:06:69:fb:3d:ad:59:92:37:9e:94:5f:0f:6a:39:c2:e7:
         54:43:d6:ff:3f:44:af:3b:df:71:cc:70:a3:2a:16:b5:fc:29:
         40:2c:92:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----