Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383130303a3a2f34302d3438203d3e20313939323431.roa
File:                     326131333a633030373a383130303a3a2f34302d3438203d3e20313939323431.roa (raw, json)
Hash identifier:          b1vK4SqwFFxMP60r2OrT2H71RxcxpDkcGgK0Sv8QNnc=
Subject key identifier:   21:3F:D0:40:95:86:43:CB:DB:A1:9B:06:56:E5:41:95:9C:3F:11:1D
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       2E7E8B27E6CB304E2ECBDCF5594EB1C48FB8C1D4
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383130303a3a2f34302d3438203d3e20313939323431.roa
Signing time:             Sat 08 Apr 2023 09:22:02 +0000
ROA not before:           Sat 08 Apr 2023 09:17:02 +0000
ROA not after:            Sat 06 Apr 2024 09:22:02 +0000
asID:                     199241
IP address blocks:        2a13:c007:8100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7e:8b:27:e6:cb:30:4e:2e:cb:dc:f5:59:4e:b1:c4:8f:b8:c1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:02 2023 GMT
            Not After : Apr  6 09:22:02 2024 GMT
        Subject: CN=213FD040958643CBDBA19B0656E541959C3F111D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:66:ba:46:f1:f2:ed:e2:76:5a:45:89:95:01:
                    9a:b8:34:0a:88:d1:0e:13:28:e9:8a:bd:bb:94:65:
                    02:8b:87:01:4b:7a:4b:d7:a6:e0:1a:6a:bd:f5:ab:
                    93:5f:55:2d:85:04:07:20:b8:4c:26:65:c8:93:ac:
                    af:9c:3f:40:52:8d:9f:d2:5c:e7:7c:83:d6:dd:03:
                    ff:2b:6f:b8:a2:a5:c4:d3:03:8a:81:f3:48:be:11:
                    80:a1:69:f0:41:a5:6c:68:8d:b0:72:33:54:03:36:
                    94:bc:36:d1:93:82:4b:1c:9a:3a:ed:b0:fb:7b:d1:
                    33:54:d4:49:bf:b0:33:92:ec:e5:e0:22:92:61:61:
                    88:a8:48:ac:6b:fd:d4:76:41:9e:7b:26:5a:ae:0d:
                    98:3e:03:3c:ac:74:2a:ce:8f:30:9c:c8:ef:6d:17:
                    09:2f:5d:00:33:83:45:64:f7:71:3f:30:d6:0e:2c:
                    3c:24:20:e4:14:50:34:3c:a7:b5:ec:5e:5c:63:70:
                    53:75:2c:a9:1c:e7:fc:f8:68:cf:bc:97:a1:74:6e:
                    2f:1e:be:f4:c8:e8:8b:1a:c5:9f:f4:1a:f9:62:38:
                    63:4b:93:13:c3:c1:a8:e1:fd:d4:d8:d4:48:00:9a:
                    e2:63:3c:95:b5:45:9b:df:2b:2d:9f:59:48:aa:e1:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3F:D0:40:95:86:43:CB:DB:A1:9B:06:56:E5:41:95:9C:3F:11:1D
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383130303a3a2f34302d3438203d3e20313939323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:ec:63:f7:c0:2a:0f:41:01:46:b8:25:a0:b8:89:0d:85:
         bb:89:c0:c7:90:80:09:87:b7:3d:61:b9:2e:03:92:9e:93:33:
         20:26:c9:65:92:cc:74:e6:23:42:7c:10:ad:25:6e:cd:6a:50:
         57:f2:ea:39:b4:7c:2f:dd:ca:a3:b5:d1:76:ca:d9:67:5a:59:
         70:d8:c0:4a:21:e6:96:88:40:47:6b:b1:cd:e4:b1:fa:4b:f7:
         28:61:0f:2b:fd:47:fa:52:ee:66:54:06:c9:c9:68:72:ff:ab:
         0a:bf:c5:c8:32:e0:df:63:bf:17:18:a4:2a:92:6f:23:ba:95:
         7c:3c:6f:be:50:bd:dc:71:41:34:2d:80:d7:b7:5f:d3:9c:92:
         e9:e9:71:e8:09:0f:b1:01:a6:8e:20:eb:f8:4e:ed:1d:cf:37:
         4a:de:77:d1:1d:2b:c6:a7:2c:ea:05:ee:68:35:78:3c:95:77:
         47:24:d1:36:03:94:8b:35:67:85:80:4e:a6:e3:21:01:e4:de:
         7a:f3:3b:0d:f8:21:90:0c:33:94:4c:63:f6:e8:05:8c:0b:48:
         9f:1a:7b:21:5d:1e:59:df:73:b5:08:20:54:33:05:07:b3:c8:
         d5:24:03:98:8d:f7:5b:60:75:f3:99:65:db:0b:7b:79:7a:1b:
         20:43:c2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----