Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383730303a3a2f34302d3438203d3e20323032313531.roa
File:                     326131333a633030373a383730303a3a2f34302d3438203d3e20323032313531.roa (raw, json)
Hash identifier:          oNT0XqCSTuI0iZDyOfgZM95Aat2woUD26Jl9eK0sJxs=
Subject key identifier:   8E:49:4A:F1:75:65:D5:2D:56:22:15:43:F2:CE:D3:F3:4F:8D:EC:0F
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       476AE9AD4D76E948958658DE88DAD57F83282D2A
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383730303a3a2f34302d3438203d3e20323032313531.roa
Signing time:             Sat 08 Apr 2023 09:22:04 +0000
ROA not before:           Sat 08 Apr 2023 09:17:04 +0000
ROA not after:            Sat 06 Apr 2024 09:22:04 +0000
asID:                     202151
IP address blocks:        2a13:c007:8700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6a:e9:ad:4d:76:e9:48:95:86:58:de:88:da:d5:7f:83:28:2d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:04 2023 GMT
            Not After : Apr  6 09:22:04 2024 GMT
        Subject: CN=8E494AF17565D52D56221543F2CED3F34F8DEC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:aa:65:0f:91:f9:83:d1:4c:2f:cb:4e:8b:
                    b4:bc:ac:a1:90:55:f9:1f:46:bf:03:7c:82:d8:9b:
                    7e:5b:05:23:a1:c7:66:ff:00:71:f4:40:85:66:b1:
                    bd:d1:55:8d:8b:8d:e2:80:c7:47:33:df:17:3b:00:
                    d9:7e:bf:90:4a:87:79:5a:d0:d2:7a:ea:5a:e5:c6:
                    f9:72:86:a9:49:04:b4:b1:73:9d:f6:4f:17:46:27:
                    c3:55:6f:41:c7:ea:a3:4e:87:e2:56:f0:58:ed:c3:
                    b4:77:ad:be:47:14:0d:ae:56:40:66:df:15:ce:fa:
                    6e:6a:90:11:7b:1f:1e:56:48:21:51:61:d0:d4:5d:
                    6d:3c:c5:b4:11:f4:48:4a:dc:b9:52:5a:10:8f:2f:
                    a0:9b:7c:9f:73:5e:88:0c:3c:70:1f:66:27:fa:5f:
                    68:e6:53:68:83:8e:a8:16:41:da:2f:e3:a5:da:bf:
                    76:78:38:c5:b9:88:ac:47:2d:f3:a2:3d:46:bf:66:
                    1b:02:77:fe:58:c8:3b:a8:42:5a:6d:5a:1f:2d:85:
                    eb:52:7f:87:43:38:35:c2:2e:23:fa:be:fa:f9:d9:
                    4e:ee:87:fb:40:af:4e:73:93:e9:9b:0c:92:2b:19:
                    44:38:58:76:04:f3:f5:2a:03:a8:12:23:6b:ad:86:
                    76:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:49:4A:F1:75:65:D5:2D:56:22:15:43:F2:CE:D3:F3:4F:8D:EC:0F
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383730303a3a2f34302d3438203d3e20323032313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:2d:f6:d3:b3:1c:7b:1a:3a:6b:ba:97:60:67:fe:77:d1:a4:
         35:96:a8:87:29:7f:19:82:83:bb:85:cb:c4:26:f6:f1:e9:22:
         1c:0b:84:7a:cf:0e:fa:03:80:73:d5:12:31:29:f8:2f:3f:94:
         7b:7f:96:25:c6:1d:68:e6:45:75:47:d3:e6:5c:aa:2a:d6:d9:
         3b:c8:3e:1a:bb:43:7a:16:75:39:ef:e6:07:56:c3:61:d7:a3:
         d0:9c:09:02:91:d7:46:75:e1:1d:21:0e:ed:6d:f2:ac:95:a4:
         08:12:55:c0:38:25:dd:02:af:89:ec:ec:25:1f:e4:c5:65:09:
         b3:d5:1e:bb:19:f8:94:66:b9:5e:b0:90:60:75:bc:f0:29:4a:
         db:a8:89:42:04:4c:e0:27:7b:17:b3:2e:88:19:36:c8:83:a5:
         86:9e:df:38:bd:a9:3c:bb:55:72:e8:06:9d:bb:fc:e9:65:e3:
         7a:a7:9f:4d:3b:f6:f0:44:f5:a3:d8:35:63:9d:ec:54:e3:a8:
         0f:c1:95:9c:47:02:35:dd:70:e4:d4:8a:d6:b3:dd:f5:9e:7a:
         d1:c0:0d:fe:4b:e0:b5:54:1f:c7:3f:1a:33:d9:3c:d7:17:ee:
         4f:09:34:bb:3f:92:0b:02:83:7b:06:69:75:a9:ae:2b:ab:13:
         09:44:d9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----