Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa
File:                     326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          jgFN6kH2lSJ3xUp9hetl3H7D/5wgezCfFroaIuVElvM=
Subject key identifier:   99:57:58:A0:4C:11:56:51:D3:F8:EB:52:BA:12:C6:C6:F2:94:11:8E
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       45544837640FD7E60E0A374100EC753557FC6418
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 03:25:51 +0000
ROA not before:           Sat 08 Apr 2023 03:20:51 +0000
ROA not after:            Sat 06 Apr 2024 03:25:51 +0000
asID:                     945
IP address blocks:        2a13:c000:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:54:48:37:64:0f:d7:e6:0e:0a:37:41:00:ec:75:35:57:fc:64:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:51 2023 GMT
            Not After : Apr  6 03:25:51 2024 GMT
        Subject: CN=995758A04C115651D3F8EB52BA12C6C6F294118E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1c:a2:bd:66:bc:89:4c:ba:50:f3:40:28:7b:
                    1a:2d:c0:5d:2d:70:b4:62:30:2e:c5:00:18:97:b5:
                    4e:1c:ae:7b:b1:ea:ec:97:d2:91:32:93:88:13:d6:
                    0b:ba:88:9e:fd:20:2a:93:45:51:63:0b:eb:0b:03:
                    08:f9:4a:7f:40:83:df:60:fc:4c:37:3c:32:de:47:
                    7c:a5:32:fa:d8:18:f9:87:ff:59:d4:ed:e0:97:db:
                    ca:84:9c:54:36:47:5d:1d:79:db:7c:0c:72:78:1a:
                    66:6c:e6:bc:d7:c2:49:52:83:3e:62:60:15:b7:2d:
                    73:a0:f8:bb:7a:2b:e0:bc:0f:52:d9:30:c4:50:09:
                    d1:b8:2c:63:54:36:e9:19:37:29:eb:33:1e:11:42:
                    44:0f:f9:10:23:aa:7a:99:83:2a:35:94:58:bc:e6:
                    0c:33:73:36:2e:6d:cf:97:89:ce:16:73:a7:04:ac:
                    93:79:f1:5b:93:35:dd:b3:99:db:12:2f:09:de:ec:
                    e8:1d:e7:48:40:0c:c1:55:ba:cb:fe:ab:ec:d0:0b:
                    90:71:a7:ba:37:74:13:d1:69:70:63:cc:ac:2f:16:
                    fc:2d:72:4a:ec:18:0c:a8:fe:0c:fd:bc:af:4f:98:
                    1b:89:53:0f:22:21:e9:6b:b1:22:9e:d1:51:a0:eb:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:57:58:A0:4C:11:56:51:D3:F8:EB:52:BA:12:C6:C6:F2:94:11:8E
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         72:70:85:a0:97:31:c5:0a:60:78:27:ee:ac:46:70:58:d6:f5:
         7f:9a:68:c5:1e:27:33:aa:b4:9e:b2:44:3b:94:c9:46:d1:9a:
         23:a5:02:c1:a5:04:d4:f3:28:8d:ef:13:58:0a:b5:4f:53:02:
         15:ee:b2:9b:02:98:e4:58:15:1b:ac:76:36:78:b7:6e:25:22:
         25:50:8d:48:65:58:20:a5:1b:18:be:58:e9:e7:57:90:f7:0e:
         95:3b:a9:98:d1:43:28:07:10:51:01:d9:dd:b8:6c:e0:a0:25:
         08:ba:b1:dd:48:2c:66:b6:68:a8:df:bf:0d:46:75:76:67:ec:
         df:76:e8:ec:ee:86:94:75:21:b1:cd:f6:6d:dc:81:4c:28:25:
         c4:a9:3e:b0:94:aa:fe:fe:82:56:fb:ab:4d:1a:ea:25:91:b8:
         26:58:a6:58:f6:41:ce:6f:47:44:97:38:81:de:08:7b:bf:60:
         a0:f6:ed:a9:73:51:b4:c2:47:22:ac:89:9f:6c:a6:17:12:0d:
         ca:1d:77:e6:f7:dd:4e:2f:9e:e7:a0:e8:12:23:a0:f4:b0:1f:
         37:46:45:c3:f4:83:8c:9f:d8:cd:bf:a4:00:24:c7:14:ce:54:
         64:32:dd:5f:11:18:9f:c2:9e:73:29:94:6c:f1:14:6c:cd:82:
         0e:b6:93:63
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIURVRIN2QP1+YOCjdBAOx1NVf8ZBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjU1Y2NkZmE1ZmM4MWIzNDJjOTg4ODc3MmRiMzFlNmM0
ZmRiMjYyMjAeFw0yMzA0MDgwMzIwNTFaFw0yNDA0MDYwMzI1NTFaMDMxMTAvBgNV
BAMTKDk5NTc1OEEwNEMxMTU2NTFEM0Y4RUI1MkJBMTJDNkM2RjI5NDExOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnHKK9ZryJTLpQ80AoexotwF0t
cLRiMC7FABiXtU4crnux6uyX0pEyk4gT1gu6iJ79ICqTRVFjC+sLAwj5Sn9Ag99g
/Ew3PDLeR3ylMvrYGPmH/1nU7eCX28qEnFQ2R10dedt8DHJ4GmZs5rzXwklSgz5i
YBW3LXOg+Lt6K+C8D1LZMMRQCdG4LGNUNukZNynrMx4RQkQP+RAjqnqZgyo1lFi8
5gwzczYubc+Xic4Wc6cErJN58VuTNd2zmdsSLwne7Ogd50hADMFVusv+q+zQC5Bx
p7o3dBPRaXBjzKwvFvwtckrsGAyo/gz9vK9PmBuJUw8iIelrsSKe0VGg61SBAgMB
AAGjggHMMIIByDAdBgNVHQ4EFgQUmVdYoEwRVlHT+OtSuhLGxvKUEY4wHwYDVR0j
BBgwFoAU9VzN+l/IGzQsmIh3LbMebE/bJiIwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvMTQvRjU1Q0NE
RkE1RkM4MUIzNDJDOTg4ODc3MkRCMzFFNkM0RkRCMjYyMi5jcmwwZAYIKwYBBQUH
AQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzlWek4tbF9JR3pRc21JaDNMYk1lYkVfYkppSS5jZXIwdwYI
KwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3luYzovL3Jwa2kuY28vcmVwby9I
WVNQLzE0LzMyNjEzMTMzM2E2MzMwMzAzMDNhMzEzMDMwMzAzYTNhMmYzMzM2MmQz
MzM2MjAzZDNlMjAzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqE8AAEDANBgkqhkiG9w0BAQsF
AAOCAQEAcnCFoJcxxQpgeCfurEZwWNb1f5poxR4nM6q0nrJEO5TJRtGaI6UCwaUE
1PMoje8TWAq1T1MCFe6ymwKY5FgVG6x2Nni3biUiJVCNSGVYIKUbGL5Y6edXkPcO
lTupmNFDKAcQUQHZ3bhs4KAlCLqx3UgsZrZoqN+/DUZ1dmfs33bo7O6GlHUhsc32
bdyBTCglxKk+sJSq/v6CVvurTRrqJZG4JlimWPZBzm9HRJc4gd4Ie79goPbtqXNR
tMJHIqyJn2ymFxINyh135vfdTi+e56DoEiOg9LAfN0ZFw/SDjJ/Yzb+kACTHFM5U
ZDLdXxEYn8KecymUbPEUbM2CDraTYw==
-----END CERTIFICATE-----