Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030303a3a2f33322d3332203d3e20393435.roa
File:                     326131333a633030303a3a2f33322d3332203d3e20393435.roa (raw, json)
Hash identifier:          3as0G/F/XPhAyFiYNjezFZVwJoe70NW3yp/9IA9Ez2g=
Subject key identifier:   6D:EC:64:EC:01:96:46:86:70:00:D0:76:EC:1E:27:91:42:89:1E:4B
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       528A2EB97E3E1E4BB13D64854289ADB269D521ED
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030303a3a2f33322d3332203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 03:25:54 +0000
ROA not before:           Sat 08 Apr 2023 03:20:54 +0000
ROA not after:            Sat 06 Apr 2024 03:25:54 +0000
asID:                     945
IP address blocks:        2a13:c000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8a:2e:b9:7e:3e:1e:4b:b1:3d:64:85:42:89:ad:b2:69:d5:21:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:54 2023 GMT
            Not After : Apr  6 03:25:54 2024 GMT
        Subject: CN=6DEC64EC019646867000D076EC1E279142891E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:34:3e:ca:9d:26:35:73:8a:fd:65:6f:14:
                    42:f7:35:ff:1c:20:5d:be:ae:95:f3:1a:c7:e9:7c:
                    66:4c:43:1e:6e:4c:d0:c3:38:6b:0b:77:78:3f:d5:
                    36:22:d9:a2:fc:ef:e6:1b:c9:72:65:8c:b4:47:85:
                    b4:69:50:42:ca:64:09:99:29:93:2a:de:47:7e:c1:
                    35:5a:ff:33:e3:3a:89:a4:e9:c7:9c:d5:46:64:62:
                    e0:47:32:bc:2d:40:8b:8a:de:a2:06:1b:99:4e:e3:
                    43:55:11:6c:c1:a5:f2:46:e3:38:43:a4:9f:eb:73:
                    1d:3f:77:a7:7a:c9:3f:7d:18:41:d0:6d:b5:84:9d:
                    5d:d6:b4:91:f6:eb:4a:07:5e:ed:eb:54:e4:39:d7:
                    c5:a8:75:fe:55:d8:88:8c:fc:f7:e1:2a:7d:52:35:
                    ac:dd:81:81:fd:cd:f8:6b:86:fe:95:54:74:a6:c9:
                    03:1f:60:7d:15:7d:c3:4c:ba:b2:e9:e0:9b:21:ed:
                    42:68:ca:17:31:82:d1:b8:f9:d2:7a:43:8a:04:d5:
                    83:27:09:5c:84:a0:de:23:92:64:aa:9b:20:d1:70:
                    73:92:91:e7:65:ca:78:3b:98:2e:0e:32:b5:80:6f:
                    6c:e8:9a:79:6d:d8:5c:b4:ae:92:30:7e:a0:30:8f:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EC:64:EC:01:96:46:86:70:00:D0:76:EC:1E:27:91:42:89:1E:4B
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030303a3a2f33322d3332203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:cd:65:4e:20:3d:a7:69:f0:5b:5b:b2:d8:dd:3a:37:e7:c7:
         d0:1b:17:b4:b9:14:66:9c:3f:3a:5a:8f:fa:90:7d:9b:a8:fe:
         fa:60:90:a2:ac:ef:c6:77:c7:9e:da:47:1c:ad:80:e4:13:10:
         c2:d3:3f:03:90:c8:49:5a:56:a4:30:61:c1:f9:e6:f8:71:21:
         08:3d:99:81:c1:2b:33:3e:4e:df:83:da:95:65:52:97:8a:ee:
         18:f9:e5:2a:47:f8:ab:ef:7c:a5:4a:ce:a1:b9:d7:63:cf:37:
         93:47:3d:c5:1d:40:c5:b0:ce:3d:e6:8e:e6:7b:24:d9:6f:b8:
         45:b1:fa:34:7b:00:dc:ff:fb:4f:ae:0f:d0:cf:b7:32:6a:24:
         59:e5:68:df:02:f5:46:a9:1e:98:9e:0a:c9:4a:23:2c:f4:8f:
         c1:04:7f:aa:6c:16:4f:30:5e:9f:f8:cd:1c:1e:fa:cb:b4:d8:
         9d:36:62:bb:55:e9:a3:ff:f4:59:98:d3:fd:7d:6d:df:b8:89:
         07:93:cb:0f:32:cf:cc:e0:5a:ea:c6:d3:40:7a:cb:8d:62:6c:
         89:8a:bb:72:a3:d3:cf:e2:3e:de:98:15:73:94:23:9f:17:c6:
         8a:45:bd:a2:86:e7:f2:02:57:f3:fe:2f:c3:25:23:36:80:1d:
         e4:b1:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----