Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030313a3a2f33322d3332203d3e20393435.roa
File:                     326131333a633030313a3a2f33322d3332203d3e20393435.roa (raw, json)
Hash identifier:          B6CqLXi0KdJ9maRPk1zykPVI4n9lJaVJaEL512FZhtE=
Subject key identifier:   C6:DC:28:95:21:A9:A7:7C:A2:02:7B:74:0C:58:FD:7A:5A:13:E5:FE
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       47BE1C4CAE36DD1801D28C592646B12B5C995DBA
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030313a3a2f33322d3332203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 03:25:52 +0000
ROA not before:           Sat 08 Apr 2023 03:20:52 +0000
ROA not after:            Sat 06 Apr 2024 03:25:52 +0000
asID:                     945
IP address blocks:        2a13:c001::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:be:1c:4c:ae:36:dd:18:01:d2:8c:59:26:46:b1:2b:5c:99:5d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:52 2023 GMT
            Not After : Apr  6 03:25:52 2024 GMT
        Subject: CN=C6DC289521A9A77CA2027B740C58FD7A5A13E5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:2e:28:e3:88:23:d7:78:e1:49:06:68:09:
                    43:e5:71:09:e9:10:db:d2:08:02:15:af:6d:9c:f2:
                    4a:62:4a:bf:b5:d9:c1:41:e2:f2:58:fd:6e:5b:4f:
                    38:12:e5:e7:95:c7:d1:a2:9e:87:1c:f4:c4:22:6d:
                    de:8b:13:45:0f:07:16:77:9d:40:6d:55:c8:db:b9:
                    4b:ea:22:27:b7:08:fc:38:09:c1:11:41:e7:5a:18:
                    f1:7d:be:47:e7:91:ef:7e:19:96:eb:bc:56:d7:f3:
                    f7:0e:aa:d3:9d:a3:8c:2c:e3:1d:c5:e1:1f:9b:dd:
                    60:d4:85:45:97:f4:dc:93:f2:63:93:d2:d8:85:9a:
                    99:af:75:7b:42:85:06:3f:25:aa:d4:bd:20:84:72:
                    24:7a:66:8c:a6:d3:62:57:f7:7a:1a:d0:44:51:27:
                    7b:66:47:f0:98:c5:a8:38:a2:48:16:93:28:69:c0:
                    94:8f:50:22:fb:9b:15:cc:b1:06:c8:0a:6a:bc:31:
                    7e:2d:a9:99:20:86:2e:50:57:ed:26:e2:e0:e6:71:
                    e0:af:1e:bc:a9:8c:fe:6b:d2:ab:34:26:53:2a:30:
                    41:39:6d:d8:d0:5c:02:ff:ac:4d:f5:fd:67:01:d1:
                    64:6e:c3:db:67:63:4e:60:53:b7:9e:3b:fe:ff:85:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DC:28:95:21:A9:A7:7C:A2:02:7B:74:0C:58:FD:7A:5A:13:E5:FE
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030313a3a2f33322d3332203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c001::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:70:02:b8:4a:e5:02:12:4a:e7:65:c1:79:71:4a:68:aa:87:
         c4:d7:cf:8c:e3:86:97:f9:39:bc:5a:fa:67:a1:aa:50:f0:d5:
         c7:4a:b7:85:21:22:6c:3a:1f:e2:55:21:81:eb:41:a0:88:b0:
         36:df:d8:c6:c0:90:b8:3e:3e:b0:b8:13:0e:90:cf:15:ae:f8:
         4d:9d:27:40:53:be:40:4c:4c:8f:c8:f2:89:1f:82:b4:c5:0a:
         ba:c2:27:76:4e:4e:3b:f3:77:e6:88:60:be:f8:b6:1d:ff:bb:
         cc:a3:cb:c6:e6:b7:0e:c3:a9:10:5b:70:11:6a:d8:df:8d:fa:
         dd:c9:cc:28:89:b3:24:4e:68:74:a0:52:f4:a0:35:56:8b:c4:
         96:db:46:55:1a:08:44:58:31:45:00:20:a8:e0:ea:07:4f:22:
         b3:59:ff:af:43:1b:dd:12:1f:f0:84:98:f2:7b:64:a3:5c:c6:
         b2:0f:5a:d1:d6:58:71:02:62:85:12:70:23:14:3b:79:8b:02:
         d2:82:56:8b:34:ef:49:cf:7b:b5:5d:54:4e:d1:13:07:56:4a:
         66:7d:72:9f:6f:f8:0a:2a:9c:1c:c1:17:f8:aa:71:b7:fb:95:
         c0:c2:b3:5d:53:35:1c:a5:eb:68:fd:d9:80:77:99:f4:18:15:
         a0:50:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----