Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa
File:                     326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa (raw, json)
Hash identifier:          wsVWdu2koR1Hjq6VVxA5nEOiDJZQaHENgdjbX2yX5oA=
Subject key identifier:   38:42:50:28:DD:90:9B:32:14:49:B1:D5:96:E6:DE:6E:CA:C9:41:BA
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       7B9DE25324C1201AB703D6101CC73CBF829CCA06
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa
Signing time:             Sat 08 Apr 2023 03:25:50 +0000
ROA not before:           Sat 08 Apr 2023 03:20:50 +0000
ROA not after:            Sat 06 Apr 2024 03:25:50 +0000
asID:                     199471
IP address blocks:        2a13:c007:8012::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9d:e2:53:24:c1:20:1a:b7:03:d6:10:1c:c7:3c:bf:82:9c:ca:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:50 2023 GMT
            Not After : Apr  6 03:25:50 2024 GMT
        Subject: CN=38425028DD909B321449B1D596E6DE6ECAC941BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:e1:bc:30:92:69:fa:5d:96:95:af:5b:ac:
                    e6:f4:d1:ad:7c:67:2d:3b:44:b0:d4:e2:1d:cb:67:
                    f0:a9:96:c6:24:02:a2:03:ff:01:ab:b2:d0:67:ef:
                    e8:cd:de:d6:0d:7e:b2:95:2a:bc:49:33:15:1a:64:
                    a4:4a:3d:52:86:30:8a:84:1e:eb:d0:42:03:a8:a1:
                    0f:66:3d:81:91:ac:2e:31:05:ab:16:b9:2d:9d:c9:
                    48:6c:f5:43:1e:96:73:0b:cf:90:ad:66:8a:dc:c3:
                    08:24:80:60:e2:6c:c1:5b:6c:9e:59:f6:85:9f:20:
                    57:8e:17:fe:b3:81:e1:a1:e1:91:1e:1f:af:1f:78:
                    eb:94:07:cd:3f:ae:94:18:44:f0:0e:d9:4e:f4:94:
                    13:e6:2a:0a:01:44:e5:1c:91:22:b4:45:68:38:08:
                    f4:ed:e8:04:ba:c4:cb:7b:d9:3b:ee:6a:c7:7a:50:
                    9b:e0:4a:01:6c:67:7a:96:68:5e:7a:e1:a9:4d:6f:
                    3f:d5:73:b0:f5:04:48:19:10:e6:17:3f:65:18:3d:
                    18:ae:1e:7c:12:39:6a:a0:37:e3:16:01:e8:97:2a:
                    69:df:91:b8:74:28:8c:c0:aa:94:23:5c:ce:01:ac:
                    5b:f1:e5:40:9e:a5:78:ca:b1:b1:54:ee:3d:07:1c:
                    cf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:42:50:28:DD:90:9B:32:14:49:B1:D5:96:E6:DE:6E:CA:C9:41:BA
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8012::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:8a:5e:15:38:a2:c9:d2:b7:28:91:04:76:ba:97:b3:23:84:
         97:a5:04:ff:22:74:b2:85:5b:f9:73:fc:52:1d:1b:aa:95:3f:
         7e:63:be:c1:bd:e9:a8:0d:47:df:c6:80:dc:76:21:19:d2:f3:
         d1:68:c1:c1:4a:e3:aa:3a:48:fc:97:c7:2e:59:67:65:4a:9a:
         90:df:64:d8:5f:34:7c:e3:de:d8:b5:c2:53:53:86:03:54:26:
         d5:43:a1:ff:75:06:62:d6:e3:fd:b2:44:88:60:e2:62:18:09:
         64:d8:59:3d:c2:18:e4:29:f1:7e:1e:c7:ec:bb:ef:30:b1:c8:
         e2:a2:3e:09:ee:f1:8e:69:2f:fc:0d:b1:e0:11:24:10:71:19:
         b4:b6:a8:17:27:6d:01:49:cd:0a:54:cf:d5:92:8f:20:cc:b4:
         4e:30:06:f2:ee:b3:eb:b0:f2:fe:dd:29:56:6c:1d:60:9d:53:
         7c:af:58:8e:d1:0b:06:45:7d:9a:56:a7:5c:04:15:4b:00:79:
         aa:e6:aa:66:3a:dc:77:28:46:61:30:28:c9:af:33:cf:b5:06:
         c4:cc:2e:5f:19:71:a5:eb:ec:78:ab:4b:6f:5d:cc:d3:a5:65:
         7c:21:60:e8:a2:ce:34:58:e3:b5:19:f3:0a:da:08:c8:39:b0:
         2c:11:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----