Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa
File:                     326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa (raw, json)
Hash identifier:          MAdWCtapRjSgwBDEfPGONTI8Z184W0SBEdGYCwt6jzk=
Subject key identifier:   A4:E8:0D:9E:4D:F2:22:4B:9E:F7:AC:6B:AD:F5:E5:34:52:29:8E:78
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       5E26A89039810E48004765052737A49B9BD050B6
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa
Signing time:             Sat 08 Apr 2023 03:25:53 +0000
ROA not before:           Sat 08 Apr 2023 03:20:53 +0000
ROA not after:            Sat 06 Apr 2024 03:25:53 +0000
asID:                     199037
IP address blocks:        2a13:c007:8019::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:26:a8:90:39:81:0e:48:00:47:65:05:27:37:a4:9b:9b:d0:50:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:53 2023 GMT
            Not After : Apr  6 03:25:53 2024 GMT
        Subject: CN=A4E80D9E4DF2224B9EF7AC6BADF5E53452298E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:f1:07:da:e6:d0:e0:6f:5d:b0:51:4f:b9:
                    62:a9:a7:5b:78:62:44:4a:91:33:5d:83:e7:95:fa:
                    bb:c5:8a:20:57:af:32:d7:57:46:88:5b:5b:6d:a0:
                    2e:7d:05:cb:35:4d:73:6f:10:e6:12:53:0d:6e:b3:
                    61:9c:ef:a3:84:f0:99:33:9d:c3:52:ac:2e:7c:a7:
                    b6:6b:5c:b9:51:3e:9e:4a:28:82:3d:f1:e4:4d:de:
                    8e:81:2a:91:2f:8d:ca:17:3c:6e:cd:da:ce:5e:c9:
                    9d:12:cd:48:fa:19:c6:80:7c:a5:dc:96:b2:e6:a4:
                    1b:e4:ee:6b:91:79:f4:13:b3:e5:8f:19:bd:04:fb:
                    c5:e7:e7:90:9a:9e:a5:27:f9:c7:ca:d5:b0:13:e0:
                    51:36:94:ca:9c:59:b2:0f:09:05:ce:79:2f:04:d8:
                    f4:3a:0b:c7:28:c6:c3:59:01:cd:19:da:16:13:04:
                    97:6a:04:c8:9a:2e:bf:35:79:28:5d:90:d9:be:d4:
                    f3:d2:69:36:b4:43:fb:4b:4e:dd:9d:6a:99:f5:7e:
                    7c:f3:ec:c4:a3:b7:9b:0f:b5:08:f4:23:06:37:19:
                    7c:8c:db:35:1b:34:f7:33:0b:34:02:89:d6:e3:cd:
                    55:ce:0d:84:e0:98:06:d6:71:25:a3:06:0a:d8:59:
                    0c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E8:0D:9E:4D:F2:22:4B:9E:F7:AC:6B:AD:F5:E5:34:52:29:8E:78
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8019::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:6a:10:d2:47:e5:5b:03:3b:c7:e7:98:a5:33:bb:d2:dd:4f:
         97:e7:75:44:23:ff:49:0d:72:44:96:d2:c7:7d:ea:56:09:4a:
         28:8e:3c:ad:8e:06:62:ba:f6:da:b8:2b:f7:5c:a3:4b:d8:7e:
         05:c6:a9:ff:4c:83:72:36:d3:f8:a0:d3:0d:dc:39:34:74:10:
         bc:16:84:79:a8:40:56:79:58:16:4e:49:72:4d:00:69:e9:db:
         7f:04:4a:41:d3:d5:e7:24:49:0c:b1:b5:50:84:fb:a5:e7:ba:
         c5:83:ce:04:0a:d6:1e:ae:d3:6d:83:94:6e:ce:10:db:04:40:
         b1:c6:a2:72:06:c5:74:a4:17:28:30:fd:05:7a:f3:bc:ef:75:
         21:8d:b8:dd:64:9c:2c:e6:6e:5d:e8:d4:02:6f:01:7a:a6:39:
         02:b9:7f:87:e8:16:71:c7:2d:e5:61:3d:90:df:b7:04:96:f9:
         85:08:fd:00:c4:1f:f3:1f:1d:c4:a2:97:6f:fc:0c:1f:d5:08:
         a5:7c:4a:b9:c7:96:be:5f:b6:a0:31:0e:28:7f:40:31:7f:07:
         06:c6:b2:a8:54:07:a6:4e:4e:65:72:fc:a1:30:5e:91:50:68:
         4a:8b:c0:8a:a2:ae:0e:df:10:08:e1:c2:09:a0:60:1e:92:89:
         7d:55:5a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----