Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383031613a3a2f34382d3438203d3e20313939303532.roa
File:                     326131333a633030373a383031613a3a2f34382d3438203d3e20313939303532.roa (raw, json)
Hash identifier:          7VcFhFD999SfzzhTWW4pldPP1P8HP+zjnbEnm+j9mc8=
Subject key identifier:   35:7F:0F:48:DD:E0:89:19:E7:94:D8:3D:87:E5:B3:8B:37:7C:5C:04
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       1F93C740F4BB3943C8AC87A8A6944017DD9E6801
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031613a3a2f34382d3438203d3e20313939303532.roa
Signing time:             Sat 08 Apr 2023 03:25:52 +0000
ROA not before:           Sat 08 Apr 2023 03:20:52 +0000
ROA not after:            Sat 06 Apr 2024 03:25:52 +0000
asID:                     199052
IP address blocks:        2a13:c007:801a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:93:c7:40:f4:bb:39:43:c8:ac:87:a8:a6:94:40:17:dd:9e:68:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:52 2023 GMT
            Not After : Apr  6 03:25:52 2024 GMT
        Subject: CN=357F0F48DDE08919E794D83D87E5B38B377C5C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:f2:9a:45:da:f9:31:58:24:32:f3:70:fb:
                    f3:58:fb:e8:34:55:d3:2b:57:6d:f9:6f:54:be:a9:
                    dd:a1:18:6f:5b:9e:83:4f:01:9b:ea:c7:02:e5:48:
                    18:a1:b7:af:94:3d:3a:38:45:96:ea:6d:f4:88:ba:
                    d5:49:d9:73:8c:69:7a:c8:f9:54:7e:ab:fb:71:75:
                    38:b4:92:bd:15:85:e7:98:3e:5d:4d:80:f9:24:14:
                    07:8b:81:08:48:9e:54:6d:78:cb:ac:f1:35:77:6b:
                    4c:c7:a2:b0:0c:1c:3c:fc:ff:dd:09:44:bb:3b:ba:
                    1e:7c:b7:bc:01:4f:dd:4d:e7:50:e6:a1:9e:08:67:
                    b3:d3:bc:40:e2:a4:c1:06:3c:1e:47:4d:b9:de:2a:
                    78:4a:f1:4d:86:b5:f0:c2:5a:4a:64:a1:65:1e:fc:
                    e1:8e:61:5c:f6:0c:84:78:c3:a8:2f:ba:f0:28:23:
                    d6:c3:32:cd:3a:c1:9a:09:84:04:9c:ea:31:3b:1e:
                    97:d6:13:83:e2:0d:ed:37:8c:4b:f9:c8:27:26:af:
                    df:a7:ec:5a:b4:d2:9f:a2:96:e8:56:e3:13:f0:54:
                    a5:20:b7:02:77:2b:a3:8d:36:a9:ee:e0:f5:97:c9:
                    55:9e:42:80:5b:30:7c:8b:ef:d2:51:3d:9b:60:e0:
                    ce:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7F:0F:48:DD:E0:89:19:E7:94:D8:3D:87:E5:B3:8B:37:7C:5C:04
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031613a3a2f34382d3438203d3e20313939303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:801a::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:9d:60:bc:c4:62:04:5f:b1:4b:cd:d2:76:cd:77:27:42:b8:
         e2:a8:d6:a9:d4:d0:1e:8e:18:e5:0a:b0:6c:6c:2d:8f:d0:7f:
         f4:fd:bd:0f:9c:3f:54:bb:51:57:0a:8e:05:1b:fe:0e:dc:e6:
         a3:48:1b:5a:7b:8a:06:9b:4f:7b:69:da:49:b8:54:b4:93:c2:
         f4:a6:30:0c:c1:bd:bc:60:48:17:c9:8c:59:5a:26:4b:7e:d0:
         85:3e:0b:18:9e:6a:47:ea:b0:46:06:2e:f2:90:39:79:65:1d:
         77:18:99:5e:6f:ca:ed:96:c4:70:07:69:6f:15:c4:47:2f:37:
         f2:a8:c3:41:2e:bb:14:4d:36:42:b4:ed:bf:c1:4d:ac:11:ea:
         f1:d6:6e:76:de:bd:6c:e3:40:91:10:be:08:7d:fd:8e:0e:0d:
         2f:d1:90:76:2b:97:e7:b5:c3:61:ec:2c:df:f8:cb:e6:ad:92:
         93:7f:75:8d:ee:95:65:a5:9e:75:21:af:94:e0:4d:b5:fe:b5:
         5c:71:f1:7d:cd:8b:f0:17:70:f9:bc:80:fe:19:fb:5f:35:e3:
         26:86:78:ad:38:b2:c6:bd:07:b9:0a:de:c7:a6:09:dc:d6:eb:
         83:ce:93:cf:0b:82:ad:42:9b:c0:50:88:9b:b0:c0:93:77:57:
         f5:1f:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----