Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa
File:                     326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa (raw, json)
Hash identifier:          cMbyfzlsb+V0SdI0PXuxmAsrI5gnuBfe9xgQJFJ5gL0=
Subject key identifier:   D2:B0:09:90:82:C5:98:D1:C2:6A:FE:79:F7:F3:3E:8E:6A:87:C1:35
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       217344F205AA825216B28B09D86B21FB79923432
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa
Signing time:             Sat 08 Apr 2023 03:25:53 +0000
ROA not before:           Sat 08 Apr 2023 03:20:53 +0000
ROA not after:            Sat 06 Apr 2024 03:25:53 +0000
asID:                     199108
IP address blocks:        2a13:c007:801b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:73:44:f2:05:aa:82:52:16:b2:8b:09:d8:6b:21:fb:79:92:34:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:53 2023 GMT
            Not After : Apr  6 03:25:53 2024 GMT
        Subject: CN=D2B0099082C598D1C26AFE79F7F33E8E6A87C135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:09:fe:d9:08:a2:7f:9d:9b:15:43:f7:be:13:
                    2f:98:5d:0b:41:9a:0b:01:b9:7f:b1:82:12:a4:8f:
                    ef:0c:f5:3a:ce:e6:dc:b0:94:58:cc:6a:f1:1d:ac:
                    a7:e2:63:73:53:a9:01:f6:ba:95:aa:72:6c:91:6f:
                    93:f3:a7:5d:4c:ee:66:95:cd:7c:e1:8d:85:3c:7f:
                    6e:e2:29:59:6d:24:35:c0:c8:e1:3f:89:81:30:ba:
                    98:13:fc:64:ec:3f:c0:4b:f7:7a:aa:6d:69:86:4f:
                    ce:2c:7d:91:38:87:41:ab:11:22:6f:e6:26:c2:17:
                    40:ef:1c:7d:c9:62:c2:c0:68:35:b2:18:a3:83:2c:
                    9e:55:3e:9d:73:74:0e:2b:ee:b6:ee:65:7e:2a:3f:
                    60:11:58:5d:73:55:94:36:c8:ac:c6:4e:68:81:76:
                    53:3b:8c:12:22:59:84:fb:22:09:e2:1b:d3:02:d5:
                    93:5c:31:69:ee:f2:e4:fe:5b:40:56:9d:95:e1:b2:
                    4b:b7:b0:3e:13:02:65:eb:91:98:63:c9:b1:65:cd:
                    e9:49:7b:54:cc:b2:e0:29:f6:83:3c:27:67:cf:0d:
                    55:c8:76:4a:46:dd:a8:43:31:b6:67:7e:81:b9:22:
                    80:b8:62:61:4d:8f:ef:8d:dc:1f:2f:ca:68:78:66:
                    89:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B0:09:90:82:C5:98:D1:C2:6A:FE:79:F7:F3:3E:8E:6A:87:C1:35
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:801b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:1a:66:25:97:ab:cb:0a:4a:3a:d7:7f:fe:c3:61:14:b0:
         4b:b2:c0:af:cc:89:a8:96:98:5c:dc:1e:e6:1e:20:55:c4:d7:
         83:d0:3d:63:a0:28:db:bf:e1:65:4f:37:c0:65:05:b7:00:16:
         64:e4:ed:ce:7f:d8:4d:b2:88:e4:80:da:2c:72:e2:32:1d:a6:
         9f:02:ab:12:8c:3a:88:ff:54:c8:55:05:3b:00:42:b1:f3:00:
         8e:75:21:12:04:d8:b9:12:63:4b:65:32:e1:ce:73:bb:f6:28:
         af:99:88:ab:4c:98:40:7b:d1:0b:91:a4:7e:9e:38:cc:2e:0b:
         c3:ff:f5:36:a0:f8:07:53:02:da:f5:f0:38:da:16:4e:ef:4c:
         c4:9c:08:5e:60:7b:cd:e2:20:b6:fb:aa:fd:c3:d1:9e:38:e2:
         72:66:6c:f1:72:4d:db:73:51:89:24:5a:ff:fa:a8:8c:6e:88:
         88:9a:b1:fb:d8:e4:6f:d9:66:ac:4a:54:06:b7:a1:2c:21:85:
         73:fd:fd:00:af:66:9d:16:83:c7:ad:41:cc:53:1f:05:06:24:
         8e:29:38:c1:02:02:45:1a:80:0a:13:d3:c9:22:a6:42:7c:8e:
         32:a5:2f:28:08:77:61:2c:59:7c:05:e2:48:55:8c:c7:6d:20:
         a2:8f:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----