Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383032303a3a2f34342d3438203d3e20313939323033.roa
File:                     326131333a633030373a383032303a3a2f34342d3438203d3e20313939323033.roa (raw, json)
Hash identifier:          Yae5xK8X4jy2YShUzfq3ZiApVGg3fxUWco0Ei4Kg5SM=
Subject key identifier:   73:93:F4:CA:4B:76:A5:65:23:98:56:D6:20:DC:CD:39:18:B9:68:03
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       3A771AD7C7F392B16700499EE63218C9F9782AF1
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383032303a3a2f34342d3438203d3e20313939323033.roa
Signing time:             Sat 08 Apr 2023 03:25:51 +0000
ROA not before:           Sat 08 Apr 2023 03:20:51 +0000
ROA not after:            Sat 06 Apr 2024 03:25:51 +0000
asID:                     199203
IP address blocks:        2a13:c007:8020::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:77:1a:d7:c7:f3:92:b1:67:00:49:9e:e6:32:18:c9:f9:78:2a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:51 2023 GMT
            Not After : Apr  6 03:25:51 2024 GMT
        Subject: CN=7393F4CA4B76A565239856D620DCCD3918B96803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:0f:eb:3f:99:79:89:77:eb:ce:10:46:9c:
                    c8:de:ae:cd:64:81:9f:ef:98:8f:f7:83:a4:95:69:
                    92:0a:c9:fb:ba:e5:ec:22:44:1d:7d:81:5f:61:8a:
                    3c:39:84:6d:ec:9d:06:99:34:8e:0b:f5:60:0f:b6:
                    e0:b1:ca:13:f0:89:bd:6f:f3:34:d9:ee:ed:85:f7:
                    bc:4d:5a:e5:de:01:d2:5b:ba:9e:1a:7c:00:fe:ad:
                    00:fa:61:ca:7f:3d:9e:f3:de:46:34:b4:09:07:c1:
                    4c:65:37:97:d2:66:63:9d:93:19:72:4d:46:4e:bf:
                    71:0b:ff:58:a1:af:1e:7b:4b:d5:7e:0b:41:da:30:
                    80:dd:13:2e:b2:9b:7b:65:f1:71:d7:09:0a:3b:72:
                    b5:91:7f:ab:fe:dc:4a:7a:82:b6:1f:a9:08:fa:ca:
                    be:5e:1c:5b:f7:e0:f6:28:22:20:9c:98:db:1e:d5:
                    23:20:c8:b7:db:0a:7e:14:17:d2:c2:71:bf:e5:c5:
                    c0:f2:12:94:d6:55:1c:6a:26:eb:ec:54:61:cf:37:
                    4a:5b:f8:cb:43:44:03:77:85:1e:10:b1:31:f4:2a:
                    fc:fd:20:bf:b0:b0:a0:c7:83:de:23:7d:33:b5:4c:
                    9b:95:b2:15:3c:96:8b:64:be:17:83:39:74:2b:09:
                    a1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:93:F4:CA:4B:76:A5:65:23:98:56:D6:20:DC:CD:39:18:B9:68:03
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383032303a3a2f34342d3438203d3e20313939323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8020::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:16:b5:c5:84:88:43:49:0a:58:50:73:5d:ca:80:1c:88:
         7e:80:6a:e5:11:2e:08:0d:0f:d1:57:d2:af:43:2f:fc:59:33:
         75:13:bc:0f:16:3a:7d:ad:d9:43:ae:52:9d:95:01:da:45:f4:
         82:69:d9:23:21:6b:50:f1:ac:2f:58:83:87:4b:5e:4a:22:4a:
         2c:20:a7:3e:d8:1d:ed:95:70:a1:3b:d6:23:72:29:f5:c0:50:
         97:62:ce:91:cb:53:4d:44:50:01:86:ea:c9:dd:71:3e:c1:ef:
         43:c7:d8:f4:46:c1:01:05:9c:21:49:f9:11:47:a6:89:a2:23:
         77:c4:34:5d:77:56:8d:2a:92:f0:d2:21:9a:94:3e:e6:ae:1a:
         17:14:52:e4:f2:91:a1:8f:d4:34:2c:4f:c9:0d:19:48:33:b5:
         ad:c1:44:6e:c0:d5:4d:80:2f:c1:48:da:dc:37:4a:e2:c8:72:
         cd:5c:91:32:d3:48:57:96:6b:44:cc:21:28:53:dc:01:49:7c:
         e9:b6:fc:0b:2a:49:30:2f:4f:33:50:f6:18:20:af:ac:e2:44:
         05:eb:31:42:45:86:02:84:62:5e:9b:a1:b4:5d:be:62:85:3f:
         56:ba:c4:f3:17:54:8f:fb:cb:89:73:39:47:73:0d:c0:2b:c5:
         03:49:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----