Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa
File:                     326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa (raw, json)
Hash identifier:          +2PYL3+xttvvVSjuQkDKlMG0TzeZkAyYSjns1G5Tm3I=
Subject key identifier:   FB:D3:3B:9E:83:6F:90:FC:70:32:23:B7:E8:B2:66:86:F8:F0:6E:C7
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       5249EB57E58C8DDF3824ACE131ABF8FA1E137B2A
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa
Signing time:             Sat 08 Apr 2023 03:25:50 +0000
ROA not before:           Sat 08 Apr 2023 03:20:50 +0000
ROA not after:            Sat 06 Apr 2024 03:25:50 +0000
asID:                     199327
IP address blocks:        2a13:c007:8050::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:49:eb:57:e5:8c:8d:df:38:24:ac:e1:31:ab:f8:fa:1e:13:7b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:50 2023 GMT
            Not After : Apr  6 03:25:50 2024 GMT
        Subject: CN=FBD33B9E836F90FC703223B7E8B26686F8F06EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:7b:43:66:35:1f:ef:26:c6:2b:54:ca:f1:
                    b9:e1:c7:4a:bb:9f:b7:46:08:59:0e:2b:35:6a:a8:
                    e8:5c:8c:b0:1b:58:fe:51:af:40:e3:d8:aa:24:94:
                    2c:85:dc:7b:a2:3d:30:ec:74:c1:bb:26:f4:36:2b:
                    90:0a:7b:15:b2:3b:58:da:32:09:09:37:d5:6a:8d:
                    cf:9f:2b:e3:89:4b:5c:8c:cd:55:65:34:0c:9e:e2:
                    45:1c:48:de:ea:1c:a1:86:d7:a3:b0:e2:38:c9:d3:
                    a8:45:1f:ad:42:29:c2:7f:e9:14:10:5e:35:97:77:
                    ca:b8:bf:af:0b:bc:54:87:1c:46:a4:75:c4:89:0f:
                    9b:3e:55:3a:94:fe:d0:34:44:ab:ac:93:d9:1d:2b:
                    70:3e:15:59:4b:6d:9e:f9:9c:0c:f9:99:f1:57:01:
                    65:61:c7:fc:e8:fe:fa:43:7d:a2:73:9c:b5:32:ed:
                    13:a7:01:72:e8:b4:ee:a2:08:fc:a3:6f:b4:55:0d:
                    8b:a2:b7:77:d4:59:3e:30:46:1c:a4:54:71:aa:7d:
                    4d:d0:0c:45:91:5b:2c:df:65:c6:44:d7:4e:7c:8a:
                    57:40:60:fe:d5:2f:ec:7a:c6:3d:41:b1:f0:26:1d:
                    87:29:ed:6a:af:f9:7a:0a:09:09:7f:3f:46:24:0d:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D3:3B:9E:83:6F:90:FC:70:32:23:B7:E8:B2:66:86:F8:F0:6E:C7
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8050::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:b2:83:65:84:b0:2b:30:3b:87:2f:92:2f:6b:c6:c6:34:53:
         38:7e:20:af:77:8d:3a:cb:a7:64:dc:e2:6f:a2:df:8c:62:31:
         28:da:17:fa:8f:6f:bd:36:a3:b1:77:d9:16:c9:63:bc:cc:01:
         e2:e9:53:20:83:69:3e:69:2a:70:48:02:83:0b:ff:22:e7:b6:
         99:09:70:f2:1a:78:cc:6b:a9:ed:1a:0b:73:3e:46:57:05:8c:
         2b:4e:21:08:1d:74:8a:a2:19:a7:2f:4b:e3:a3:cb:35:26:90:
         e1:8b:ae:ee:1c:8c:eb:9e:28:1f:da:07:18:2c:e9:a4:74:b6:
         f9:65:9e:cd:71:04:6f:5e:f1:fa:b3:22:e9:ef:24:5b:ca:0d:
         25:4a:d1:02:cc:ab:80:70:75:48:9a:2a:7d:84:8a:09:0b:97:
         2f:bd:b1:38:15:bb:ef:18:f0:95:cb:fe:34:5a:38:5d:3d:36:
         3b:e0:7d:ac:ce:eb:8d:d7:ee:0f:2f:0d:8d:7e:b3:4a:b7:06:
         43:5e:73:d3:76:01:93:e7:31:34:18:b6:6a:1c:ce:b8:3b:5b:
         05:73:b4:3f:e6:90:1e:01:79:da:2d:83:46:84:85:74:34:60:
         ca:27:25:dc:72:2c:10:2e:3f:7a:b1:64:3c:0a:fb:0b:73:2b:
         d3:98:37:f6
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIUUknrV+WMjd84JKzhMav4+h4TeyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjU1Y2NkZmE1ZmM4MWIzNDJjOTg4ODc3MmRiMzFlNmM0
ZmRiMjYyMjAeFw0yMzA0MDgwMzIwNTBaFw0yNDA0MDYwMzI1NTBaMDMxMTAvBgNV
BAMTKEZCRDMzQjlFODM2RjkwRkM3MDMyMjNCN0U4QjI2Njg2RjhGMDZFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/ntDZjUf7ybGK1TK8bnhx0q7
n7dGCFkOKzVqqOhcjLAbWP5Rr0Dj2KoklCyF3HuiPTDsdMG7JvQ2K5AKexWyO1ja
MgkJN9Vqjc+fK+OJS1yMzVVlNAye4kUcSN7qHKGG16Ow4jjJ06hFH61CKcJ/6RQQ
XjWXd8q4v68LvFSHHEakdcSJD5s+VTqU/tA0RKusk9kdK3A+FVlLbZ75nAz5mfFX
AWVhx/zo/vpDfaJznLUy7ROnAXLotO6iCPyjb7RVDYuit3fUWT4wRhykVHGqfU3Q
DEWRWyzfZcZE1058ildAYP7VL+x6xj1BsfAmHYcp7Wqv+XoKCQl/P0YkDRzZAgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQU+9M7noNvkPxwMiO36LJmhvjwbscwHwYDVR0j
BBgwFoAU9VzN+l/IGzQsmIh3LbMebE/bJiIwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvMTQvRjU1Q0NE
RkE1RkM4MUIzNDJDOTg4ODc3MkRCMzFFNkM0RkRCMjYyMi5jcmwwZAYIKwYBBQUH
AQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzlWek4tbF9JR3pRc21JaDNMYk1lYkVfYkppSS5jZXIwfQYI
KwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFyc3luYzovL3Jwa2kuY28vcmVwby9I
WVNQLzE0LzMyNjEzMTMzM2E2MzMwMzAzNzNhMzgzMDM1MzAzYTNhMmYzNDM0MmQz
NDM4MjAzZDNlMjAzMTM5MzkzMzMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqE8AHgFAwDQYJKoZI
hvcNAQELBQADggEBAJ+yg2WEsCswO4cvki9rxsY0Uzh+IK93jTrLp2Tc4m+i34xi
MSjaF/qPb702o7F32RbJY7zMAeLpUyCDaT5pKnBIAoML/yLntpkJcPIaeMxrqe0a
C3M+RlcFjCtOIQgddIqiGacvS+OjyzUmkOGLru4cjOueKB/aBxgs6aR0tvllns1x
BG9e8fqzIunvJFvKDSVK0QLMq4BwdUiaKn2EigkLly+9sTgVu+8Y8JXL/jRaOF09
NjvgfazO643X7g8vDY1+s0q3BkNec9N2AZPnMTQYtmoczrg7WwVztD/mkB4Bedot
g0aEhXQ0YMonJdxyLBAuP3qxZDwK+wtzK9OYN/Y=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:31 2023 by rpki-client on console-fra.rpki-client.org