Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383037303a3a2f34342d3438203d3e203231373338.roa
File:                     326131333a633030373a383037303a3a2f34342d3438203d3e203231373338.roa (raw, json)
Hash identifier:          O5RPVYaSj0X9CRU2sbIrzOkdbRKXOcDtNDT3vzn0D40=
Subject key identifier:   F6:4F:92:88:91:73:99:22:31:D1:61:4B:ED:80:70:6D:94:1A:95:BB
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       246F6BDCEA8CC7D8730133D943CA266A974DF0C0
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383037303a3a2f34342d3438203d3e203231373338.roa
Signing time:             Sat 08 Apr 2023 03:25:53 +0000
ROA not before:           Sat 08 Apr 2023 03:20:53 +0000
ROA not after:            Sat 06 Apr 2024 03:25:53 +0000
asID:                     21738
IP address blocks:        2a13:c007:8070::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6f:6b:dc:ea:8c:c7:d8:73:01:33:d9:43:ca:26:6a:97:4d:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:53 2023 GMT
            Not After : Apr  6 03:25:53 2024 GMT
        Subject: CN=F64F92889173992231D1614BED80706D941A95BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:6d:04:c5:3d:0f:e1:8f:0d:c4:59:6a:00:
                    a2:92:b6:01:a0:20:15:8b:21:1f:f4:ec:00:ce:b2:
                    72:68:46:0b:da:ea:8e:4c:99:3b:be:7e:0f:b9:90:
                    04:bc:20:15:21:d6:c1:12:be:49:aa:3f:b5:74:08:
                    7e:8a:8f:bf:a9:84:28:95:dd:5c:0d:87:f1:68:be:
                    da:72:a9:06:48:81:30:8e:06:98:a9:7a:6c:97:17:
                    e1:ad:5b:57:f1:61:e9:20:4e:d0:57:ac:f0:06:14:
                    9d:da:63:bc:57:cf:25:80:ff:25:cf:a5:a6:a2:de:
                    3d:fc:7c:f6:fe:fc:d4:04:5b:33:e5:1a:32:07:d1:
                    ec:e3:2f:43:13:4e:db:63:f2:f9:37:e5:53:58:bc:
                    ca:de:8d:95:fb:1d:2d:fe:27:13:41:a9:20:32:f2:
                    6f:87:55:23:52:2b:8a:cc:d7:7c:37:5f:19:12:b1:
                    18:4c:7e:c9:29:04:14:61:9c:96:ce:f1:45:8d:23:
                    62:86:3b:b7:ae:44:b7:cd:78:df:81:56:ca:48:47:
                    50:3f:c6:44:3e:a2:a2:bc:e3:47:a4:9b:02:ac:4f:
                    6e:1b:47:26:08:5d:88:9b:fc:8e:d7:d1:10:a8:9f:
                    71:76:b7:1c:ed:15:2e:eb:9d:cb:01:fc:60:78:27:
                    a2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4F:92:88:91:73:99:22:31:D1:61:4B:ED:80:70:6D:94:1A:95:BB
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383037303a3a2f34342d3438203d3e203231373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8070::/44

    Signature Algorithm: sha256WithRSAEncryption
         4c:b0:9b:b4:6c:cc:ef:20:fb:d4:a9:5d:9c:22:74:42:ab:d2:
         0a:33:2d:af:ca:5c:ea:bb:61:50:07:e2:13:89:31:94:99:22:
         99:ec:49:e3:86:69:9a:9d:39:8a:c0:b7:01:f9:18:51:5b:fd:
         6d:67:ff:72:1d:47:86:65:f1:c3:34:23:9f:03:64:6f:ad:a9:
         a6:c7:57:81:e4:4b:24:74:f8:76:c6:19:0b:19:f7:cd:19:11:
         69:74:40:a0:19:31:1f:af:a2:82:b4:c5:52:4f:95:d7:d5:bd:
         b4:ca:18:c4:20:3d:ff:a1:c4:91:1c:2e:7b:b6:fd:59:44:af:
         ad:bc:41:c0:91:c8:40:2b:c8:70:ab:e4:f5:58:d4:b0:d9:f4:
         b0:f9:c7:a2:63:9f:f8:e7:d4:0c:1c:63:43:05:78:1b:bb:61:
         0d:98:ba:39:eb:6d:1c:fc:83:02:0e:dc:af:26:5c:35:cc:b8:
         24:8d:c6:0b:26:10:82:5e:1d:48:2c:d4:04:ca:4f:9c:98:8a:
         9b:ba:eb:bb:c1:e2:b3:46:56:cd:95:08:ae:28:bc:9d:ef:be:
         43:54:2e:f5:2c:b3:ce:05:e8:81:48:14:15:2e:16:07:e9:6a:
         4f:95:27:a6:85:dd:d6:fc:0b:a6:ee:58:cf:b9:4f:e3:36:c6:
         86:3c:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----