Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS199762/1/326130353a646663373a626530303a3a2f33392d3438203d3e20313939333736.roa
File:                     326130353a646663373a626530303a3a2f33392d3438203d3e20313939333736.roa (raw, json)
Hash identifier:          pIAEQotBzKzFOu0sykEAOYL4IEWKBSp2sHse8oMMZFM=
Subject key identifier:   9C:CA:7C:F3:6A:1F:6C:5C:9B:06:A1:A0:BD:D5:6E:A7:EB:C0:15:25
Certificate issuer:       /CN=05C100A07CDA99C5C82245383B19D4E36A9EDEFA
Certificate serial:       638CAD8D0BA3E91DF44704BFA7773ACF7ED8AC6E
Authority key identifier: 05:C1:00:A0:7C:DA:99:C5:C8:22:45:38:3B:19:D4:E3:6A:9E:DE:FA
Authority info access:    rsync://rpki.co/repo/AS205432/0/05C100A07CDA99C5C82245383B19D4E36A9EDEFA.cer
Subject info access:      rsync://rpki.co/repo/AS199762/1/326130353a646663373a626530303a3a2f33392d3438203d3e20313939333736.roa
Signing time:             Sat 13 May 2023 06:08:36 +0000
ROA not before:           Sat 13 May 2023 06:03:36 +0000
ROA not after:            Sat 11 May 2024 06:08:36 +0000
asID:                     199376
IP address blocks:        2a05:dfc7:be00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8c:ad:8d:0b:a3:e9:1d:f4:47:04:bf:a7:77:3a:cf:7e:d8:ac:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C100A07CDA99C5C82245383B19D4E36A9EDEFA
        Validity
            Not Before: May 13 06:03:36 2023 GMT
            Not After : May 11 06:08:36 2024 GMT
        Subject: CN=9CCA7CF36A1F6C5C9B06A1A0BDD56EA7EBC01525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:dd:1b:27:70:a2:2c:49:e0:f2:09:57:2c:
                    ae:22:17:86:2d:d7:6d:99:c1:bf:5b:9d:b8:9c:48:
                    83:95:da:aa:69:39:00:d2:09:b9:58:88:9d:6d:dd:
                    93:70:f7:b1:a4:ce:39:1f:2d:3c:be:e3:ab:72:4c:
                    1a:b9:da:a6:13:49:70:c0:42:56:24:c2:d7:e1:f0:
                    5f:87:34:9a:fd:b4:00:04:31:33:60:c5:9a:6a:28:
                    3a:37:5a:d7:3b:3d:58:cf:96:1b:2e:b8:65:57:cd:
                    9d:bd:40:aa:f2:e1:3e:9b:14:a6:7c:2f:9a:8a:63:
                    db:a2:30:b1:3b:44:52:56:2a:d0:a5:03:df:c1:65:
                    13:fe:e6:43:36:c7:36:5e:bf:f3:79:e6:94:94:64:
                    17:6b:13:6f:c2:99:c8:2d:d2:62:86:64:c1:79:f1:
                    05:ac:ab:34:6c:e5:c9:9a:e2:ec:66:4d:b6:be:4a:
                    e2:58:79:e4:a0:02:8f:46:dc:a5:23:52:fc:59:ec:
                    d5:31:45:ae:e6:e4:96:3f:6f:96:26:ba:95:87:15:
                    95:67:db:fc:ff:01:06:21:52:4e:20:57:ae:53:9c:
                    07:2d:c4:f2:2a:19:f2:ef:4c:a5:e6:23:1e:da:d3:
                    bf:86:c7:4b:4d:cf:ad:af:7f:d1:eb:fc:fa:da:9e:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CA:7C:F3:6A:1F:6C:5C:9B:06:A1:A0:BD:D5:6E:A7:EB:C0:15:25
            X509v3 Authority Key Identifier:
                keyid:05:C1:00:A0:7C:DA:99:C5:C8:22:45:38:3B:19:D4:E3:6A:9E:DE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS199762/1/05C100A07CDA99C5C82245383B19D4E36A9EDEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/05C100A07CDA99C5C82245383B19D4E36A9EDEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS199762/1/326130353a646663373a626530303a3a2f33392d3438203d3e20313939333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:be00::/39

    Signature Algorithm: sha256WithRSAEncryption
         35:65:99:40:50:2b:84:8f:53:df:c4:7a:23:35:95:d0:31:9b:
         a1:e0:38:3a:ef:10:71:6b:64:ef:64:da:39:fe:73:09:5c:2e:
         23:ff:a5:42:f8:33:dd:46:95:ef:32:cb:7e:80:1b:97:43:96:
         14:62:ce:26:94:6f:06:c4:e1:2b:6e:2c:c5:ae:a0:38:7c:8e:
         88:7d:e9:cd:81:96:2b:b7:1a:66:d2:69:33:2b:58:1e:24:3a:
         db:23:b1:cc:1c:fb:ee:ae:a9:a2:f9:59:79:8c:1c:e4:9f:f4:
         62:d0:57:c0:f0:af:79:dd:d6:b6:16:1d:f2:6b:f5:ab:04:82:
         ec:eb:f0:32:d4:ae:f5:db:3b:67:c0:d3:e9:32:19:7d:58:d5:
         b2:fa:3d:74:9b:c4:ec:66:f1:92:9c:8b:f0:3b:57:ad:c5:3f:
         65:bd:4c:d5:3f:fa:20:c4:a2:3f:35:f2:2d:71:e3:83:f8:9a:
         0b:b8:d8:e2:fe:8e:b0:33:18:22:bb:37:01:6a:aa:66:87:8b:
         37:12:61:94:6f:88:ad:28:9f:a2:c9:5b:90:ea:5b:45:90:64:
         ea:aa:d1:75:15:2c:61:44:e8:86:fc:9a:80:31:85:b7:91:41:
         02:58:1a:78:66:a7:9f:b4:9c:5a:c5:86:b1:d8:81:d6:30:29:
         bd:1b:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----