Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS199762/1/326130363a313238373a353430303a3a2f33392d3438203d3e20313939333736.roa
File:                     326130363a313238373a353430303a3a2f33392d3438203d3e20313939333736.roa (raw, json)
Hash identifier:          xybjgd2seTHkwxZbIrY9mnggiScQGjiOV0KJ/XwqaXs=
Subject key identifier:   2B:0B:4C:7B:A6:5D:B6:AF:DD:47:62:7E:B5:A8:B0:0A:2D:33:92:45
Certificate issuer:       /CN=05C100A07CDA99C5C82245383B19D4E36A9EDEFA
Certificate serial:       2EFB0BD38F9E260B489E7494DDED7323329FC69D
Authority key identifier: 05:C1:00:A0:7C:DA:99:C5:C8:22:45:38:3B:19:D4:E3:6A:9E:DE:FA
Authority info access:    rsync://rpki.co/repo/AS205432/0/05C100A07CDA99C5C82245383B19D4E36A9EDEFA.cer
Subject info access:      rsync://rpki.co/repo/AS199762/1/326130363a313238373a353430303a3a2f33392d3438203d3e20313939333736.roa
Signing time:             Fri 14 Apr 2023 14:51:05 +0000
ROA not before:           Fri 14 Apr 2023 14:46:05 +0000
ROA not after:            Fri 12 Apr 2024 14:51:05 +0000
asID:                     199376
IP address blocks:        2a06:1287:5400::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fb:0b:d3:8f:9e:26:0b:48:9e:74:94:dd:ed:73:23:32:9f:c6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C100A07CDA99C5C82245383B19D4E36A9EDEFA
        Validity
            Not Before: Apr 14 14:46:05 2023 GMT
            Not After : Apr 12 14:51:05 2024 GMT
        Subject: CN=2B0B4C7BA65DB6AFDD47627EB5A8B00A2D339245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:e5:28:2f:63:90:69:c4:ab:f6:6c:1d:35:
                    b8:6c:25:ef:01:b2:00:13:87:4f:da:e4:a9:0b:28:
                    03:37:ed:c6:01:1c:90:36:29:1d:9b:d5:66:80:b7:
                    53:cc:ad:3d:38:c9:63:98:33:75:a9:f0:0a:06:54:
                    bc:62:d7:6b:52:22:01:b6:91:7c:68:b5:55:7a:a7:
                    34:ae:da:39:7d:3e:f7:1a:4f:5c:3b:b3:e5:63:7a:
                    e3:d1:0f:3c:73:d2:44:76:bc:c9:6c:3e:14:34:84:
                    a6:ae:29:f8:18:80:1d:99:3b:cf:89:c4:fa:ab:84:
                    b3:6f:60:c4:62:10:21:e5:36:8f:1a:1b:47:d9:96:
                    11:aa:39:0d:b3:de:2a:6c:16:a9:11:25:f3:8b:3c:
                    a2:4e:7c:8f:37:fe:96:9d:af:33:56:b6:d6:d0:66:
                    cb:0d:c5:ae:7a:74:31:f1:94:62:61:95:9b:91:b6:
                    a0:c2:78:f3:71:05:a7:0c:d4:88:75:57:11:bb:4d:
                    39:c1:7c:1b:66:61:0f:83:85:62:bc:7b:4d:a8:8d:
                    a2:20:ec:2b:e0:2b:2a:6b:2b:30:86:67:61:b1:ac:
                    70:3a:3e:64:59:42:45:a9:16:02:66:5d:0d:16:0d:
                    64:bd:b7:b8:1e:63:46:c0:78:b9:0c:06:ae:5f:ee:
                    9d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0B:4C:7B:A6:5D:B6:AF:DD:47:62:7E:B5:A8:B0:0A:2D:33:92:45
            X509v3 Authority Key Identifier:
                keyid:05:C1:00:A0:7C:DA:99:C5:C8:22:45:38:3B:19:D4:E3:6A:9E:DE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS199762/1/05C100A07CDA99C5C82245383B19D4E36A9EDEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/05C100A07CDA99C5C82245383B19D4E36A9EDEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS199762/1/326130363a313238373a353430303a3a2f33392d3438203d3e20313939333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5400::/39

    Signature Algorithm: sha256WithRSAEncryption
         5d:a0:33:5b:b4:64:cb:ad:25:7f:15:97:7a:77:45:52:8f:19:
         d3:43:fe:2e:03:32:d1:e5:41:7e:62:19:c0:bf:9d:f1:d6:ae:
         53:d6:6a:4d:56:ab:e2:e5:a4:84:88:3d:37:01:00:69:2d:a8:
         33:5a:e8:ff:3c:28:e7:01:63:99:61:01:d7:88:36:fa:71:f0:
         e2:e4:6e:f7:d8:9b:f9:6b:84:d0:8b:7c:73:a0:48:6d:30:b4:
         ed:f1:a6:6d:a5:9d:88:31:83:e8:4f:b2:f1:20:67:33:18:67:
         44:0e:b1:bb:5c:a1:67:f6:b8:05:9a:07:14:82:ff:5a:c2:84:
         00:0f:c1:2b:6d:a0:59:7f:8c:0b:86:84:63:f0:4c:65:05:29:
         24:56:84:46:1b:87:ef:18:d0:04:86:87:d9:f4:9c:76:c0:c7:
         79:43:3c:27:83:8e:1a:fd:07:04:bc:42:d9:18:59:07:92:b3:
         05:0b:61:c3:86:38:95:10:3c:c0:cb:d7:72:c2:42:b2:0a:d0:
         41:cb:c1:a3:1c:cb:ea:63:e4:e6:55:3f:65:ad:03:ca:36:df:
         40:06:8a:90:11:0b:dd:99:44:b2:73:f1:0b:e8:2d:27:a7:24:
         c4:9e:5d:bc:fc:26:78:b3:82:a4:ca:af:7e:24:3a:bc:06:5e:
         a7:80:9e:06
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIULvsL04+eJgtInnSU3e1zIzKfxp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVDMTAwQTA3Q0RBOTlDNUM4MjI0NTM4M0IxOUQ0RTM2
QTlFREVGQTAeFw0yMzA0MTQxNDQ2MDVaFw0yNDA0MTIxNDUxMDVaMDMxMTAvBgNV
BAMTKDJCMEI0QzdCQTY1REI2QUZERDQ3NjI3RUI1QThCMDBBMkQzMzkyNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcOUoL2OQacSr9mwdNbhsJe8B
sgATh0/a5KkLKAM37cYBHJA2KR2b1WaAt1PMrT04yWOYM3Wp8AoGVLxi12tSIgG2
kXxotVV6pzSu2jl9PvcaT1w7s+VjeuPRDzxz0kR2vMlsPhQ0hKauKfgYgB2ZO8+J
xPqrhLNvYMRiECHlNo8aG0fZlhGqOQ2z3ipsFqkRJfOLPKJOfI83/padrzNWttbQ
ZssNxa56dDHxlGJhlZuRtqDCePNxBacM1Ih1VxG7TTnBfBtmYQ+DhWK8e02ojaIg
7CvgKyprKzCGZ2GxrHA6PmRZQkWpFgJmXQ0WDWS9t7geY0bAeLkMBq5f7p0fAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUKwtMe6Zdtq/dR2J+taiwCi0zkkUwHwYDVR0j
BBgwFoAUBcEAoHzamcXIIkU4OxnU42qe3vowDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMTk5NzYyLzEvMDVD
MTAwQTA3Q0RBOTlDNUM4MjI0NTM4M0IxOUQ0RTM2QTlFREVGQS5jcmwwaAYIKwYB
BQUHAQEEXDBaMFgGCCsGAQUFBzAChkxyc3luYzovL3Jwa2kuY28vcmVwby9BUzIw
NTQzMi8wLzA1QzEwMEEwN0NEQTk5QzVDODIyNDUzODNCMTlENEUzNkE5RURFRkEu
Y2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5j
by9yZXBvL0FTMTk5NzYyLzEvMzI2MTMwMzYzYTMxMzIzODM3M2EzNTM0MzAzMDNh
M2EyZjMzMzkyZDM0MzgyMDNkM2UyMDMxMzkzOTMzMzczNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASoG
EodUMA0GCSqGSIb3DQEBCwUAA4IBAQBdoDNbtGTLrSV/FZd6d0VSjxnTQ/4uAzLR
5UF+YhnAv53x1q5T1mpNVqvi5aSEiD03AQBpLagzWuj/PCjnAWOZYQHXiDb6cfDi
5G732Jv5a4TQi3xzoEhtMLTt8aZtpZ2IMYPoT7LxIGczGGdEDrG7XKFn9rgFmgcU
gv9awoQAD8ErbaBZf4wLhoRj8ExlBSkkVoRGG4fvGNAEhofZ9Jx2wMd5Qzwng44a
/QcEvELZGFkHkrMFC2HDhjiVEDzAy9dywkKyCtBBy8GjHMvqY+TmVT9lrQPKNt9A
BoqQEQvdmUSyc/EL6C0npyTEnl28/CZ4s4Kkyq9+JDq8Bl6ngJ4G
-----END CERTIFICATE-----