Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS207466/1/326130353a646663373a636330303a3a2f33392d3438203d3e20323037343636.roa
File:                     326130353a646663373a636330303a3a2f33392d3438203d3e20323037343636.roa (raw, json)
Hash identifier:          F2XnQhkrpRicIDNkQfP5XxO2OGAHpaMNeiaNwxW9U28=
Subject key identifier:   02:10:A0:BB:78:99:94:26:F6:A8:57:4A:BC:40:AC:DA:07:24:75:35
Certificate issuer:       /CN=22C59B931870315D13B44E4163A51ABEACB4C2B8
Certificate serial:       06AF2C9B38DF596B1FF9537B3CEDC4A45161AE39
Authority key identifier: 22:C5:9B:93:18:70:31:5D:13:B4:4E:41:63:A5:1A:BE:AC:B4:C2:B8
Authority info access:    rsync://rpki.co/repo/AS205432/0/22C59B931870315D13B44E4163A51ABEACB4C2B8.cer
Subject info access:      rsync://rpki.co/repo/AS207466/1/326130353a646663373a636330303a3a2f33392d3438203d3e20323037343636.roa
Signing time:             Fri 12 May 2023 12:30:10 +0000
ROA not before:           Fri 12 May 2023 12:25:10 +0000
ROA not after:            Fri 10 May 2024 12:30:10 +0000
asID:                     207466
IP address blocks:        2a05:dfc7:cc00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:af:2c:9b:38:df:59:6b:1f:f9:53:7b:3c:ed:c4:a4:51:61:ae:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22C59B931870315D13B44E4163A51ABEACB4C2B8
        Validity
            Not Before: May 12 12:25:10 2023 GMT
            Not After : May 10 12:30:10 2024 GMT
        Subject: CN=0210A0BB78999426F6A8574ABC40ACDA07247535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:5a:49:f4:30:4f:7d:14:4f:99:49:a6:53:
                    e6:27:b3:ef:f2:51:3e:bf:58:63:0b:a0:ab:0c:a0:
                    c5:5a:9f:49:e5:e8:08:01:ea:cf:b5:58:2f:fb:aa:
                    a2:19:74:d7:43:46:1a:43:c8:cc:04:36:fa:05:77:
                    e1:27:6e:5a:b1:dc:f3:7f:4e:1c:29:ba:ba:e0:da:
                    23:b5:63:f6:32:91:19:f8:24:7f:6e:ed:06:bf:c6:
                    90:e3:bd:9a:b9:40:d4:c8:d6:ad:a0:60:1d:84:b8:
                    98:f9:ad:da:74:ed:3d:23:42:38:7a:1c:40:49:8b:
                    55:9f:98:99:50:9b:95:75:16:5c:a3:1f:c4:24:7c:
                    b2:ac:2a:fe:da:61:22:79:ad:28:88:cb:65:a5:cd:
                    8e:a1:69:4f:4d:9e:05:3c:fd:13:07:37:99:e1:18:
                    bd:4b:dc:a4:f5:ee:65:11:bb:4d:01:98:4e:f0:d6:
                    82:45:e2:c3:33:10:c6:9a:b6:b9:ff:ff:55:e6:53:
                    bb:6e:3e:79:c6:e0:ec:d6:5f:ae:c7:21:76:b1:3a:
                    30:eb:fc:a7:d9:2a:a0:45:bc:a6:57:a1:83:99:39:
                    0a:e8:e0:d7:8d:df:d5:a4:f5:dd:1b:fd:b2:e4:7b:
                    da:2d:51:54:de:30:0a:e7:8b:8c:6c:63:ba:15:68:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:10:A0:BB:78:99:94:26:F6:A8:57:4A:BC:40:AC:DA:07:24:75:35
            X509v3 Authority Key Identifier:
                keyid:22:C5:9B:93:18:70:31:5D:13:B4:4E:41:63:A5:1A:BE:AC:B4:C2:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS207466/1/22C59B931870315D13B44E4163A51ABEACB4C2B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/22C59B931870315D13B44E4163A51ABEACB4C2B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS207466/1/326130353a646663373a636330303a3a2f33392d3438203d3e20323037343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:cc00::/39

    Signature Algorithm: sha256WithRSAEncryption
         93:ab:dd:43:a8:6a:e6:31:04:87:73:83:cf:fd:86:4e:af:3c:
         ff:8d:75:f6:2c:25:3e:fd:c3:8d:c3:93:2e:38:96:c2:09:3a:
         44:a3:6f:47:0c:7d:8e:2a:e0:db:f4:99:e8:41:14:fb:a6:f2:
         39:ed:fd:0b:b3:e6:a3:66:b6:ab:06:15:d9:41:98:a4:87:f4:
         d9:e4:87:05:85:cc:2e:ea:d2:33:80:71:1a:5f:63:68:08:7b:
         01:11:b6:41:1a:6a:e4:bd:8f:e0:63:cc:82:14:99:dc:4e:43:
         79:28:62:9f:ca:c0:5b:a2:33:99:cc:ce:1f:95:3e:a0:91:ab:
         1e:7f:88:b0:68:49:ba:d4:bb:1b:3f:43:98:db:b5:b8:d6:e8:
         dd:98:ab:a8:ec:b2:24:97:06:35:a8:98:88:2f:d7:31:26:91:
         0f:a8:dd:6c:82:46:6e:63:31:92:11:66:ba:70:d6:b3:9a:cd:
         0f:4f:ef:90:97:21:89:bc:86:b7:48:b9:f3:1c:b8:8e:40:be:
         bd:fc:d0:88:1b:8a:c5:d8:3c:02:4e:73:6c:a0:1b:b0:ea:0c:
         4f:15:e9:fb:07:4c:f1:65:0c:97:b9:80:ab:93:67:3f:29:94:
         81:fe:15:74:c0:14:ea:5c:75:50:8d:20:5f:be:2f:99:49:96:
         85:bc:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----