Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa
File:                     326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa (raw, json)
Hash identifier:          W0EIvV7XCTqM0fmGEM3xhz/XxuiIJkqqD18bTk8D4xk=
Subject key identifier:   4A:03:89:9D:F6:F0:0B:BF:9C:D6:B5:43:69:3E:DC:B8:F1:71:0F:0A
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       68773097C567B8E11421E386A2AFB02DF7B8904D
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa
Signing time:             Mon 10 Apr 2023 03:31:25 +0000
ROA not before:           Mon 10 Apr 2023 03:26:25 +0000
ROA not after:            Mon 08 Apr 2024 03:31:25 +0000
asID:                     49867
IP address blocks:        2a13:c007:8000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:77:30:97:c5:67:b8:e1:14:21:e3:86:a2:af:b0:2d:f7:b8:90:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:25 2023 GMT
            Not After : Apr  8 03:31:25 2024 GMT
        Subject: CN=4A03899DF6F00BBF9CD6B543693EDCB8F1710F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:02:f3:93:75:e3:98:da:60:12:28:15:cb:
                    14:07:2f:56:01:eb:9c:b4:4e:bb:7e:dc:22:77:5e:
                    32:e0:1a:65:dd:20:4c:4f:23:ff:e9:37:e7:23:1a:
                    52:d9:55:d7:60:ce:8a:f1:73:37:23:d5:a7:48:2f:
                    ee:4e:52:73:d6:24:7b:a6:b5:d4:d0:90:f7:ef:d9:
                    9c:75:07:28:14:56:e5:0d:99:99:c9:07:22:31:d8:
                    cd:b1:c1:5a:17:33:5d:29:14:39:ef:2c:1d:8a:09:
                    8f:43:23:32:d7:a7:7c:c6:72:9e:88:16:54:3e:ca:
                    aa:50:25:3f:ae:59:c8:4e:53:b6:53:d7:7b:55:fe:
                    09:58:c2:2c:3d:b8:4c:bb:02:5d:5c:b0:bd:03:ff:
                    e8:a8:3b:85:2a:83:61:06:fe:e1:94:1f:03:85:a3:
                    52:d8:00:aa:71:bb:70:48:fa:05:59:57:bb:0c:2c:
                    33:5a:23:c0:bd:0e:04:30:e2:a0:2b:7c:c7:2f:9d:
                    d3:89:1f:67:41:87:fa:46:6d:ac:2b:f2:16:9f:49:
                    8d:fa:b5:1f:32:a2:a3:5c:33:c9:01:fe:16:c9:60:
                    30:4e:f9:dd:25:88:c6:ac:83:77:c3:77:3e:46:fa:
                    ef:6f:f0:18:f3:16:3d:c4:ce:fc:10:df:3b:39:8f:
                    6e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:03:89:9D:F6:F0:0B:BF:9C:D6:B5:43:69:3E:DC:B8:F1:71:0F:0A
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         91:e9:3e:1d:05:e1:5d:3f:6c:e3:3f:ed:bc:57:12:3e:70:57:
         63:7a:41:4b:95:04:03:76:4e:9d:22:11:40:62:c6:af:1d:c7:
         13:bd:b4:b7:f4:3d:54:13:b1:a1:53:09:ed:cb:ec:9f:16:ae:
         e1:b5:85:04:8c:94:88:e3:fa:a2:32:87:2a:fb:b7:e2:95:71:
         42:e8:83:b2:d8:a8:ea:f6:29:31:1d:16:0f:d5:0b:99:c5:9c:
         fd:a7:ee:8e:44:36:b9:fb:92:c6:c9:c3:12:bb:be:93:05:6e:
         b8:74:2a:ed:7c:90:28:1d:fc:3e:2c:ea:c1:50:ce:2b:ae:11:
         f2:4b:f2:3b:eb:0e:7b:c9:57:e0:c4:2d:fe:82:78:2b:1e:db:
         0a:17:03:b8:d1:13:41:05:91:a9:f0:37:34:58:58:02:a9:25:
         cb:15:4b:e0:70:17:94:0a:c0:43:a6:99:78:9e:24:3c:6d:38:
         d9:bc:28:d9:d6:bb:8e:41:b6:1c:97:de:79:a6:9a:4c:32:29:
         be:ec:6a:a1:c4:bd:e9:b5:ec:52:31:91:ad:18:e0:8c:1e:1f:
         3a:7c:66:af:89:ba:ee:68:74:36:1d:c9:ff:fd:cd:ea:24:7b:
         69:55:60:f3:f9:2c:d5:ae:08:c9:48:e6:fa:2c:e5:0d:54:dc:
         ef:35:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----