Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa
File:                     326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa (raw, json)
Hash identifier:          Af4uhebmVy2AjCfocGUvXP3IatqBYBHWddXqVKWTGhA=
Subject key identifier:   38:A7:91:86:A6:AF:72:01:7A:AE:E5:E6:FA:1B:35:61:B1:95:E9:53
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       65FA05BC7C6E3450CC3BED7EB271E36A47B6D6D8
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa
Signing time:             Mon 10 Apr 2023 03:31:24 +0000
ROA not before:           Mon 10 Apr 2023 03:26:24 +0000
ROA not after:            Mon 08 Apr 2024 03:31:24 +0000
asID:                     199471
IP address blocks:        2a13:c007:8012::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fa:05:bc:7c:6e:34:50:cc:3b:ed:7e:b2:71:e3:6a:47:b6:d6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:24 2023 GMT
            Not After : Apr  8 03:31:24 2024 GMT
        Subject: CN=38A79186A6AF72017AAEE5E6FA1B3561B195E953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:79:c6:ee:71:df:39:77:e7:61:e0:47:b3:6e:
                    43:a2:fe:21:07:38:a3:16:4f:99:2d:5a:76:5d:4c:
                    72:65:e5:0a:92:3e:ee:0f:3a:f9:14:92:d7:a2:f2:
                    9b:ec:71:bd:57:d1:61:11:4e:cc:bf:84:e3:92:1f:
                    35:b5:15:b7:2d:08:35:8b:01:f6:6d:47:1b:69:15:
                    51:42:46:e2:c2:2d:c3:b7:6a:b3:f3:6b:a9:82:5e:
                    ac:e1:d0:ba:2d:87:b7:76:22:38:17:f8:d4:78:73:
                    d4:c6:be:a6:bc:76:e5:83:18:b4:f7:70:4b:8e:94:
                    1c:90:2a:8a:fa:14:93:d6:1a:45:0f:2d:d9:a6:d5:
                    89:00:9e:ae:05:fc:03:bc:ae:6d:6a:4e:5f:80:17:
                    b4:8e:3a:e4:d9:3a:5f:d6:a6:ff:b0:72:d5:8b:47:
                    3f:af:55:43:74:ff:b0:0f:5e:aa:9d:15:8c:e3:e9:
                    ea:99:9b:8d:49:7a:2f:fe:ac:08:3b:52:d6:67:fb:
                    4e:c8:2e:92:9f:b8:83:59:2d:5f:35:2e:1a:ad:b5:
                    63:87:b6:51:cd:08:fd:28:a2:db:c8:06:dc:dd:cc:
                    9b:2f:32:93:39:1e:57:95:32:d4:d6:2b:75:04:c8:
                    cf:9c:e6:bc:5e:67:b8:de:90:25:2d:b1:16:e0:dc:
                    31:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A7:91:86:A6:AF:72:01:7A:AE:E5:E6:FA:1B:35:61:B1:95:E9:53
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8012::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:e0:fe:aa:33:e0:6b:23:57:7b:9d:07:fa:80:75:a5:1a:
         a2:87:38:a8:9d:cb:d4:b9:be:83:27:16:4a:9b:7b:79:52:3d:
         c2:f3:d6:60:67:89:6b:16:d2:c0:23:f2:b3:26:97:21:0e:ca:
         81:6c:f7:7e:dd:62:15:8a:6e:0d:5c:d1:f7:9e:d9:14:13:2d:
         cc:54:a3:53:8c:69:b9:fc:ca:a4:b0:58:06:38:44:91:aa:9b:
         18:13:80:34:31:0e:2b:10:6d:09:d5:43:78:8b:9c:5e:80:50:
         30:7d:c0:6f:08:34:c3:37:93:57:98:63:f1:27:55:8d:04:f9:
         af:b7:a0:8d:84:91:85:3a:3e:29:41:64:59:05:22:87:f0:05:
         3d:d4:a9:4d:bd:42:09:60:ff:4f:cf:4f:8f:d4:83:57:4a:2c:
         c3:d7:6b:20:bc:1b:46:f5:58:6c:96:60:7e:8c:ff:11:1c:3b:
         b5:15:50:a9:67:e1:9e:31:e4:21:f0:6c:fc:d8:26:10:42:d1:
         82:f2:1d:75:13:08:e4:ca:cf:da:72:1d:00:b6:e2:4f:0a:7a:
         70:f9:f2:be:f7:84:e9:d0:e4:7a:81:0e:47:fb:da:fc:d8:90:
         58:99:ba:5c:66:b4:90:33:6e:a6:73:cd:62:40:a3:12:96:d1:
         f7:b7:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----