Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa
File:                     326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa (raw, json)
Hash identifier:          6dUtIOrO4qYdCSB4TAnzsN3J9uLXMzkvVD7V0lJPbNo=
Subject key identifier:   F5:BD:63:22:67:1C:A1:3E:AD:05:4B:3A:70:8F:CE:55:D7:91:4E:D3
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       5CF4F87657F7CAA0BDAD20D90F0EF6EE02447591
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa
Signing time:             Mon 10 Apr 2023 03:31:24 +0000
ROA not before:           Mon 10 Apr 2023 03:26:24 +0000
ROA not after:            Mon 08 Apr 2024 03:31:24 +0000
asID:                     199037
IP address blocks:        2a13:c007:8019::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f4:f8:76:57:f7:ca:a0:bd:ad:20:d9:0f:0e:f6:ee:02:44:75:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:24 2023 GMT
            Not After : Apr  8 03:31:24 2024 GMT
        Subject: CN=F5BD6322671CA13EAD054B3A708FCE55D7914ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:5e:63:82:2b:f1:3a:ce:fd:84:0e:e4:01:
                    4d:ec:d9:49:7a:46:07:4e:0c:34:40:0a:46:78:56:
                    e7:8a:9b:03:aa:16:b9:1a:10:68:14:e0:19:8a:90:
                    98:99:20:3c:1f:01:84:47:2d:77:02:53:05:97:8c:
                    8f:cb:c4:50:ef:a5:42:21:fb:06:5b:1f:39:0f:32:
                    06:b6:c9:2d:36:2a:07:ee:66:b4:a3:e4:6f:e3:04:
                    88:25:58:25:83:a6:68:34:36:2e:0e:27:f5:43:db:
                    57:54:bd:4c:44:68:47:1e:92:82:b5:17:74:35:0a:
                    d2:ee:ec:5d:d0:dc:06:5c:44:4a:35:02:ac:58:a1:
                    70:b1:05:eb:f6:74:9b:a4:0a:2a:72:9d:08:db:96:
                    6c:71:61:77:b1:64:ac:18:d4:d1:b1:e5:84:d6:af:
                    2f:49:b8:02:b0:2a:90:cf:32:08:86:89:98:8e:f4:
                    cd:5b:29:bb:e1:63:d9:f4:60:57:6a:c2:d6:cb:49:
                    85:66:74:26:32:d1:8c:ed:5b:e5:02:14:ac:a3:c8:
                    cb:7d:7a:20:41:ae:a1:f8:58:12:02:cf:03:13:75:
                    1c:b8:ee:e3:e1:fa:95:ba:9d:0e:53:54:c7:4a:85:
                    c5:10:6b:87:1f:78:b2:1b:79:d1:f5:49:02:ec:5d:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BD:63:22:67:1C:A1:3E:AD:05:4B:3A:70:8F:CE:55:D7:91:4E:D3
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8019::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:07:a5:9e:d4:fa:54:0a:f3:59:b7:ac:ac:4c:4a:06:ea:2c:
         31:30:5e:73:3a:e4:d6:23:77:7f:d2:fc:96:9d:0a:5f:2a:dc:
         35:3b:18:e7:f6:4d:85:08:6a:ef:02:f3:4b:89:eb:60:96:2c:
         41:49:db:b4:32:08:67:8a:40:66:cc:02:4f:fe:8d:d5:a7:b5:
         f9:33:8a:71:7e:52:e0:99:3b:50:25:62:79:e0:6d:18:35:dd:
         ef:3d:d4:5d:03:b7:92:10:b6:43:ae:32:3c:b3:8a:34:51:75:
         7f:d4:74:49:94:05:8f:d1:79:3d:be:d0:0f:cf:b6:b5:ab:08:
         75:e1:51:17:02:d2:ec:1d:f3:4f:2a:34:07:54:f9:6c:83:00:
         cc:c9:90:45:2a:1e:9b:09:ce:b8:ec:8c:69:7a:9c:68:1f:8c:
         38:1f:2d:af:fd:3f:12:a6:b8:00:d8:62:3a:ba:87:0e:b2:52:
         f2:2d:ee:2a:a8:e3:74:28:1e:a7:91:c0:98:64:6c:19:46:a0:
         03:0d:58:e0:52:40:20:43:00:a0:66:16:9f:d9:46:bb:f1:22:
         02:d7:a6:ce:2a:2f:9d:5d:f2:0f:98:ac:f6:d7:24:05:b2:de:
         ea:e1:c9:6f:1d:39:c1:da:89:94:17:33:12:db:d5:ff:16:47:
         4f:cd:68:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----