Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383031613a3a2f34382d3438203d3e20313939303532.roa
File:                     326131333a633030373a383031613a3a2f34382d3438203d3e20313939303532.roa (raw, json)
Hash identifier:          nx4tABAuGb2vvlxoiX2TetiavuVGcszvRJQM6GRBQyA=
Subject key identifier:   68:8B:C0:CF:34:EE:D1:44:17:45:50:E7:06:2C:CC:24:DF:03:9B:D0
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       1BE5153659F4FA8423E07DC9BBC4BE5F29F09ABC
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383031613a3a2f34382d3438203d3e20313939303532.roa
Signing time:             Mon 10 Apr 2023 03:31:22 +0000
ROA not before:           Mon 10 Apr 2023 03:26:22 +0000
ROA not after:            Mon 08 Apr 2024 03:31:22 +0000
asID:                     199052
IP address blocks:        2a13:c007:801a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e5:15:36:59:f4:fa:84:23:e0:7d:c9:bb:c4:be:5f:29:f0:9a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:22 2023 GMT
            Not After : Apr  8 03:31:22 2024 GMT
        Subject: CN=688BC0CF34EED144174550E7062CCC24DF039BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:52:96:d3:c4:a7:09:92:18:e7:73:b2:55:
                    64:32:5c:d5:19:07:2e:95:b6:d5:47:4e:7c:07:be:
                    fb:d1:f1:53:ce:85:f1:e6:14:8b:13:da:69:3c:57:
                    75:9f:c0:14:b4:9e:d6:af:ec:3d:b0:df:1f:8e:34:
                    aa:d7:00:bf:08:0e:b8:87:9e:fc:19:c6:d9:a8:45:
                    c5:34:98:13:26:9d:a5:31:34:19:be:44:70:54:7c:
                    e2:9c:b3:1e:34:c4:10:9f:b1:18:03:9f:78:69:4f:
                    e4:81:cb:56:92:d5:83:e9:79:fe:88:4b:14:50:3e:
                    a1:f8:1f:1b:c8:dc:ff:a9:01:93:08:19:ea:a3:2c:
                    cd:c9:49:b6:8d:26:af:8a:96:0d:22:43:4f:21:b5:
                    ba:b4:76:50:8d:32:81:9a:c9:36:a6:da:ef:69:54:
                    46:95:4c:ed:4c:88:01:18:f1:a0:ca:07:f9:b8:b7:
                    a7:26:4c:f6:94:dd:d9:6f:1f:89:77:37:ee:83:59:
                    b0:3a:40:69:53:90:96:30:56:ff:53:f5:0c:d3:1b:
                    fc:ee:c9:24:26:97:c6:6c:0c:f3:ad:de:9e:46:0d:
                    24:5b:32:2f:99:d6:b6:f3:d8:cb:39:0a:c3:7c:a6:
                    2c:5f:05:42:66:5c:36:a2:96:b3:6d:df:78:26:67:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8B:C0:CF:34:EE:D1:44:17:45:50:E7:06:2C:CC:24:DF:03:9B:D0
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383031613a3a2f34382d3438203d3e20313939303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:801a::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:25:97:a6:d4:23:d6:22:0d:af:2b:7c:fa:f8:9a:01:93:d6:
         84:c0:ee:bd:e7:98:02:f4:ef:34:d3:2a:95:80:67:19:fb:bc:
         73:6d:bd:6e:ab:83:37:9a:a0:33:7c:46:29:5e:c3:59:4b:9b:
         f1:14:15:1f:30:96:48:5b:d5:98:c5:0b:ec:56:ce:49:f9:b2:
         aa:b9:46:d7:1c:1f:fd:ad:1d:ec:59:d1:62:cd:e7:2d:43:28:
         d7:8b:21:33:f7:4f:b8:6a:11:7f:77:37:d1:96:70:82:0a:b7:
         3f:d3:42:ce:02:03:27:c2:8b:b2:77:f2:fe:cd:85:60:51:41:
         ae:0f:28:a8:05:c3:3e:d1:ea:3d:bb:b8:98:95:96:5b:38:9e:
         6f:f0:1c:06:52:3e:79:ee:f7:42:54:7d:e0:6c:c5:96:c1:87:
         21:13:a4:c8:f5:81:77:e8:17:5b:0e:b2:67:e0:b7:f5:2f:7a:
         9f:4f:2b:a2:dd:b1:33:cc:42:ff:d0:8d:27:42:df:79:75:f7:
         dc:47:27:d5:18:e1:e4:4c:98:1e:17:c7:1e:45:7c:f9:12:fe:
         72:8f:19:da:eb:f4:89:84:b0:8c:34:7e:c2:1d:ae:ed:8b:dd:
         5c:07:4f:94:ac:c8:d7:e5:2d:e5:d2:89:aa:77:e0:f0:f4:7e:
         89:6a:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----