Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383032303a3a2f34342d3434203d3e20313939323033.roa
File:                     326131333a633030373a383032303a3a2f34342d3434203d3e20313939323033.roa (raw, json)
Hash identifier:          Mwq3LM2KaPoMb9+/PAEBx3xt4kFyy2K1hKCFXjmIi+o=
Subject key identifier:   31:EB:11:E5:B6:DB:45:1A:11:AE:6B:0D:69:BB:B6:FB:E2:32:96:4A
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       7CB1A82CB3211EAB3C3A9C6C9EB707AB36E0F4BA
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383032303a3a2f34342d3434203d3e20313939323033.roa
Signing time:             Mon 10 Apr 2023 03:31:25 +0000
ROA not before:           Mon 10 Apr 2023 03:26:25 +0000
ROA not after:            Mon 08 Apr 2024 03:31:25 +0000
asID:                     199203
IP address blocks:        2a13:c007:8020::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b1:a8:2c:b3:21:1e:ab:3c:3a:9c:6c:9e:b7:07:ab:36:e0:f4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:25 2023 GMT
            Not After : Apr  8 03:31:25 2024 GMT
        Subject: CN=31EB11E5B6DB451A11AE6B0D69BBB6FBE232964A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:59:f4:13:7d:27:58:84:35:ed:54:17:c5:
                    36:82:d0:6c:e1:ca:c5:09:4f:50:e8:6d:c4:be:0d:
                    46:7f:9b:11:8c:6f:f4:40:d4:a8:f5:73:04:e6:6b:
                    c2:f7:65:d3:42:43:78:3d:cd:23:46:cc:a3:1d:38:
                    0c:be:cb:fa:0b:15:2d:cc:14:66:1e:40:c1:9c:5a:
                    99:8c:b9:2d:e2:1a:cb:c5:8e:d6:5b:5a:4d:bf:17:
                    d6:3a:6a:84:86:59:a5:35:70:d2:4d:ed:cb:c1:b6:
                    84:2e:15:de:88:ec:d6:1a:9a:76:e0:a9:e8:88:7e:
                    e9:0b:99:26:73:b9:3f:43:fb:40:a1:0c:a3:aa:2d:
                    37:ba:3e:8f:b2:42:f9:6c:34:63:a2:c8:8a:6c:f7:
                    8f:62:0e:07:f7:93:54:24:6c:22:2a:db:ef:18:61:
                    16:57:c3:4a:ed:64:4c:cb:f0:b0:2b:ba:68:d9:57:
                    9b:17:b5:b3:1b:82:5f:f7:82:8c:0a:a0:6c:a4:ae:
                    a8:50:fe:c5:0b:5d:0e:dd:be:68:56:68:65:a5:31:
                    2a:9f:8e:d0:a8:15:de:e3:c6:cf:db:99:b4:49:fc:
                    cc:a7:a0:24:79:59:2f:e7:1f:c9:c5:08:45:ff:d0:
                    0f:3f:b1:9a:17:c8:5c:5b:0d:25:77:57:ff:a3:99:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EB:11:E5:B6:DB:45:1A:11:AE:6B:0D:69:BB:B6:FB:E2:32:96:4A
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383032303a3a2f34342d3434203d3e20313939323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8020::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:2c:5d:7e:57:73:19:54:8a:eb:75:0a:4f:be:15:d1:82:89:
         07:61:36:62:f3:d1:e2:57:4e:08:b3:d5:4a:03:9f:d8:05:0b:
         f4:d1:12:50:2f:67:55:26:c7:0f:a3:31:9d:6e:9d:80:6f:a7:
         4e:96:5c:a8:73:ab:6b:59:a3:a8:3f:2c:18:81:65:f9:30:46:
         4f:da:22:de:62:b2:0f:66:26:51:f5:33:3b:ab:1e:04:d9:8c:
         94:95:b7:21:1f:65:6a:34:0a:29:b4:f8:2e:c5:e2:bb:25:e4:
         92:e2:a2:5b:6f:58:99:f5:5b:14:0f:ba:4d:d9:58:de:f4:e9:
         1d:4a:1d:98:e9:56:ea:8e:6b:75:cf:72:a5:47:01:a7:b8:36:
         8e:10:b3:e8:94:1b:8f:96:58:ee:f7:54:d6:7d:77:62:80:08:
         31:47:5d:30:74:55:37:f7:de:a0:03:b1:fa:d7:19:8d:29:4a:
         50:3f:3e:1f:33:93:14:9c:a7:ab:07:46:54:3b:da:33:19:a8:
         ca:51:ca:7b:aa:30:31:24:8a:0b:c4:42:47:8d:82:a5:91:5b:
         f4:07:db:08:e2:63:75:c5:d0:2f:14:fd:d3:fe:f8:b8:2c:00:
         13:c3:72:21:44:cc:71:18:17:e3:93:b1:3e:8f:b5:91:ae:c3:
         da:33:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----