Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383034303a3a2f34342d3438203d3e20313939303335.roa
File:                     326131333a633030373a383034303a3a2f34342d3438203d3e20313939303335.roa (raw, json)
Hash identifier:          bxHzIPYF5vbEouguxxJwptDfFHtLNs/In6lffunC9Vc=
Subject key identifier:   DE:FF:06:25:D3:16:F9:B5:79:5C:E6:77:99:7D:28:50:1F:33:7B:0E
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       3C48E83ADDB2B34B93354D298522E90059879C3E
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383034303a3a2f34342d3438203d3e20313939303335.roa
Signing time:             Mon 10 Apr 2023 03:31:24 +0000
ROA not before:           Mon 10 Apr 2023 03:26:24 +0000
ROA not after:            Mon 08 Apr 2024 03:31:24 +0000
asID:                     199035
IP address blocks:        2a13:c007:8040::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:48:e8:3a:dd:b2:b3:4b:93:35:4d:29:85:22:e9:00:59:87:9c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:24 2023 GMT
            Not After : Apr  8 03:31:24 2024 GMT
        Subject: CN=DEFF0625D316F9B5795CE677997D28501F337B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:22:42:20:63:f3:9f:d1:d0:e0:08:30:4f:
                    e0:e7:ca:3c:e2:da:e8:4f:59:4d:4f:c1:d9:3e:2e:
                    9c:01:cd:a2:a1:ce:7e:a6:57:b5:de:36:a3:3e:9c:
                    4e:09:3a:4a:dc:04:43:1b:b2:2f:b1:bf:e1:25:f5:
                    ee:bb:ff:60:10:fe:f4:f1:1c:fb:1d:45:cf:11:9b:
                    42:c0:19:d5:ab:70:b3:59:6d:a7:04:ba:2c:2e:d7:
                    b1:ea:b7:4b:db:dc:02:6f:5f:d3:4a:3c:d2:0a:3e:
                    f8:9b:a4:53:b8:77:66:58:6e:07:ca:01:7a:d8:22:
                    67:a2:0d:ca:cc:85:da:92:15:b4:2b:ba:17:fc:2f:
                    22:38:9d:fa:ae:b0:7b:1c:03:92:90:25:4a:07:c3:
                    2b:ba:74:0f:94:79:34:26:16:6c:eb:0b:a8:d3:d5:
                    3e:b0:77:1e:8e:e6:56:d7:fb:67:54:f4:c6:1d:e9:
                    61:9e:7a:44:4f:54:e8:72:84:e6:ac:29:ad:8f:55:
                    af:3c:69:31:e7:48:db:2a:af:77:54:60:ad:c0:db:
                    d7:d8:a4:9c:43:fb:38:74:85:ad:8c:27:23:39:c1:
                    b8:7e:ac:7d:30:35:66:fc:32:9f:61:2a:2b:49:64:
                    d9:3c:78:07:8b:06:b0:34:06:6a:21:c8:e3:9e:72:
                    01:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FF:06:25:D3:16:F9:B5:79:5C:E6:77:99:7D:28:50:1F:33:7B:0E
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383034303a3a2f34342d3438203d3e20313939303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8040::/44

    Signature Algorithm: sha256WithRSAEncryption
         a2:4d:5c:71:69:27:84:58:47:c5:e6:82:c8:0d:d7:be:20:de:
         25:f4:29:c1:77:ee:86:f4:e4:2b:97:a4:e0:eb:ea:9a:15:8b:
         90:05:42:e1:fb:c1:e9:76:1e:ed:e1:09:38:0a:84:d9:ba:95:
         4a:9a:3b:96:6d:af:f0:d2:23:1c:17:bf:c6:df:f9:af:fe:78:
         93:bb:56:0f:c9:5c:ec:18:f7:89:5a:fa:aa:d4:d8:c9:70:31:
         9b:ca:ae:98:a7:08:0c:b9:7f:1b:a1:7f:f6:af:cd:69:db:bf:
         7c:79:28:96:8b:80:65:32:f5:1b:dd:de:43:2b:d2:af:04:79:
         7f:09:6f:51:fe:ba:15:22:42:a3:70:b8:d9:52:8b:88:8b:d0:
         ce:a1:aa:05:8c:5e:c3:53:ab:a2:9a:25:90:78:e3:f7:d8:c6:
         b1:d4:8a:b7:ef:4e:fa:35:0b:2d:6c:31:f4:15:4c:4e:d7:8e:
         ba:8b:9c:9c:87:03:d3:4a:fc:66:3e:60:ba:02:b2:e0:85:a1:
         f4:0c:03:3c:5d:53:8f:98:36:ba:e4:da:ec:c1:9c:cc:e2:b0:
         37:dd:7b:7c:ab:d4:1f:55:4e:31:93:e9:a5:a6:96:57:f3:7f:
         ff:a4:a5:84:ac:55:4b:d4:2d:cc:15:58:93:3d:83:8f:07:15:
         9f:ec:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----