Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383039303a3a2f34342d3438203d3e20313939323237.roa
File:                     326131333a633030373a383039303a3a2f34342d3438203d3e20313939323237.roa (raw, json)
Hash identifier:          IDwY0IOQ/UmqxgyGxJq+bVy6SxazBBoejbKK39o0kWk=
Subject key identifier:   61:45:E3:D3:7B:C3:EE:52:74:D0:D9:15:9F:9E:31:5C:32:EB:AD:BA
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       26C861D8D32DD24F1D2EBC4DD708CACF92F3F980
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383039303a3a2f34342d3438203d3e20313939323237.roa
Signing time:             Mon 10 Apr 2023 03:31:21 +0000
ROA not before:           Mon 10 Apr 2023 03:26:21 +0000
ROA not after:            Mon 08 Apr 2024 03:31:21 +0000
asID:                     199227
IP address blocks:        2a13:c007:8090::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c8:61:d8:d3:2d:d2:4f:1d:2e:bc:4d:d7:08:ca:cf:92:f3:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:21 2023 GMT
            Not After : Apr  8 03:31:21 2024 GMT
        Subject: CN=6145E3D37BC3EE5274D0D9159F9E315C32EBADBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:db:d3:d4:74:0e:ee:b4:4f:0d:4f:cb:4b:
                    fe:10:0c:26:f9:cf:a1:64:4d:2a:73:ef:4f:cf:64:
                    d1:5a:2e:b0:61:3b:fd:90:9f:c7:d9:4e:66:cb:5f:
                    9c:e1:6d:11:2e:11:88:6d:d8:ce:7b:88:c6:ec:3f:
                    0c:9c:6a:94:fc:b5:ee:ed:64:9a:ae:95:dc:1d:e5:
                    47:55:88:97:42:cb:e5:42:ce:71:38:8e:64:d4:11:
                    b3:6f:c7:6b:c3:7a:48:95:a9:a3:42:04:bb:7d:83:
                    ce:d4:8d:10:3f:ab:7a:9a:0a:1a:ab:5a:5c:d5:0a:
                    a3:a7:48:66:a1:b0:4c:5a:8d:97:d2:5b:fc:6e:d7:
                    06:2c:8e:e0:ce:5a:b3:ab:3a:66:ee:10:31:0c:d4:
                    7c:14:d0:56:f5:aa:37:f2:ff:88:38:89:b3:5d:56:
                    24:66:3f:7f:4a:e8:f3:e8:ea:f1:87:65:44:3f:d8:
                    74:cf:92:7e:2c:e3:6b:67:0c:51:14:b5:36:a2:65:
                    e8:3a:32:23:b8:b1:62:26:4c:d3:6a:17:29:e5:b1:
                    92:a7:2b:89:23:18:d9:74:6b:4f:49:78:5e:02:8d:
                    49:2f:eb:3c:3b:f8:1a:1b:4f:6e:34:fa:8c:51:95:
                    35:ec:97:96:b5:87:52:30:28:ea:a9:66:ae:f6:f1:
                    4c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:45:E3:D3:7B:C3:EE:52:74:D0:D9:15:9F:9E:31:5C:32:EB:AD:BA
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383039303a3a2f34342d3438203d3e20313939323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8090::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:33:69:fd:b6:af:c4:cf:a1:ee:9c:a9:27:2b:e3:3b:54:
         8a:f8:dd:e0:d8:1a:41:a4:2b:77:dd:a7:31:a2:d8:87:3e:81:
         87:ef:a0:f7:75:a0:c4:5b:92:ee:71:bd:8d:c2:53:f6:fa:b1:
         7d:93:11:0c:92:00:96:83:02:c2:1c:98:9b:d4:49:b5:72:f1:
         18:8b:30:dc:1c:8e:30:03:ac:6e:e7:08:c7:6b:e7:b8:ec:57:
         7a:35:70:ce:bd:9d:57:6f:6c:78:87:22:2b:2d:9e:8f:a7:bb:
         ab:67:5d:7c:c6:f1:f0:4e:0b:5c:34:99:22:c9:7b:b1:0f:5c:
         74:76:60:18:23:f8:b3:64:84:93:c0:38:7e:12:f5:fc:a3:44:
         05:2c:d3:f3:da:29:9f:89:fe:b0:8a:ee:4b:99:4b:99:0c:cc:
         fb:9f:ed:da:ff:ec:5b:56:bf:b3:d4:f2:7d:62:11:f3:1d:6d:
         be:35:6d:8f:14:8b:6e:70:ca:3a:50:b0:31:51:d4:b5:4a:39:
         96:da:40:0e:e3:4a:c4:1e:b3:0c:bc:87:57:f1:14:da:77:36:
         40:1c:2d:cf:30:0d:67:17:df:4e:f3:79:19:f4:5b:ff:d1:6c:
         84:0c:f4:8e:67:b3:c9:de:ff:fd:23:6f:3f:3d:f0:8a:3d:b4:
         64:df:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----