Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383930303a3a2f34302d3430203d3e20313939313732.roa
File:                     326131333a633030373a383930303a3a2f34302d3430203d3e20313939313732.roa (raw, json)
Hash identifier:          n9tikvxv2pipIESgXa+Q26Xwt22ZW1+PJHjBkzTkOPc=
Subject key identifier:   DA:8B:67:06:21:B1:B9:86:4F:22:32:88:7C:A0:74:34:E6:9D:CF:D5
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       4D79E07E14813CB3BDC12901AC8EA96524516B2D
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383930303a3a2f34302d3430203d3e20313939313732.roa
Signing time:             Mon 10 Apr 2023 03:31:24 +0000
ROA not before:           Mon 10 Apr 2023 03:26:24 +0000
ROA not after:            Mon 08 Apr 2024 03:31:24 +0000
asID:                     199172
IP address blocks:        2a13:c007:8900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:79:e0:7e:14:81:3c:b3:bd:c1:29:01:ac:8e:a9:65:24:51:6b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:24 2023 GMT
            Not After : Apr  8 03:31:24 2024 GMT
        Subject: CN=DA8B670621B1B9864F2232887CA07434E69DCFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:1d:76:7f:8f:e1:5d:1d:23:ff:8d:87:f3:
                    3d:59:dc:c7:b8:74:7c:2e:44:10:06:7e:70:28:aa:
                    66:80:61:67:82:0d:d4:d9:30:23:af:81:7e:4f:cc:
                    27:cc:c8:2a:25:ae:13:6b:76:26:1d:d6:1b:14:a5:
                    fe:c7:e5:82:6c:1e:33:2b:6b:b4:8d:cf:d1:e8:07:
                    b6:b6:7c:0c:f8:f6:01:ec:e2:f5:39:db:a6:f7:25:
                    40:2f:50:fd:d0:92:03:dc:02:15:b2:84:49:76:e3:
                    7b:5e:91:20:b3:b5:6d:dc:f2:b5:56:ee:63:17:83:
                    11:c9:1c:e1:69:86:47:ed:84:59:b3:27:39:bc:a1:
                    35:ea:62:90:e7:90:ae:8e:d9:22:b6:4f:96:43:58:
                    1c:c1:d7:35:59:fe:b6:6d:ef:98:ea:75:60:1b:d8:
                    05:b8:6d:5a:cf:6a:82:ea:55:7d:66:c7:4f:7d:c6:
                    b3:01:29:10:5e:3e:be:3d:82:bd:ab:46:55:2b:2f:
                    c9:78:dc:d0:01:f5:a2:2d:af:ae:35:54:bd:86:56:
                    56:1c:2e:cf:5d:3d:59:2d:38:d9:5e:13:16:ef:ce:
                    fb:07:78:88:5b:13:17:08:dd:e3:d9:dd:70:bd:8e:
                    c3:6b:a3:09:b6:5a:32:19:1e:79:6b:30:7a:2c:95:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8B:67:06:21:B1:B9:86:4F:22:32:88:7C:A0:74:34:E6:9D:CF:D5
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383930303a3a2f34302d3430203d3e20313939313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:ae:0d:2e:1b:5a:5c:be:a9:5b:c5:06:96:91:0e:c3:c3:89:
         d6:0a:81:56:7f:78:f2:9d:ef:79:29:b9:2f:63:41:71:05:98:
         76:59:bb:80:13:1a:c9:16:ee:f7:c8:84:81:54:d7:59:ee:d1:
         74:fc:76:b7:90:60:0b:53:b2:9d:71:9b:cd:4a:b4:9d:7f:af:
         1a:45:a7:42:c8:46:18:73:92:ce:04:f5:75:75:af:58:9d:3a:
         c6:97:a1:ac:d2:fb:fb:16:42:23:67:a9:f1:0a:1d:b1:18:ad:
         e5:2f:03:82:be:b3:47:b6:b9:3e:ae:4c:ae:c9:7c:73:e0:c7:
         26:5a:df:a7:2b:33:2e:47:d3:aa:93:6b:42:06:b7:f1:e1:e3:
         2b:4d:43:52:ac:a6:13:db:f9:c5:08:ab:57:49:89:78:f7:e7:
         6d:68:4e:83:6b:69:b5:4a:93:dc:bd:fa:b2:f9:f3:a7:18:07:
         55:b9:5c:fd:66:c4:95:b8:a5:4d:f1:13:51:75:5a:27:f4:ef:
         91:0c:3d:59:a7:f4:f1:c3:cc:ac:bd:ba:9b:55:43:28:79:5e:
         79:62:f2:b4:a5:65:79:fb:23:ef:3b:6f:71:89:96:a4:c3:23:
         d9:e4:b6:31:44:fc:40:66:f4:15:30:f5:df:7c:f1:0a:74:30:
         d6:ce:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----