Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/13/3130342e33372e34322e302f32332d3233203d3e203530303538.roa
File:                     3130342e33372e34322e302f32332d3233203d3e203530303538.roa (raw, json)
Hash identifier:          0yFBzAKxFkZm+Yt4tk8GlHIqzpKNLfvafDKSLOlgVJI=
Subject key identifier:   4C:B4:CB:74:F1:86:3D:61:2D:32:77:6B:CA:EE:25:EA:C1:4E:6E:23
Certificate issuer:       /CN=2CA7ECD419E28CD586D408C2CC54157A7A586FB6
Certificate serial:       727E32EB9C7C98252B07A717DE4D052DAF77E333
Authority key identifier: 2C:A7:EC:D4:19:E2:8C:D5:86:D4:08:C2:CC:54:15:7A:7A:58:6F:B6
Authority info access:    rsync://rpki.co/repo/HYSP/11/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.cer
Subject info access:      rsync://rpki.co/repo/August/13/3130342e33372e34322e302f32332d3233203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 09:22:02 +0000
ROA not before:           Sat 08 Apr 2023 09:17:02 +0000
ROA not after:            Sat 06 Apr 2024 09:22:02 +0000
asID:                     50058
IP address blocks:        104.37.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7e:32:eb:9c:7c:98:25:2b:07:a7:17:de:4d:05:2d:af:77:e3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA7ECD419E28CD586D408C2CC54157A7A586FB6
        Validity
            Not Before: Apr  8 09:17:02 2023 GMT
            Not After : Apr  6 09:22:02 2024 GMT
        Subject: CN=4CB4CB74F1863D612D32776BCAEE25EAC14E6E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:37:75:ce:9b:74:df:26:c5:3a:aa:e6:c1:
                    66:9d:e2:cb:c0:6d:89:df:65:bc:da:2f:da:d5:94:
                    4b:4c:62:b5:38:be:82:eb:8b:6d:a9:a9:c7:e9:43:
                    1b:7f:ae:6c:fc:1a:44:62:e9:6f:3a:83:37:88:0a:
                    59:d3:a9:27:84:ad:e8:b2:60:1a:00:b0:a2:8d:ce:
                    82:b2:45:20:93:1f:68:06:69:a3:e6:e3:3b:32:98:
                    d1:d8:8a:63:6f:5f:49:3e:96:5f:16:14:00:87:41:
                    a7:77:c6:64:9a:28:32:f6:6f:31:51:35:c9:e6:3f:
                    20:93:d3:9d:4c:fa:22:6c:54:85:bd:48:be:0d:38:
                    d8:1a:a9:8b:ea:50:aa:a8:fe:d1:41:00:3c:9e:a5:
                    6e:c7:b6:13:d5:64:ae:2d:8d:26:56:3a:74:83:b0:
                    88:44:37:9c:bf:06:e3:52:b3:00:1a:c9:b3:ae:d0:
                    47:d1:aa:39:d1:e5:eb:d5:bb:7f:3e:b9:ed:58:66:
                    a3:89:3f:f7:34:4d:87:07:dc:95:7a:df:d5:42:fd:
                    4c:5a:6e:fc:18:c2:7a:a2:a0:d7:c8:cd:f0:0e:29:
                    f3:57:e9:db:e0:de:bc:53:11:05:67:62:f9:f1:43:
                    33:d8:86:34:2c:3a:f1:f6:a1:a2:52:5a:e3:be:c6:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B4:CB:74:F1:86:3D:61:2D:32:77:6B:CA:EE:25:EA:C1:4E:6E:23
            X509v3 Authority Key Identifier:
                keyid:2C:A7:EC:D4:19:E2:8C:D5:86:D4:08:C2:CC:54:15:7A:7A:58:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/13/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/11/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/13/3130342e33372e34322e302f32332d3233203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:94:41:53:99:70:6f:f3:25:bd:ce:24:f5:a1:fa:80:96:ee:
         65:de:fb:df:b7:9f:84:5b:e8:9e:56:89:82:85:80:66:84:70:
         ce:b0:8d:be:37:43:3f:1f:13:5e:cf:12:bb:ef:97:87:d5:d0:
         8c:d2:db:4f:2f:d3:a2:80:d8:78:5b:f8:2d:b2:5e:53:ad:20:
         e7:96:d8:b8:81:b7:41:6f:7a:11:af:e5:72:f1:37:6a:2f:60:
         52:51:da:49:3d:8d:bd:58:22:2c:c6:cd:a2:5f:e6:5b:24:06:
         ad:37:b1:57:b5:87:16:ac:ca:ce:b9:b6:16:d3:67:e7:7a:60:
         e8:40:d5:d5:a5:de:b9:7f:f0:5a:09:fd:c8:c0:b2:03:c6:40:
         cb:ca:8c:4d:90:3a:13:8f:9b:3e:fc:9d:62:9d:cf:cf:54:f4:
         e1:4e:42:64:b7:de:39:5f:e4:dc:49:f7:0c:6c:83:7f:b2:78:
         38:4f:17:7d:a9:18:c0:13:a1:10:a5:ec:32:5f:df:ab:ff:9e:
         64:17:58:7c:21:3c:59:2e:2f:95:f0:a7:4a:18:f4:5e:57:5a:
         bf:a3:22:77:2b:c0:fc:74:99:0b:e9:76:1b:8e:05:d0:02:2d:
         61:c2:25:49:b9:de:22:32:23:a0:a5:48:03:12:77:f7:29:c7:
         8d:0d:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----