Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/323030313a3637633a6138343a3a2f34382d3438203d3e203530303538.roa
File:                     323030313a3637633a6138343a3a2f34382d3438203d3e203530303538.roa (raw, json)
Hash identifier:          Sprpu+Y8HlfaQ48qY2pbuvbJRrXHSsWqX/JTJPm0o4Q=
Subject key identifier:   29:39:6B:68:05:08:34:45:31:A1:79:0E:E5:65:58:E9:71:A1:9B:1D
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       3002B5073CC091E6A5B6BCEEDB81545E70D3FC58
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/323030313a3637633a6138343a3a2f34382d3438203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:38:26 +0000
ROA not before:           Sat 08 Apr 2023 03:33:26 +0000
ROA not after:            Sat 06 Apr 2024 03:38:26 +0000
asID:                     50058
IP address blocks:        2001:67c:a84::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:02:b5:07:3c:c0:91:e6:a5:b6:bc:ee:db:81:54:5e:70:d3:fc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 03:33:26 2023 GMT
            Not After : Apr  6 03:38:26 2024 GMT
        Subject: CN=29396B680508344531A1790EE56558E971A19B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:98:55:6c:ab:93:19:42:10:89:63:4f:67:
                    52:41:65:0b:9b:e6:fa:4d:65:f9:01:c2:bb:41:80:
                    e5:7c:ec:9a:65:da:eb:5b:d3:6b:85:50:bc:7c:9c:
                    4a:7b:8d:db:5d:9d:4e:5c:c6:6a:a7:17:aa:4b:f3:
                    b8:a9:7c:15:9c:8b:fa:62:16:42:ab:ef:95:f1:4a:
                    49:f2:1a:1c:a7:dc:0f:db:b6:a3:1a:34:fb:1f:22:
                    f0:7a:4c:35:fc:65:89:40:c8:24:4b:dc:3c:9a:02:
                    df:75:5a:a5:9f:8c:40:94:61:0e:2b:25:1e:22:63:
                    cc:7b:ce:b1:8d:f1:44:5c:71:a6:6f:e8:12:38:9e:
                    ab:ad:b6:96:ff:0f:84:52:1c:e1:36:17:3d:39:99:
                    f5:69:38:10:53:57:68:0d:87:d2:03:46:39:94:db:
                    52:da:5f:31:e4:84:ec:b6:72:b6:2f:cd:a3:d8:4e:
                    90:4c:75:9a:7e:c3:28:ca:42:7b:d8:96:ae:bd:de:
                    f6:9b:95:38:5e:66:ce:ac:c6:12:a5:52:32:49:e7:
                    b8:87:02:16:b4:dd:5a:36:2a:d4:89:2c:7d:ed:c0:
                    1b:fd:75:1b:dc:fb:28:60:da:cc:c3:c1:98:c6:58:
                    03:7b:6e:a4:5d:cd:f7:f6:4d:dd:0c:74:aa:00:e7:
                    be:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:39:6B:68:05:08:34:45:31:A1:79:0E:E5:65:58:E9:71:A1:9B:1D
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/323030313a3637633a6138343a3a2f34382d3438203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a84::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:ff:c5:0d:74:a7:43:a6:6b:36:04:4f:96:9a:a3:08:f5:e3:
         7e:f0:ba:69:1e:ee:b0:d1:e9:ca:5d:62:cc:ea:2e:82:35:84:
         9e:68:57:a0:c6:35:92:df:83:0f:b5:13:c0:9b:a8:3f:13:f8:
         27:38:e3:e3:c6:c0:a3:b6:6c:3b:fa:2d:e3:aa:0b:6f:17:1b:
         e6:2e:d9:9b:b9:6e:25:a4:bb:15:83:2c:a7:a5:41:a4:f7:70:
         ba:00:8a:96:9c:42:0a:54:8d:27:5d:84:d2:b5:f4:b1:ad:aa:
         bd:73:d8:78:ee:0a:24:b2:82:2b:a6:fa:5e:3a:41:ff:4f:f5:
         c8:37:6b:0f:45:7b:d5:db:4d:df:60:43:c6:f3:2d:dc:ab:8e:
         b2:ad:97:6d:11:81:47:89:53:57:04:cb:33:d0:ea:ad:4a:6b:
         22:43:b3:b7:a2:eb:8d:15:54:56:87:64:5c:5b:cc:a0:bf:3b:
         44:aa:d6:02:10:b9:17:db:5d:a1:48:54:be:9a:27:5f:7a:43:
         58:99:56:c0:b9:dc:62:1f:91:a2:e7:62:81:c0:ad:ec:b0:b0:
         ac:fd:f6:84:0b:7f:19:41:54:60:4b:68:ff:7f:ad:3a:70:43:
         41:d9:15:53:3e:e5:22:8c:93:e0:c1:c8:8b:de:23:14:cd:41:
         b7:5e:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----