Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/323030313a3637633a6139303a3a2f34382d3438203d3e203530303538.roa
File:                     323030313a3637633a6139303a3a2f34382d3438203d3e203530303538.roa (raw, json)
Hash identifier:          fuQ7SW3uX4NQlb5B5CAg8UfD3Y4reYTVedcB9TBMMbc=
Subject key identifier:   F3:93:B4:E3:8E:8A:D0:04:5D:76:C2:79:B7:13:33:63:45:EC:8E:19
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       7591F67A5DFB460F8E82E24CFFC3A00B7B049CD2
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/323030313a3637633a6139303a3a2f34382d3438203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:38:59 +0000
ROA not before:           Sat 08 Apr 2023 03:33:59 +0000
ROA not after:            Sat 06 Apr 2024 03:38:59 +0000
asID:                     50058
IP address blocks:        2001:67c:a90::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:91:f6:7a:5d:fb:46:0f:8e:82:e2:4c:ff:c3:a0:0b:7b:04:9c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 03:33:59 2023 GMT
            Not After : Apr  6 03:38:59 2024 GMT
        Subject: CN=F393B4E38E8AD0045D76C279B713336345EC8E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:41:69:fd:16:3d:5f:a7:5c:38:db:5c:ec:
                    65:cc:e5:a3:20:22:c8:d0:3a:89:26:d2:b7:12:bb:
                    e9:ba:d6:6a:a1:25:81:29:39:4c:77:d1:7e:f2:31:
                    00:8f:65:b5:f7:36:76:d6:24:f1:d6:66:25:87:7e:
                    45:9a:6c:bb:85:1a:f4:74:f6:73:87:68:a5:8a:b3:
                    bc:51:ff:0b:b6:fb:20:8d:9d:ec:98:00:2f:b9:59:
                    91:b1:02:8d:6c:40:87:6e:c2:c7:45:ac:00:71:65:
                    d4:5e:a3:73:d7:4a:ac:19:b6:33:1d:18:c6:f0:a5:
                    e7:9e:11:33:02:0d:f6:ac:33:5b:2a:9a:71:b9:02:
                    2b:f1:c8:20:d5:9e:aa:2a:e7:d0:08:ef:e3:78:7e:
                    0a:ed:62:bc:44:bc:92:97:30:d2:84:cd:b7:2e:66:
                    a5:a9:c2:a8:51:1b:01:ba:3a:c7:52:58:18:e4:c7:
                    a7:5c:f6:cd:04:7f:6e:0f:ae:d5:2d:ab:e1:f6:81:
                    a0:4f:44:ee:d4:e8:1f:32:08:a8:5f:4c:43:15:45:
                    a1:ca:72:93:15:79:d2:cb:5d:a9:12:82:68:19:20:
                    4b:d6:4a:36:53:83:5f:fb:79:5b:3f:21:23:2a:53:
                    52:39:92:4b:89:36:86:cc:92:5b:6e:71:96:71:37:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:93:B4:E3:8E:8A:D0:04:5D:76:C2:79:B7:13:33:63:45:EC:8E:19
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/323030313a3637633a6139303a3a2f34382d3438203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a90::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:c2:46:d7:64:79:ac:41:c8:f0:87:93:66:bd:95:30:45:ad:
         b4:8d:dd:f8:6d:62:13:0c:85:59:90:43:12:f7:75:f4:ba:17:
         d7:fd:2c:01:c2:67:64:2c:54:74:54:dc:f6:65:b6:bd:f8:6f:
         e0:07:a3:05:06:f9:76:1f:df:be:b5:68:7f:bc:a4:e0:8b:d5:
         f9:5a:2b:78:bd:88:da:35:02:c0:9b:3a:98:08:b0:c2:e4:9e:
         6e:5a:ae:33:40:9e:b4:56:3b:6a:92:2a:77:b5:bc:c1:4f:5a:
         ad:32:34:f2:a3:73:04:48:52:cf:80:c4:33:07:ba:21:8e:7d:
         40:77:5d:34:0c:25:5d:f5:4b:ea:42:d9:f6:ab:87:c2:88:2b:
         a7:c7:27:f8:e2:91:2a:39:18:e7:f1:1f:3a:91:24:54:bd:84:
         cd:c7:13:a5:d7:5b:dc:f4:18:ca:49:35:24:af:2a:bf:84:67:
         cb:8c:49:6f:6d:21:fd:d0:49:9c:33:5f:b3:83:c7:95:8b:ac:
         25:a9:e4:07:d1:05:d3:6c:1d:9e:dc:30:ca:62:35:14:ed:93:
         e3:6f:b5:c9:30:65:a5:d6:7e:48:57:3c:a4:e1:a6:2d:14:be:
         f4:54:5b:4f:49:00:e7:47:d2:de:3e:2c:85:15:47:e9:8f:48:
         84:40:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----