Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/323030313a3637633a6139343a3a2f34382d3438203d3e203530303538.roa
File:                     323030313a3637633a6139343a3a2f34382d3438203d3e203530303538.roa (raw, json)
Hash identifier:          YWARlIGN6dfmH5L3UfVtmGtAoO8BGp8C8KXe7gGrCmQ=
Subject key identifier:   76:77:45:D9:F1:78:E4:A1:A7:0F:8B:1A:AD:F2:76:E6:29:36:FF:96
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       57D893CF3F0495B960DE9A4B3E909917880027AE
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/323030313a3637633a6139343a3a2f34382d3438203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:38:44 +0000
ROA not before:           Sat 08 Apr 2023 03:33:44 +0000
ROA not after:            Sat 06 Apr 2024 03:38:44 +0000
asID:                     50058
IP address blocks:        2001:67c:a94::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d8:93:cf:3f:04:95:b9:60:de:9a:4b:3e:90:99:17:88:00:27:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 03:33:44 2023 GMT
            Not After : Apr  6 03:38:44 2024 GMT
        Subject: CN=767745D9F178E4A1A70F8B1AADF276E62936FF96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:bc:3c:01:f3:1d:e4:1d:1b:9b:05:d7:0f:
                    6f:41:ee:64:ea:5a:de:9c:fb:90:dc:97:f7:17:02:
                    2c:e7:c0:63:44:a2:53:5b:79:ec:a8:82:11:83:5d:
                    32:aa:2e:b2:fd:b1:67:4e:82:14:43:b9:51:44:ff:
                    ff:8f:8d:fe:2d:40:b0:12:7b:26:77:5f:2d:07:d8:
                    0c:8d:63:e9:dc:97:d5:cc:60:cc:e7:24:6f:3c:6a:
                    b5:55:35:b8:0e:51:6d:72:80:a3:70:da:9b:e6:cd:
                    cc:2e:15:cd:d1:a5:bb:82:b3:cb:93:64:ae:76:8c:
                    64:34:cd:e3:45:5f:35:b3:43:d1:55:ff:21:dd:c9:
                    64:b2:0a:ab:3b:09:5b:e9:51:4d:0a:85:cd:f9:a2:
                    e4:7c:4b:b5:f9:77:49:75:4d:22:12:3e:95:56:f1:
                    54:9d:23:35:d4:cd:ec:05:1f:9d:97:e9:20:39:1c:
                    86:73:a3:d6:45:b3:cf:9f:e5:b6:ed:e9:0f:fc:35:
                    38:89:68:15:c0:fc:e1:d8:59:33:16:05:5b:b9:e0:
                    4a:50:31:47:bf:20:a4:bd:60:e7:44:4f:de:96:4a:
                    88:4a:a0:3d:f0:91:d7:bb:d3:14:c9:e8:c7:a1:8b:
                    85:38:e2:bb:1c:3d:43:39:54:72:1a:63:12:c0:73:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:77:45:D9:F1:78:E4:A1:A7:0F:8B:1A:AD:F2:76:E6:29:36:FF:96
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/323030313a3637633a6139343a3a2f34382d3438203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a94::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:3c:bb:5c:f8:9c:44:21:75:e7:b1:c8:76:45:94:37:26:12:
         c9:28:0c:22:84:0e:78:5a:4c:86:10:06:ea:a7:16:22:34:a6:
         7a:b0:df:16:2a:cc:c3:f0:78:fe:a6:d8:07:9e:f6:a6:37:dc:
         76:cc:2a:97:0f:5b:0f:7b:a3:be:66:00:49:13:de:f2:5b:f6:
         c8:ce:9d:01:76:90:f0:11:91:d7:05:c8:d6:7a:7e:9e:24:ff:
         95:56:5b:ef:06:60:d3:87:80:78:8d:e2:6d:8c:32:f0:f3:19:
         2e:cd:8b:2a:0d:cc:20:17:91:23:e9:6d:8a:f9:f2:f9:30:c8:
         d3:62:d4:d3:9a:40:75:c8:c7:7a:54:19:eb:dc:71:02:d1:6d:
         e0:55:8c:de:98:be:3f:92:25:ff:35:fb:dd:32:f0:fe:21:ae:
         d2:ee:e6:58:dc:75:3b:2d:ab:dc:43:69:c2:38:ca:02:b8:41:
         e6:d2:ab:10:51:24:96:0e:c2:7a:59:61:1b:4a:35:59:65:96:
         66:34:64:ce:eb:65:a8:21:05:3a:40:41:01:18:c9:a1:9d:10:
         6f:0c:ca:c4:d1:8a:e6:8f:75:93:0c:7e:05:5c:89:ad:60:2b:
         71:5d:2f:34:d7:fe:95:43:36:72:1a:02:e4:97:dc:92:ac:7c:
         08:7d:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----