Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/323030313a3637633a6139383a3a2f34382d3438203d3e203530303538.roa
File:                     323030313a3637633a6139383a3a2f34382d3438203d3e203530303538.roa (raw, json)
Hash identifier:          C+stTHlJm3oG1O24IYY25MN/YaduSiKdyyxPE7KwtPY=
Subject key identifier:   DB:65:86:D3:25:10:4B:06:2D:90:C2:EB:9A:7E:CD:61:0E:AB:BA:3A
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       1E7372D33DD8E856C26A7F554CFB23D1C6935A8F
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/323030313a3637633a6139383a3a2f34382d3438203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:38:53 +0000
ROA not before:           Sat 08 Apr 2023 03:33:53 +0000
ROA not after:            Sat 06 Apr 2024 03:38:53 +0000
asID:                     50058
IP address blocks:        2001:67c:a98::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:73:72:d3:3d:d8:e8:56:c2:6a:7f:55:4c:fb:23:d1:c6:93:5a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 03:33:53 2023 GMT
            Not After : Apr  6 03:38:53 2024 GMT
        Subject: CN=DB6586D325104B062D90C2EB9A7ECD610EABBA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:c9:e6:93:6b:54:9a:a3:e6:ee:2f:ec:0e:
                    32:55:bb:94:20:b8:82:1d:eb:03:26:4a:ca:ae:d1:
                    f0:ea:df:58:87:82:1f:3e:a8:36:e7:eb:59:66:12:
                    b2:fb:c5:69:56:71:8b:86:18:27:62:cc:d3:71:16:
                    06:b9:8d:ed:bf:08:9f:97:75:8e:40:fd:f0:9a:42:
                    0d:a2:d1:78:e4:eb:72:be:09:ed:2b:a9:27:f8:52:
                    da:c4:97:69:31:cc:2b:df:57:0b:78:3e:18:8f:73:
                    f0:28:0f:f3:66:79:dd:d2:6e:a4:06:5c:52:26:e9:
                    d0:28:fe:11:8f:7f:d3:c6:cc:fe:c0:58:0b:4b:05:
                    b1:7a:8a:3b:d3:1b:1b:37:0e:3c:df:7b:8c:5c:e0:
                    43:ab:ea:98:2d:a6:e4:a4:23:f3:4f:b7:06:80:77:
                    87:ee:df:a2:31:bf:1c:51:20:38:4c:dd:02:9b:7f:
                    09:75:7d:e9:43:06:34:d8:c7:34:01:01:8e:29:e1:
                    25:df:51:62:4c:5a:a3:ea:0f:1e:2c:72:38:54:95:
                    be:d4:96:36:3f:e5:92:ac:7f:10:72:0e:0b:28:9f:
                    a1:f9:91:71:7b:be:91:4a:c0:16:10:bc:78:96:d0:
                    ff:6a:ef:6c:08:28:63:ae:26:59:80:f6:68:2f:01:
                    3e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:65:86:D3:25:10:4B:06:2D:90:C2:EB:9A:7E:CD:61:0E:AB:BA:3A
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/323030313a3637633a6139383a3a2f34382d3438203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a98::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:98:16:3b:3b:2c:88:86:94:d6:9b:a1:8c:4c:eb:cb:82:d5:
         9a:0b:da:49:a5:53:fd:d3:62:f0:a6:83:29:73:88:af:83:3c:
         37:db:28:6f:3f:69:6f:39:a2:36:4f:19:c5:2b:ec:84:ca:75:
         20:cd:58:f6:43:1b:8d:30:18:92:6c:1c:c3:91:a6:3a:b0:93:
         b5:e3:5f:70:87:7a:f2:0d:bc:af:e2:bc:19:f5:54:d5:c3:3b:
         db:ef:85:42:b3:9a:9e:49:fd:bc:bb:11:a9:a3:fe:11:9f:23:
         f4:2d:ab:37:ca:92:9a:00:fb:51:01:4c:0b:71:38:bd:ed:fe:
         30:b2:36:bd:34:94:88:22:e3:2a:7d:00:6b:75:8c:79:cd:4e:
         eb:a0:d4:61:e4:9b:b3:0e:12:64:b5:b0:17:21:8e:44:d1:d6:
         8a:be:63:7a:8f:c1:23:0a:3f:52:a0:e1:01:af:91:de:4e:2a:
         b3:e1:a5:da:1e:a1:47:65:4b:a4:a6:2e:fe:eb:0c:9a:e1:28:
         69:fd:47:a2:a4:10:9e:bc:85:81:13:53:43:92:64:ce:29:6f:
         1d:f6:89:f1:3f:96:b3:c0:5c:7f:a0:25:00:f7:34:75:13:b7:
         f9:21:ba:de:d0:6e:72:b0:a3:0d:da:58:10:e8:c7:be:57:28:
         0f:45:d0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----