Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/323030313a3637633a6139633a3a2f34382d3438203d3e203331383938.roa
File:                     323030313a3637633a6139633a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          9YEpYudrr3Pkm50q6VMNrSmugx0XJx2xyalWwhvujGo=
Subject key identifier:   CE:AA:CA:65:F9:70:85:29:B3:A9:A8:0A:C1:23:98:3A:32:6D:CA:E9
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       3E1795826E91471D74122477B96A40499E3033D3
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/323030313a3637633a6139633a3a2f34382d3438203d3e203331383938.roa
Signing time:             Sat 08 Apr 2023 03:38:10 +0000
ROA not before:           Sat 08 Apr 2023 03:33:10 +0000
ROA not after:            Sat 06 Apr 2024 03:38:10 +0000
asID:                     31898
IP address blocks:        2001:67c:a9c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:17:95:82:6e:91:47:1d:74:12:24:77:b9:6a:40:49:9e:30:33:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 03:33:10 2023 GMT
            Not After : Apr  6 03:38:10 2024 GMT
        Subject: CN=CEAACA65F9708529B3A9A80AC123983A326DCAE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:29:5e:25:94:f9:01:66:a7:72:75:dc:65:
                    8b:82:2f:0b:43:70:1e:f7:63:29:d3:4b:08:db:70:
                    44:7b:f3:6d:0f:dc:53:f0:62:7c:b4:90:0a:83:9e:
                    11:07:15:f9:3c:cd:26:dc:86:a3:47:ac:2f:fd:e9:
                    11:e7:1c:62:e4:e9:01:fd:96:24:53:e1:d6:46:24:
                    66:89:d8:6d:df:3b:61:a3:73:47:0a:63:82:d5:0e:
                    64:c6:1f:4e:27:3f:01:f7:dd:77:51:be:ff:56:65:
                    9e:72:8d:dd:87:6b:b4:2c:20:af:f9:bd:b8:7f:35:
                    11:26:c9:a6:21:31:51:86:8d:58:62:44:20:0f:f3:
                    b3:ff:a2:51:1e:cd:37:bf:08:b1:ad:9a:66:d3:bb:
                    a2:3b:15:eb:ae:74:04:15:46:4c:ef:1d:47:30:e2:
                    78:1e:6a:9d:e5:e5:f3:51:32:5c:db:55:1d:7e:96:
                    66:2a:66:d0:dd:1c:a0:bf:4e:78:66:aa:81:05:79:
                    dd:4e:89:01:a2:90:a4:43:f9:18:66:16:32:fa:ed:
                    9a:f5:67:7a:50:cd:26:ad:2a:c8:69:eb:8d:a2:f7:
                    60:95:61:30:01:c7:fc:a3:71:69:6e:8b:99:12:6e:
                    52:ab:08:83:9f:6d:94:02:6e:28:e9:83:6d:b7:34:
                    36:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AA:CA:65:F9:70:85:29:B3:A9:A8:0A:C1:23:98:3A:32:6D:CA:E9
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/323030313a3637633a6139633a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:bb:ce:67:cc:76:14:0d:85:98:ea:4b:70:db:2f:f6:a2:8f:
         61:e6:b1:2e:d8:c6:7f:9d:54:8e:ab:a6:a2:ad:75:3a:76:97:
         07:4e:2d:6d:18:79:2a:81:55:bb:b4:49:51:ad:02:6d:15:5e:
         a0:47:4a:01:1a:b7:2a:4a:e5:7e:67:08:cd:68:60:cb:4b:c3:
         df:b7:63:a0:ea:5e:87:d9:4d:88:58:3d:2d:8f:e4:64:c7:5f:
         74:2a:81:c3:54:34:03:50:b7:d3:51:8d:59:c5:27:89:0b:61:
         65:0d:cc:54:7d:a1:88:8f:33:3f:e7:c1:3e:1d:d0:17:2e:e5:
         8e:fb:64:0f:8a:2c:5e:8e:70:66:e1:5e:54:ee:1e:df:ae:bf:
         ee:39:77:8d:fb:14:b7:10:60:aa:e6:89:88:53:2c:fb:24:84:
         d9:55:3d:33:a5:15:9a:af:63:0a:3e:4f:be:3e:37:e4:36:f1:
         5d:63:71:e3:24:ed:68:60:04:4f:1d:ad:aa:89:91:c0:de:dc:
         32:aa:31:46:63:51:55:c5:63:3b:04:77:fc:ed:2e:ed:fc:5b:
         fd:33:e5:82:14:34:9e:f5:28:f1:55:ad:58:0f:4f:f3:3d:7e:
         66:58:43:98:3a:47:23:cd:19:5e:17:e4:54:3f:82:ac:cf:5d:
         d5:ef:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----