Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434303a3a2f32392d3239203d3e203530303538.roa
File:                     326131323a646434303a3a2f32392d3239203d3e203530303538.roa (raw, json)
Hash identifier:          6i+XhP3gmCJo+7sP6d7b8GgzE8V3BPbNiAHj7ZRFOsg=
Subject key identifier:   2D:18:8F:7F:FA:66:1F:E6:86:45:C3:66:F6:CD:06:EE:82:A0:65:B1
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       12426D8EDB948133F4A01DCE77202CFCFA88A995
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434303a3a2f32392d3239203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 04:29:49 +0000
ROA not before:           Sat 08 Apr 2023 04:24:49 +0000
ROA not after:            Sat 06 Apr 2024 04:29:49 +0000
asID:                     50058
IP address blocks:        2a12:dd40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:42:6d:8e:db:94:81:33:f4:a0:1d:ce:77:20:2c:fc:fa:88:a9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:24:49 2023 GMT
            Not After : Apr  6 04:29:49 2024 GMT
        Subject: CN=2D188F7FFA661FE68645C366F6CD06EE82A065B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:45:96:c2:4b:3e:8c:e2:a3:c2:e4:4e:bb:0b:
                    cf:3b:17:92:52:3c:18:1a:c0:4e:1a:6b:12:40:f8:
                    1c:15:41:8e:07:4c:db:de:e4:c0:98:1f:c4:45:96:
                    a2:7a:df:8a:75:da:ca:e9:4b:d4:34:6a:86:9e:c0:
                    20:fa:39:1c:46:95:da:5c:63:5b:b2:43:bd:03:e5:
                    e0:a9:f7:c6:62:72:c4:2e:5f:1b:9b:f7:b1:24:8a:
                    59:49:c9:9b:0c:3e:e1:a9:bc:96:11:0c:fd:c6:04:
                    3a:78:f5:c7:c3:5a:9a:05:32:d4:b3:8c:78:fa:bb:
                    be:36:c2:19:59:01:22:99:55:2a:5c:62:d0:2b:2a:
                    80:c6:21:b1:df:a2:18:32:cd:b3:c6:d4:22:b9:48:
                    05:ba:17:bb:a9:d9:83:a3:47:c8:79:ba:3f:3c:bd:
                    e8:42:87:c6:8b:c2:66:6c:82:54:8d:48:9d:e2:6d:
                    25:8f:ce:73:4e:e4:ca:b9:1c:97:0c:52:f7:d3:39:
                    bd:ae:0a:b6:83:c7:4f:d9:70:28:c9:67:6a:bb:ca:
                    75:e2:ec:49:0c:9d:5d:0d:81:4d:4f:47:c5:7d:6e:
                    68:92:9a:5f:35:3d:8f:e0:6a:47:a2:4d:4c:f8:4a:
                    de:6e:0c:d1:a4:a4:15:6f:49:fb:3a:ec:53:d4:0a:
                    1d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:18:8F:7F:FA:66:1F:E6:86:45:C3:66:F6:CD:06:EE:82:A0:65:B1
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434303a3a2f32392d3239203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         c0:c6:b9:eb:ae:d8:e5:34:89:83:d9:62:81:9b:ea:20:7b:19:
         d9:35:cc:ee:a2:ae:25:75:60:fc:e2:8f:e7:20:ce:f8:4f:ac:
         f6:3e:2d:3c:41:42:ce:0f:b4:7a:e8:d3:c4:b9:b7:e7:70:9b:
         f4:5b:75:d0:c7:85:1f:e6:2a:18:03:ad:2e:01:52:ec:33:88:
         7d:b6:12:49:95:fa:63:10:8a:fb:e8:9a:18:96:d8:86:be:ab:
         7e:69:f9:b9:e7:22:8d:0d:86:8c:d9:b0:a0:45:ea:39:09:b2:
         d4:9f:15:b2:72:ec:64:b2:4b:06:73:a6:f2:51:9e:52:6c:13:
         95:56:08:60:24:b3:5e:22:41:25:6e:e8:a2:d5:3e:2f:ee:a5:
         63:24:13:ea:ad:01:91:3f:40:9d:1c:fa:96:6e:13:0c:2f:fa:
         ce:fc:e0:b0:58:a6:f2:91:c6:f8:da:cf:73:c1:52:1b:be:4a:
         54:bd:71:92:60:bf:af:09:6e:44:e4:77:32:1d:55:87:64:5c:
         29:e4:b4:be:80:14:dc:a1:a7:e3:70:a8:31:e6:fd:47:03:ec:
         79:73:f9:d6:dc:32:14:a8:6c:48:99:46:40:5d:02:22:c0:79:
         1f:3a:76:e9:d7:a6:2c:46:3d:18:78:4a:70:e7:b3:b0:9a:f5:
         c7:be:d0:29
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUEkJtjtuUgTP0oB3OdyAs/PqIqZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNDI0NDlaFw0yNDA0MDYwNDI5NDlaMDMxMTAvBgNV
BAMTKDJEMTg4RjdGRkE2NjFGRTY4NjQ1QzM2NkY2Q0QwNkVFODJBMDY1QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsRZbCSz6M4qPC5E67C887F5JS
PBgawE4aaxJA+BwVQY4HTNve5MCYH8RFlqJ634p12srpS9Q0aoaewCD6ORxGldpc
Y1uyQ70D5eCp98ZicsQuXxub97EkillJyZsMPuGpvJYRDP3GBDp49cfDWpoFMtSz
jHj6u742whlZASKZVSpcYtArKoDGIbHfohgyzbPG1CK5SAW6F7up2YOjR8h5uj88
vehCh8aLwmZsglSNSJ3ibSWPznNO5Mq5HJcMUvfTOb2uCraDx0/ZcCjJZ2q7ynXi
7EkMnV0NgU1PR8V9bmiSml81PY/gakeiTUz4St5uDNGkpBVvSfs67FPUCh1lAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQULRiPf/pmH+aGRcNm9s0G7oKgZbEwHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMHIG
CCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDMwM2EzYTJmMzIzOTJkMzIzOTIwM2Qz
ZTIwMzUzMDMwMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggr
BgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoS3UAwDQYJKoZIhvcNAQELBQADggEB
AMDGueuu2OU0iYPZYoGb6iB7Gdk1zO6iriV1YPzij+cgzvhPrPY+LTxBQs4PtHro
08S5t+dwm/RbddDHhR/mKhgDrS4BUuwziH22EkmV+mMQivvomhiW2Ia+q35p+bnn
Io0NhozZsKBF6jkJstSfFbJy7GSySwZzpvJRnlJsE5VWCGAks14iQSVu6KLVPi/u
pWMkE+qtAZE/QJ0c+pZuEwwv+s784LBYpvKRxvjaz3PBUhu+SlS9cZJgv68JbkTk
dzIdVYdkXCnktL6AFNyhp+NwqDHm/UcD7Hlz+dbcMhSobEiZRkBdAiLAeR86dunX
pixGPRh4SnDns7Ca9ce+0Ck=
-----END CERTIFICATE-----