Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a333030303a3a2f34302d3438203d3e20313939323033.roa
File:                     326131323a646434373a333030303a3a2f34302d3438203d3e20313939323033.roa (raw, json)
Hash identifier:          vtrTO2S0k8bfQg8iJ+R/NHGAMJ0jmdR0uD0YuxS91XM=
Subject key identifier:   8F:0E:90:AB:CF:8C:CC:B6:D9:36:2F:15:86:5C:D9:43:FC:19:D9:A4
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       627708CEAFEA527714E381584D39A4208242C6A5
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a333030303a3a2f34302d3438203d3e20313939323033.roa
Signing time:             Sat 08 Apr 2023 04:38:18 +0000
ROA not before:           Sat 08 Apr 2023 04:33:18 +0000
ROA not after:            Sat 06 Apr 2024 04:38:18 +0000
asID:                     199203
IP address blocks:        2a12:dd47:3000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:77:08:ce:af:ea:52:77:14:e3:81:58:4d:39:a4:20:82:42:c6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:33:18 2023 GMT
            Not After : Apr  6 04:38:18 2024 GMT
        Subject: CN=8F0E90ABCF8CCCB6D9362F15865CD943FC19D9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:77:ed:52:99:fe:e8:8b:fd:38:1a:bd:16:
                    91:2b:ce:d0:b8:3e:c0:32:fd:a4:a5:6f:90:85:dc:
                    34:a4:0b:30:74:36:f4:80:41:02:af:c3:8c:3e:95:
                    79:1b:b6:c0:1a:cd:e7:07:4d:75:0b:fa:5e:b7:60:
                    26:c1:b6:0f:28:22:ef:18:eb:a5:5e:09:0d:32:f1:
                    d1:4b:70:05:fd:da:c0:d7:15:fe:53:75:30:11:f2:
                    0d:6c:48:0f:26:3e:0a:47:1c:c6:23:b9:0e:95:c6:
                    2e:d1:5e:c3:39:e2:ca:d5:25:95:5f:ed:e0:5d:56:
                    8d:eb:d8:92:0d:93:45:09:ee:d9:6f:96:42:8f:01:
                    01:1b:d0:ed:67:63:b2:67:00:79:0f:20:18:7d:00:
                    21:30:fb:e8:58:c5:19:06:93:a7:24:c0:37:38:b1:
                    ec:d5:65:3e:82:8d:1c:ec:93:e0:79:e0:9f:39:d6:
                    57:31:4a:8d:7b:a2:db:ce:2c:75:e8:2e:25:95:87:
                    d1:90:85:2e:76:42:07:7d:89:63:8d:5f:e0:c1:82:
                    7b:56:a7:b9:83:6c:38:ba:f8:13:65:9f:2f:16:a3:
                    d5:11:83:0f:ad:ac:12:61:11:0d:f7:9c:52:1c:c1:
                    29:e8:73:e2:3e:83:6f:17:e0:96:da:3e:42:bf:86:
                    8f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0E:90:AB:CF:8C:CC:B6:D9:36:2F:15:86:5C:D9:43:FC:19:D9:A4
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a333030303a3a2f34302d3438203d3e20313939323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:11:91:bd:4d:f1:f1:a5:0f:d3:69:03:a4:9b:40:c0:a7:
         ae:fc:11:20:38:b4:ee:c4:93:fc:55:6a:9b:20:8a:d8:ee:88:
         10:42:17:f4:65:d7:76:5b:de:ec:94:00:d9:5f:0b:17:f7:6d:
         6d:e0:e1:4d:a6:39:b6:42:f5:ef:da:ec:90:4f:ee:2a:0b:0a:
         72:2d:5c:0c:d8:19:33:27:03:6d:6a:bf:70:47:af:90:06:72:
         db:6c:bd:ee:5f:a8:bc:ca:0f:b6:2b:b6:27:a5:91:3d:a9:8a:
         29:77:54:1a:08:f7:b7:f4:31:d4:d5:84:76:1a:0e:75:9e:89:
         e2:f9:2c:46:89:b4:ab:95:f6:46:0a:87:60:23:81:18:0b:cd:
         4a:02:4e:ad:3c:7b:e3:e8:69:38:47:ec:93:57:12:3f:49:8c:
         dd:69:21:ab:a5:98:64:97:f3:45:57:c3:55:61:90:e4:cb:fe:
         5c:b6:d4:a4:d1:1b:d1:d3:89:91:eb:a6:36:42:f3:f6:dd:82:
         bf:e8:67:2e:6a:ab:ff:5d:ea:04:54:a9:5c:4e:7b:34:50:fc:
         f9:8c:bf:d7:fd:25:b0:d4:b3:24:93:f2:8c:5e:79:13:ac:3a:
         36:70:a8:d4:2b:0c:9f:48:d0:ea:3b:37:d5:d6:f8:03:ca:af:
         aa:5e:b6:cb
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUYncIzq/qUncU44FYTTmkIIJCxqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNDMzMThaFw0yNDA0MDYwNDM4MThaMDMxMTAvBgNV
BAMTKDhGMEU5MEFCQ0Y4Q0NDQjZEOTM2MkYxNTg2NUNEOTQzRkMxOUQ5QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZXftUpn+6Iv9OBq9FpErztC4
PsAy/aSlb5CF3DSkCzB0NvSAQQKvw4w+lXkbtsAazecHTXUL+l63YCbBtg8oIu8Y
66VeCQ0y8dFLcAX92sDXFf5TdTAR8g1sSA8mPgpHHMYjuQ6Vxi7RXsM54srVJZVf
7eBdVo3r2JINk0UJ7tlvlkKPAQEb0O1nY7JnAHkPIBh9ACEw++hYxRkGk6ckwDc4
sezVZT6CjRzsk+B54J851lcxSo17otvOLHXoLiWVh9GQhS52Qgd9iWONX+DBgntW
p7mDbDi6+BNlny8Wo9URgw+trBJhEQ33nFIcwSnoc+I+g28X4JbaPkK/ho+fAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUjw6Qq8+MzLbZNi8VhlzZQ/wZ2aQwHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMH4G
CCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzMzMwMzAzMDNhM2EyZjM0MzAy
ZDM0MzgyMDNkM2UyMDMxMzkzOTMyMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UcwMA0GCSqG
SIb3DQEBCwUAA4IBAQCK4hGRvU3x8aUP02kDpJtAwKeu/BEgOLTuxJP8VWqbIIrY
7ogQQhf0Zdd2W97slADZXwsX921t4OFNpjm2QvXv2uyQT+4qCwpyLVwM2BkzJwNt
ar9wR6+QBnLbbL3uX6i8yg+2K7YnpZE9qYopd1QaCPe39DHU1YR2Gg51noni+SxG
ibSrlfZGCodgI4EYC81KAk6tPHvj6Gk4R+yTVxI/SYzdaSGrpZhkl/NFV8NVYZDk
y/5cttSk0RvR04mR66Y2QvP23YK/6Gcuaqv/XeoEVKlcTns0UPz5jL/X/SWw1LMk
k/KMXnkTrDo2cKjUKwyfSNDqOzfV1vgDyq+qXrbL
-----END CERTIFICATE-----