Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a333330303a3a2f34302d3438203d3e20323131313531.roa
File:                     326131323a646434373a333330303a3a2f34302d3438203d3e20323131313531.roa (raw, json)
Hash identifier:          XBSU9z5qD+Nv5VvSl9A8FghuQaG9kRhsaYlnDGhANh4=
Subject key identifier:   E5:16:AA:31:D3:2A:72:BB:A9:18:2A:C6:59:E5:BD:8F:7B:3F:08:6D
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       70D52F12DE08BA43E7562E25703AAFFB9C345583
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a333330303a3a2f34302d3438203d3e20323131313531.roa
Signing time:             Sat 08 Apr 2023 04:53:29 +0000
ROA not before:           Sat 08 Apr 2023 04:48:29 +0000
ROA not after:            Sat 06 Apr 2024 04:53:29 +0000
asID:                     211151
IP address blocks:        2a12:dd47:3300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d5:2f:12:de:08:ba:43:e7:56:2e:25:70:3a:af:fb:9c:34:55:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:48:29 2023 GMT
            Not After : Apr  6 04:53:29 2024 GMT
        Subject: CN=E516AA31D32A72BBA9182AC659E5BD8F7B3F086D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:33:50:fe:0a:fa:f5:53:00:e8:aa:30:26:
                    e6:c4:52:26:13:a2:ca:53:19:da:df:92:36:8d:47:
                    09:5f:e5:41:74:ef:9e:b1:cb:1b:ed:82:3b:69:f4:
                    18:a3:a4:d3:28:64:86:42:16:13:0e:c4:7b:ad:55:
                    f9:da:08:af:ea:9c:65:57:0c:9c:18:ac:13:7c:e8:
                    18:2c:dc:a1:0c:b2:97:7e:65:43:51:da:b0:07:8e:
                    4e:99:3e:b4:33:de:db:a7:89:32:60:06:dc:6c:75:
                    79:04:5b:62:1d:ed:00:a8:92:66:1d:d6:b6:12:8c:
                    30:d1:67:13:3f:77:ca:53:93:db:1e:64:65:53:ba:
                    b0:a9:2a:b8:37:31:66:00:14:3b:22:d3:96:4c:52:
                    71:20:2a:91:fe:6a:2c:ec:14:ba:5b:13:28:35:0b:
                    4d:03:9b:06:56:b4:13:19:2c:2a:24:46:af:e8:38:
                    9d:a5:0c:de:55:da:89:7f:7c:d8:e9:c3:d6:75:ae:
                    01:a2:ea:86:2f:ee:cb:43:c1:3c:a3:e9:96:23:a9:
                    d7:34:cf:ba:28:fa:4d:b9:86:75:9c:d1:e8:45:f9:
                    78:81:18:a1:3d:62:58:99:a1:cc:f5:54:79:7a:b2:
                    da:13:83:41:d7:b3:ba:ef:b6:be:00:ef:5d:ea:59:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:16:AA:31:D3:2A:72:BB:A9:18:2A:C6:59:E5:BD:8F:7B:3F:08:6D
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a333330303a3a2f34302d3438203d3e20323131313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:69:fd:e9:5a:05:8e:98:65:6b:59:2c:cb:bb:1e:2a:4a:39:
         1c:9c:81:10:f4:c5:d8:a0:b6:c4:f9:1a:f5:7a:a2:74:e4:9f:
         83:77:5c:a9:b8:34:98:03:0d:79:06:64:74:35:b5:bd:b3:49:
         35:ee:87:ac:d5:ea:c6:2c:e3:f9:7b:d1:43:a5:15:c5:5b:6b:
         01:05:09:1a:ba:5d:d1:20:ad:7d:86:0a:1c:73:5a:be:b5:77:
         dc:7a:79:8d:7e:fb:db:66:ca:94:43:81:04:ed:f7:f4:39:38:
         45:af:b3:f7:57:64:05:35:7d:9e:82:e0:c4:b2:48:01:e6:0a:
         e1:ae:ab:e8:fa:62:1c:c9:9f:0a:90:e9:58:a1:4a:58:9f:e3:
         a4:23:de:0b:b0:cc:2a:50:93:52:97:0b:8b:f2:4b:fc:60:73:
         53:15:6e:a9:18:9f:24:bf:a1:f7:bd:cc:3b:fa:cf:b1:29:b8:
         87:9d:d5:22:d0:49:c2:51:13:5e:80:fa:fc:63:1f:59:2e:c8:
         c7:f0:3f:06:de:a6:5a:50:de:6c:58:c9:86:52:2b:d5:4c:1d:
         c4:d1:1c:cd:06:51:02:79:2c:53:bf:38:76:c3:50:6f:aa:2a:
         be:ed:34:f1:fa:61:7d:ec:d0:50:b8:ae:35:65:38:2b:4a:00:
         55:b2:09:90
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUcNUvEt4IukPnVi4lcDqv+5w0VYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNDQ4MjlaFw0yNDA0MDYwNDUzMjlaMDMxMTAvBgNV
BAMTKEU1MTZBQTMxRDMyQTcyQkJBOTE4MkFDNjU5RTVCRDhGN0IzRjA4NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWjNQ/gr69VMA6KowJubEUiYT
ospTGdrfkjaNRwlf5UF0756xyxvtgjtp9BijpNMoZIZCFhMOxHutVfnaCK/qnGVX
DJwYrBN86Bgs3KEMspd+ZUNR2rAHjk6ZPrQz3tuniTJgBtxsdXkEW2Id7QCokmYd
1rYSjDDRZxM/d8pTk9seZGVTurCpKrg3MWYAFDsi05ZMUnEgKpH+aizsFLpbEyg1
C00DmwZWtBMZLCokRq/oOJ2lDN5V2ol/fNjpw9Z1rgGi6oYv7stDwTyj6ZYjqdc0
z7oo+k25hnWc0ehF+XiBGKE9YliZocz1VHl6stoTg0HXs7rvtr4A713qWadbAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQU5RaqMdMqcrupGCrGWeW9j3s/CG0wHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMH4G
CCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzMzMzMzAzMDNhM2EyZjM0MzAy
ZDM0MzgyMDNkM2UyMDMyMzEzMTMxMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UczMA0GCSqG
SIb3DQEBCwUAA4IBAQB4af3pWgWOmGVrWSzLux4qSjkcnIEQ9MXYoLbE+Rr1eqJ0
5J+Dd1ypuDSYAw15BmR0NbW9s0k17oes1erGLOP5e9FDpRXFW2sBBQkaul3RIK19
hgocc1q+tXfcenmNfvvbZsqUQ4EE7ff0OThFr7P3V2QFNX2eguDEskgB5grhrqvo
+mIcyZ8KkOlYoUpYn+OkI94LsMwqUJNSlwuL8kv8YHNTFW6pGJ8kv6H3vcw7+s+x
KbiHndUi0EnCURNegPr8Yx9ZLsjH8D8G3qZaUN5sWMmGUivVTB3E0RzNBlECeSxT
vzh2w1Bvqiq+7TTx+mF97NBQuK41ZTgrSgBVsgmQ
-----END CERTIFICATE-----