Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a353030313a3a2f34382d3438203d3e20323131393430.roa
File:                     326131323a646434373a353030313a3a2f34382d3438203d3e20323131393430.roa (raw, json)
Hash identifier:          +3EuOJ6Kaml0/hfXms9osxhAqhxTqyDOZhWU2p1+fuw=
Subject key identifier:   0D:28:14:F1:26:82:8C:84:8F:BF:E9:85:10:D2:E7:90:D6:6E:B3:08
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       33F600EE333581E2DFE8C264E698A373BF7396F3
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a353030313a3a2f34382d3438203d3e20323131393430.roa
Signing time:             Sat 08 Apr 2023 04:48:42 +0000
ROA not before:           Sat 08 Apr 2023 04:43:42 +0000
ROA not after:            Sat 06 Apr 2024 04:48:42 +0000
asID:                     211940
IP address blocks:        2a12:dd47:5001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f6:00:ee:33:35:81:e2:df:e8:c2:64:e6:98:a3:73:bf:73:96:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:43:42 2023 GMT
            Not After : Apr  6 04:48:42 2024 GMT
        Subject: CN=0D2814F126828C848FBFE98510D2E790D66EB308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:9f:8f:5a:19:c0:81:76:8d:ee:96:97:96:
                    ed:6a:90:80:ae:aa:8a:88:06:9f:ca:75:d7:01:be:
                    91:3c:44:af:a1:9f:1c:7d:f0:93:14:a1:3f:5c:6a:
                    a0:49:83:5e:20:35:70:69:12:01:13:53:9d:96:2d:
                    f5:31:69:a8:41:1d:1c:45:06:1c:42:c0:8f:87:46:
                    2d:f0:3a:0e:f3:95:e6:8d:27:b0:13:d4:d2:33:03:
                    af:8b:a1:b8:33:ee:2c:31:7b:ab:e2:a3:90:c8:af:
                    91:7f:11:95:df:20:0c:e1:ba:36:7f:30:be:ea:63:
                    85:0a:b1:a5:b9:ff:e2:08:68:c7:ad:b6:4a:0b:1e:
                    7f:ac:06:96:d5:de:28:ee:49:e9:6f:7c:8e:1a:c9:
                    11:64:3e:4f:71:18:ad:cc:04:95:ae:60:52:2f:c8:
                    fe:2c:9b:88:80:ef:01:dd:71:c9:b7:c1:0b:46:c9:
                    75:57:4b:cd:f8:fd:23:4c:4f:3b:49:96:33:b2:8b:
                    7a:f2:cb:b8:94:df:21:fa:6c:ee:e7:20:37:98:0b:
                    17:a4:f1:10:b4:8c:12:97:e1:37:e5:d6:b1:95:76:
                    2b:fc:9c:d3:99:76:01:24:23:34:59:02:57:25:f0:
                    0f:a5:25:7e:1e:91:11:a4:36:b3:13:54:8a:b8:88:
                    3e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:28:14:F1:26:82:8C:84:8F:BF:E9:85:10:D2:E7:90:D6:6E:B3:08
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a353030313a3a2f34382d3438203d3e20323131393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5001::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:e0:88:79:ee:70:36:91:03:ca:52:c4:58:b3:b0:4c:73:
         b5:cb:e7:fe:97:8a:91:e9:62:b0:f5:e0:f0:c8:4b:3e:5f:38:
         1a:cf:03:59:cc:af:ad:c4:01:f0:18:d4:b0:90:be:da:3a:58:
         bd:92:3f:a1:c8:2d:9a:f9:1b:b8:93:88:97:db:67:9f:29:16:
         1d:78:02:6d:be:36:d2:0c:06:e1:d0:c3:51:e2:8d:7b:08:e9:
         2a:b2:f5:df:10:88:bf:17:e1:34:06:e9:24:24:e3:59:1d:98:
         9f:77:26:30:ae:2a:52:bf:6e:2e:4c:5a:9e:d1:88:21:1d:bb:
         9b:be:8a:dc:d1:7a:8c:2f:36:59:7e:e3:cc:07:c1:07:e4:63:
         1a:a9:67:a3:b9:b1:b0:4e:7a:22:53:b1:1b:af:57:8a:16:3d:
         d1:16:b8:9f:a6:55:e7:72:b1:6c:8d:48:56:3f:cf:70:28:7a:
         0f:bd:36:d1:1a:a7:ba:e0:49:17:66:07:4a:5b:aa:d4:51:77:
         10:53:a1:a4:e1:8a:34:3f:1c:ca:03:d2:ca:e7:16:93:48:6e:
         81:11:da:40:7e:73:27:cd:55:4a:70:a2:f7:4f:79:37:bd:55:
         96:9c:a8:7e:56:75:b5:a5:49:de:46:00:74:9c:af:a2:dd:e4:
         17:f2:29:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----