Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa
File:                     326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa (raw, json)
Hash identifier:          Oa35yvm7fLZpLesEtSl1KwJ/2KnheMybyjLYc61Ysmg=
Subject key identifier:   26:B8:64:10:34:80:A5:D5:1A:16:DE:F7:3E:69:18:2A:6E:22:73:F1
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       39030137D3E642CDC80A2CF5204914ED5FDFAABF
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa
Signing time:             Sat 08 Apr 2023 04:47:14 +0000
ROA not before:           Sat 08 Apr 2023 04:42:14 +0000
ROA not after:            Sat 06 Apr 2024 04:47:14 +0000
asID:                     212168
IP address blocks:        2a12:dd47:5800::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:03:01:37:d3:e6:42:cd:c8:0a:2c:f5:20:49:14:ed:5f:df:aa:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:42:14 2023 GMT
            Not After : Apr  6 04:47:14 2024 GMT
        Subject: CN=26B864103480A5D51A16DEF73E69182A6E2273F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:b5:67:4f:5d:c4:94:16:85:a9:d7:7e:e0:
                    a5:51:69:0b:88:3c:6b:3c:af:a4:a6:bb:1c:49:27:
                    7e:13:cd:a4:7f:78:be:dd:d4:36:c5:88:61:32:c8:
                    91:e8:93:6f:ff:9b:31:1d:94:33:f2:67:00:3f:b5:
                    cf:d9:43:0f:e8:88:6d:3b:54:4f:99:74:f7:6d:64:
                    44:1a:7c:07:8e:39:21:ba:cb:f0:a4:2f:21:56:e2:
                    d2:96:d4:ad:ed:9e:d6:5b:ff:a0:f0:cc:31:cd:71:
                    ea:d4:fd:1c:de:25:54:e3:c2:ad:28:2b:67:06:59:
                    ff:18:67:e4:53:dc:d5:8a:ee:0b:9b:d6:a5:0b:84:
                    61:04:dd:b8:b9:50:a2:dd:9e:22:66:34:a6:a1:40:
                    be:96:e6:f0:f0:0d:23:97:0d:01:de:ab:42:00:ac:
                    c9:ec:9a:b9:82:bc:28:8f:db:f1:ca:5b:87:f2:c8:
                    b5:a1:b3:e9:36:5a:8d:1f:84:ca:ac:42:d2:a2:ae:
                    e7:a2:0e:4e:d9:68:ed:10:44:32:c2:06:36:c1:1b:
                    2a:f5:35:fc:3c:c3:01:86:56:1a:dd:f0:5a:76:32:
                    86:fd:ba:24:9e:0a:e0:6f:39:68:68:ef:8f:28:08:
                    2e:df:2b:9d:4d:66:b4:2d:45:1a:bb:48:a6:d2:ee:
                    2b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B8:64:10:34:80:A5:D5:1A:16:DE:F7:3E:69:18:2A:6E:22:73:F1
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5800::/38

    Signature Algorithm: sha256WithRSAEncryption
         67:c7:dd:06:eb:5f:7a:e1:11:a0:f2:f5:17:50:46:f4:3e:43:
         e2:dd:f8:f4:88:cc:a5:7f:c3:e7:19:b3:8e:3b:06:43:e2:6d:
         82:b7:fa:b1:9b:8a:70:5c:52:67:3a:1a:19:2e:5a:25:70:b8:
         fa:0f:85:ae:23:da:b1:5f:0f:df:22:41:79:d8:35:ec:c6:92:
         78:69:95:ef:c3:66:2b:f3:28:06:bc:62:a4:f3:85:0d:4f:48:
         bb:cf:24:c4:3f:10:a8:46:7e:92:3d:6a:e3:b3:9e:05:72:d4:
         0f:e8:ca:66:ca:17:49:76:28:db:e9:d8:f7:d9:f2:0d:98:d8:
         50:9a:07:dc:a1:22:ea:d3:af:cf:cb:cd:75:c6:17:86:b7:ff:
         d4:ef:5c:e6:18:26:7f:be:d1:ff:c3:39:99:5d:e6:a5:15:9e:
         a2:90:71:e2:e0:cf:35:77:b7:b3:ea:57:4a:57:a9:b5:db:26:
         92:83:25:36:c5:f3:e1:b9:4b:8d:19:42:70:88:ea:e4:5a:05:
         6e:7c:9c:7e:83:53:60:19:7a:50:70:43:47:02:ac:7c:59:f7:
         63:c7:f4:2f:93:85:92:73:10:ca:b2:2b:d2:21:44:4a:e6:41:
         d9:2e:7a:93:54:3d:02:5c:3b:f5:2c:8e:1c:61:3c:29:ee:b5:
         db:10:c3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----