Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a356532303a3a2f34342d3434203d3e20313938393534.roa
File:                     326131323a646434373a356532303a3a2f34342d3434203d3e20313938393534.roa (raw, json)
Hash identifier:          9tidxZ9zhgbXwYn7uYWc8nDg2AOiK3NkZ6fRgcH9iGo=
Subject key identifier:   A6:54:68:B1:AF:66:5D:75:4C:F4:88:11:97:5E:24:B4:39:7D:3E:BF
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       730342393216CEDA2DDF27249A7BCA5DB16C347D
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a356532303a3a2f34342d3434203d3e20313938393534.roa
Signing time:             Sat 08 Apr 2023 04:36:21 +0000
ROA not before:           Sat 08 Apr 2023 04:31:21 +0000
ROA not after:            Sat 06 Apr 2024 04:36:21 +0000
asID:                     198954
IP address blocks:        2a12:dd47:5e20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:03:42:39:32:16:ce:da:2d:df:27:24:9a:7b:ca:5d:b1:6c:34:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:31:21 2023 GMT
            Not After : Apr  6 04:36:21 2024 GMT
        Subject: CN=A65468B1AF665D754CF48811975E24B4397D3EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:27:46:2c:4e:9a:81:ee:d8:db:9d:96:b0:9b:
                    46:d1:de:72:50:ec:b1:f8:e3:70:5c:24:b2:b1:0a:
                    99:31:28:ae:2a:7f:b6:49:06:38:24:47:90:7d:df:
                    05:d5:d0:ab:a7:a7:0a:37:e6:52:ef:73:9b:33:87:
                    f0:67:16:e0:1e:6a:89:50:91:97:54:cb:a5:d6:6c:
                    43:ec:2c:ed:18:25:f5:5f:30:b0:35:7d:69:23:e3:
                    42:68:f1:e6:cd:94:ac:81:1a:37:ad:a9:2e:8b:2f:
                    f7:12:4d:a5:96:ee:b5:7c:2e:ab:8b:6c:c3:cd:fa:
                    78:0f:20:ae:d4:e9:fb:96:e7:72:6b:38:26:82:28:
                    8c:92:df:16:cc:ff:30:c9:e1:19:88:3e:a0:0a:3a:
                    2e:7d:c1:9c:50:d4:22:66:bf:1f:f8:33:6b:b7:c8:
                    66:0e:5b:34:9b:b1:47:21:55:bb:c8:39:17:05:b8:
                    6e:d5:ab:1b:ee:3f:0b:a1:87:a0:a8:eb:63:36:ce:
                    5a:23:4f:b3:68:f9:3c:0f:80:33:49:84:6e:a2:29:
                    40:b1:01:78:74:6a:46:8b:c8:32:fc:6d:74:08:d9:
                    fd:ad:59:0b:93:c5:33:5c:47:e1:81:6b:ff:56:36:
                    ea:1a:86:82:20:10:24:1a:43:2c:14:d6:83:09:75:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:54:68:B1:AF:66:5D:75:4C:F4:88:11:97:5E:24:B4:39:7D:3E:BF
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a356532303a3a2f34342d3434203d3e20313938393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         9b:62:fe:a8:d3:38:0d:9e:16:be:6a:22:a1:63:9e:0b:82:9c:
         73:50:70:b8:ab:e7:3a:ca:1a:e8:6a:b7:cf:89:70:e7:5b:93:
         32:2c:6e:b2:71:b0:2d:91:f6:a4:92:39:11:77:8a:f2:94:a8:
         e8:18:89:cf:f1:f0:10:53:f8:89:30:1d:64:3a:d6:96:27:c7:
         50:31:c3:9c:6a:0e:63:b4:64:be:48:59:aa:96:9a:51:15:d2:
         ce:c9:47:7d:5d:53:c1:5b:54:b8:82:6f:6d:20:af:2d:8b:fd:
         f0:08:c8:b1:3d:0c:c8:02:2b:ca:09:e9:72:76:73:17:72:52:
         b9:96:a6:12:e2:f7:f9:ff:79:70:b3:da:34:a4:9d:d1:2f:d7:
         e2:4f:30:3a:78:44:61:f2:7b:85:b3:fa:0b:c0:c8:34:17:fb:
         51:e2:d9:e0:c3:9c:80:44:e3:67:c2:c9:ef:93:cd:ed:fd:9b:
         11:ed:03:c0:43:7e:c8:75:38:ab:46:ab:1b:27:2b:ce:34:e2:
         2b:d5:7d:1a:15:dd:20:44:fb:46:3a:d7:6e:63:07:e3:b0:92:
         3f:eb:2a:d7:ce:08:c7:63:21:1c:fe:df:b4:de:17:1b:e2:f2:
         83:5d:45:d6:e2:75:82:94:dd:e7:a8:0d:04:cf:83:88:27:9c:
         57:28:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----