Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383030313a3a2f34382d3438203d3e203537343031.roa
File:                     326131323a646434373a383030313a3a2f34382d3438203d3e203537343031.roa (raw, json)
Hash identifier:          0UFNhHENPbxvN8DQgizer4KsY6dWx75BHrZeedW6Mak=
Subject key identifier:   DD:8F:95:E8:EB:5C:4E:4D:94:6C:86:93:48:3F:7D:6A:5D:FC:8E:E1
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       1A8B5341F7831F0A9557EF6F96BFA864D0F076BF
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383030313a3a2f34382d3438203d3e203537343031.roa
Signing time:             Sat 08 Apr 2023 04:35:48 +0000
ROA not before:           Sat 08 Apr 2023 04:30:48 +0000
ROA not after:            Sat 06 Apr 2024 04:35:48 +0000
asID:                     57401
IP address blocks:        2a12:dd47:8001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8b:53:41:f7:83:1f:0a:95:57:ef:6f:96:bf:a8:64:d0:f0:76:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:30:48 2023 GMT
            Not After : Apr  6 04:35:48 2024 GMT
        Subject: CN=DD8F95E8EB5C4E4D946C8693483F7D6A5DFC8EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:ca:f7:88:5e:63:09:50:66:c8:e7:97:1c:
                    2b:7e:5a:e8:86:23:9f:92:25:76:1f:ab:e2:66:16:
                    29:f9:bd:b3:fe:d7:74:3c:10:f4:70:94:71:1f:11:
                    b0:35:e2:df:c2:b9:ae:87:1a:43:33:89:52:3c:8d:
                    2c:4f:4e:54:84:82:ae:cd:5a:76:93:7c:29:a4:d2:
                    5e:ef:bc:8d:0d:7f:20:eb:cf:ce:47:73:4c:43:4c:
                    e5:91:6b:35:c4:0c:be:68:37:52:94:a5:4e:6f:7f:
                    71:84:5f:08:f4:54:a9:10:50:9f:91:51:61:6f:f1:
                    e2:e8:41:f3:f9:95:79:d4:ff:89:d1:8f:0a:0b:d8:
                    78:0a:3e:14:90:21:c2:2b:60:88:56:21:81:28:c7:
                    db:90:37:59:81:8e:6c:43:c6:13:e0:34:81:56:c1:
                    82:67:0f:07:82:e2:e8:fd:44:5f:b3:ed:90:a6:32:
                    c3:c9:3c:a8:b1:74:6c:89:27:54:f4:00:59:03:bc:
                    df:ee:06:75:20:0c:21:45:a5:84:2a:09:14:82:22:
                    2c:58:f4:94:b1:4f:85:fa:a9:b8:2a:14:92:a0:a1:
                    14:6b:4c:39:5a:c1:e7:80:f9:e6:0f:a9:b9:4b:8c:
                    d1:dd:d4:38:b0:5c:8b:dc:4d:9b:15:ea:2c:59:46:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8F:95:E8:EB:5C:4E:4D:94:6C:86:93:48:3F:7D:6A:5D:FC:8E:E1
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383030313a3a2f34382d3438203d3e203537343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:93:dd:54:de:c8:6b:65:d9:56:64:f3:11:cf:05:ec:3a:33:
         82:9c:26:49:f6:ea:63:de:ed:b0:1b:32:04:00:d2:5b:ce:79:
         06:18:41:4d:25:58:fa:c5:01:70:73:43:1d:d5:6a:f1:30:07:
         6e:c1:22:66:5d:37:00:25:3f:59:45:bb:37:bb:0b:cb:24:bb:
         8e:0c:7a:74:a1:96:82:da:de:d2:7b:2b:d9:4b:a6:da:9c:c4:
         0b:24:a3:20:2a:28:cf:8c:d9:88:54:9b:d3:d9:98:ab:03:e9:
         83:a8:16:12:0a:67:65:af:40:98:67:33:64:1a:74:5e:d8:77:
         4f:ae:2f:7b:a3:29:fd:ad:f4:04:c7:cc:0b:3b:a0:42:21:a0:
         38:16:55:8a:04:db:56:08:71:45:86:94:f5:5f:f2:1f:ea:27:
         96:30:72:4c:5c:e1:34:b3:4b:0b:01:45:eb:8b:55:79:a8:e0:
         29:d6:a0:f4:c5:84:90:17:c7:d1:78:d9:f2:50:de:00:ca:26:
         4f:bb:a8:af:ca:f0:57:f8:53:32:1e:c4:4f:91:33:32:49:e9:
         f7:ad:36:62:79:c1:a9:8f:65:71:59:43:cf:87:60:74:97:38:
         61:89:43:f2:91:f1:0c:15:72:d3:02:2b:f4:24:06:a7:df:4c:
         b7:e0:03:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----