Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa
File:                     326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa (raw, json)
Hash identifier:          tF09crCgKmedKgE0Ik4dgD8ZNKPiBFgaHB2VfU6Byh4=
Subject key identifier:   B8:EA:F8:1F:C0:E1:9A:5B:D3:A0:DD:66:CF:EB:FA:17:D3:7C:76:16
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       4D7C3945FA728D81074A4B77532565360DEB32F3
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa
Signing time:             Sat 08 Apr 2023 04:53:04 +0000
ROA not before:           Sat 08 Apr 2023 04:48:04 +0000
ROA not after:            Sat 06 Apr 2024 04:53:04 +0000
asID:                     207941
IP address blocks:        2a12:dd47:8005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7c:39:45:fa:72:8d:81:07:4a:4b:77:53:25:65:36:0d:eb:32:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:48:04 2023 GMT
            Not After : Apr  6 04:53:04 2024 GMT
        Subject: CN=B8EAF81FC0E19A5BD3A0DD66CFEBFA17D37C7616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:32:72:65:68:71:25:6f:8d:03:0e:66:ed:
                    bd:ad:c3:ee:a8:55:75:b7:87:61:48:46:29:ab:ac:
                    ca:a8:7a:40:4d:27:c8:d7:c7:65:45:16:65:a2:a5:
                    4f:f4:15:4b:ef:8c:00:08:63:fc:83:c4:ce:3c:7f:
                    cc:0e:3d:b5:a2:c7:4b:a4:c6:2a:f1:70:e3:d5:da:
                    a0:e6:8c:98:3d:bf:2a:8b:17:fa:ce:31:26:53:50:
                    c5:00:2b:f9:41:da:8d:c7:97:81:87:44:2c:c0:86:
                    c1:5c:7b:a5:52:f3:11:43:6b:77:a6:e9:54:12:d6:
                    f4:ec:af:c3:41:7e:4a:99:79:33:24:0f:f0:53:7a:
                    ff:e9:ca:16:78:c2:2a:c8:4c:2b:bb:c2:8a:b6:3d:
                    97:4e:44:13:78:12:e1:6c:37:32:82:2f:d4:0d:1d:
                    43:bb:66:eb:31:ef:28:53:02:60:2a:1a:e1:a3:49:
                    29:3d:f6:28:31:f8:e6:ed:a9:62:62:a1:3f:55:26:
                    6c:13:24:0e:65:61:8b:5a:37:dc:4c:9a:5a:a5:c3:
                    19:80:a8:89:d2:01:b5:cb:3b:b4:bb:a5:4c:c9:5e:
                    28:62:71:4b:39:4a:6e:bf:72:cc:6a:ef:b1:5b:8b:
                    5f:ca:0c:da:05:38:86:6c:79:86:c4:a7:c6:0a:c0:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EA:F8:1F:C0:E1:9A:5B:D3:A0:DD:66:CF:EB:FA:17:D3:7C:76:16
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:09:d7:b6:e3:4a:df:90:28:9b:ce:d5:f2:d1:54:90:5d:4c:
         21:7a:87:b6:31:58:0e:66:cd:38:d5:e6:b0:8f:1e:e2:4b:31:
         7b:ca:30:f6:2d:ba:6d:8d:32:f6:bc:5f:c6:66:37:6c:3c:a9:
         b3:46:b2:fe:49:e9:50:aa:65:03:43:d0:ad:56:53:7d:71:6a:
         1d:af:7f:dd:d0:ff:33:db:2f:23:9e:d6:9c:d7:80:a4:dd:8e:
         97:0d:4b:f6:4d:c8:aa:47:81:00:6c:a4:74:96:03:8d:2f:ee:
         ca:1f:0f:a3:ec:6a:66:8a:a3:9c:cd:e2:8d:6e:a6:e2:02:e3:
         3f:f9:e0:11:a7:d2:cf:16:9c:73:3f:74:d7:2e:a1:30:bf:62:
         0a:35:d0:98:8f:63:c3:99:ce:df:35:84:a1:92:fc:80:d3:3c:
         3b:76:a7:02:4d:78:78:e2:cd:e7:19:07:e6:76:23:b8:1f:c2:
         b9:f0:4c:f4:d0:13:35:89:5d:df:cc:f6:2b:8c:18:1e:b1:25:
         0e:a6:ae:8d:a0:00:61:ed:5e:f9:7f:9e:3c:b3:36:eb:74:d4:
         67:8a:49:77:8f:42:c2:12:11:24:a2:df:ea:99:fb:c3:f3:f8:
         b6:1c:07:28:33:1f:b8:f5:1e:4a:5d:cf:32:75:b6:70:33:5c:
         35:87:ee:20
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUTXw5RfpyjYEHSkt3UyVlNg3rMvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNDQ4MDRaFw0yNDA0MDYwNDUzMDRaMDMxMTAvBgNV
BAMTKEI4RUFGODFGQzBFMTlBNUJEM0EwREQ2NkNGRUJGQTE3RDM3Qzc2MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfzDJyZWhxJW+NAw5m7b2tw+6o
VXW3h2FIRimrrMqoekBNJ8jXx2VFFmWipU/0FUvvjAAIY/yDxM48f8wOPbWix0uk
xirxcOPV2qDmjJg9vyqLF/rOMSZTUMUAK/lB2o3Hl4GHRCzAhsFce6VS8xFDa3em
6VQS1vTsr8NBfkqZeTMkD/BTev/pyhZ4wirITCu7woq2PZdORBN4EuFsNzKCL9QN
HUO7Zusx7yhTAmAqGuGjSSk99igx+ObtqWJioT9VJmwTJA5lYYtaN9xMmlqlwxmA
qInSAbXLO7S7pUzJXihicUs5Sm6/csxq77Fbi1/KDNoFOIZseYbEp8YKwLnNAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQUuOr4H8DhmlvToN1mz+v6F9N8dhYwHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMH4G
CCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzODMwMzAzNTNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzAzNzM5MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeABTANBgkq
hkiG9w0BAQsFAAOCAQEAjwnXtuNK35Aom87V8tFUkF1MIXqHtjFYDmbNONXmsI8e
4ksxe8ow9i26bY0y9rxfxmY3bDyps0ay/knpUKplA0PQrVZTfXFqHa9/3dD/M9sv
I57WnNeApN2Olw1L9k3IqkeBAGykdJYDjS/uyh8Po+xqZoqjnM3ijW6m4gLjP/ng
EafSzxaccz901y6hML9iCjXQmI9jw5nO3zWEoZL8gNM8O3anAk14eOLN5xkH5nYj
uB/CufBM9NATNYld38z2K4wYHrElDqaujaAAYe1e+X+ePLM263TUZ4pJd49CwhIR
JKLf6pn7w/P4thwHKDMfuPUeSl3PMnW2cDNcNYfuIA==
-----END CERTIFICATE-----