Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383032383a3a2f34382d3438203d3e20323131393436.roa
File:                     326131323a646434373a383032383a3a2f34382d3438203d3e20323131393436.roa (raw, json)
Hash identifier:          iO5FKbABSlEoXC2x6XizufFRTXcqWXB2UXWZF5hCsng=
Subject key identifier:   63:38:3A:ED:70:1C:17:F3:02:BE:0C:6E:21:F2:EC:61:78:E0:EB:24
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       635046EAB3465A2CC3FDF1F81A617222D7DCAFDE
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383032383a3a2f34382d3438203d3e20323131393436.roa
Signing time:             Sat 08 Apr 2023 04:49:04 +0000
ROA not before:           Sat 08 Apr 2023 04:44:04 +0000
ROA not after:            Sat 06 Apr 2024 04:49:04 +0000
asID:                     211946
IP address blocks:        2a12:dd47:8028::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:50:46:ea:b3:46:5a:2c:c3:fd:f1:f8:1a:61:72:22:d7:dc:af:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:44:04 2023 GMT
            Not After : Apr  6 04:49:04 2024 GMT
        Subject: CN=63383AED701C17F302BE0C6E21F2EC6178E0EB24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ea:c6:b6:6a:95:57:9b:dd:64:59:83:5c:1d:
                    1c:de:47:0c:15:7b:4e:15:dd:ac:88:91:e8:df:22:
                    01:db:be:42:5c:71:b9:bf:c9:a7:62:8e:1d:7e:90:
                    3e:9f:49:0d:82:1d:53:17:92:81:43:d6:40:e8:42:
                    55:fd:ef:4e:7a:d4:df:84:a6:88:25:53:68:00:bc:
                    50:40:53:2b:7a:b6:c8:4a:2d:b6:12:da:e1:2b:47:
                    09:f2:fa:d2:1a:46:98:81:4c:ba:e2:b6:30:29:40:
                    2e:18:e5:26:41:e3:84:bd:24:b2:0e:07:b4:e2:a7:
                    87:fb:33:c2:2d:8a:33:a0:1a:51:a6:56:f6:2f:f5:
                    8b:80:06:48:84:16:90:b7:44:bf:7c:78:a2:97:64:
                    fc:7a:05:7c:bd:e8:db:91:9e:c7:7b:a0:10:2b:87:
                    02:90:2e:20:29:30:a8:3f:b9:51:31:1c:ac:15:15:
                    00:e0:dc:86:64:b9:fc:e3:92:f3:79:76:86:ee:97:
                    2a:4b:59:37:6f:3c:c7:e2:74:87:72:48:5f:df:91:
                    63:62:81:fd:8f:28:56:33:b2:38:e6:7e:22:5e:a0:
                    0f:fa:58:07:65:3c:b6:6f:f6:9a:52:e4:12:bc:16:
                    0e:2b:a5:67:d7:e8:9d:b6:cd:cf:e4:74:8e:b0:53:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:38:3A:ED:70:1C:17:F3:02:BE:0C:6E:21:F2:EC:61:78:E0:EB:24
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383032383a3a2f34382d3438203d3e20323131393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8028::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:d9:a2:fb:15:39:a9:44:d4:fd:74:fb:72:a2:21:ce:56:48:
         40:d6:0b:51:75:34:1f:66:99:7d:59:2d:30:4f:4a:c8:4d:79:
         6e:69:38:f8:67:62:38:3b:24:59:c7:8c:47:a2:be:c2:a0:6e:
         5a:9d:64:9d:d2:ba:49:af:92:1d:31:92:62:84:e0:fe:1d:15:
         3b:92:bf:d9:7e:16:bd:bf:2c:67:32:cc:4e:b2:a1:d9:88:96:
         42:96:fe:58:56:3b:78:60:af:ee:8b:64:d4:9e:a6:0c:8c:5e:
         b4:16:44:31:05:db:e4:8e:ba:54:96:01:67:b8:19:9e:77:b9:
         29:1a:43:9c:44:3f:9e:5c:77:03:2b:89:f2:62:10:8f:2a:5d:
         01:39:30:20:98:d5:43:57:b0:8c:c3:85:d6:90:5b:33:23:e4:
         5d:2b:ae:f7:65:33:9c:67:43:6f:95:d1:85:f0:96:17:a6:ce:
         be:a8:6f:e3:ce:79:4f:5d:f1:76:b5:3c:ac:dc:8b:57:f2:eb:
         b3:a4:5e:25:99:63:ad:87:6d:09:4e:98:f3:d6:14:1b:cb:e5:
         c7:0c:ba:d9:81:62:eb:95:65:43:c4:d2:cf:07:96:59:e6:18:
         39:88:38:d9:9d:ac:6a:b8:09:45:22:f0:2e:ed:89:cc:60:7d:
         18:dc:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----