Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383034393a3a2f34382d3438203d3e20323035383438.roa
File:                     326131323a646434373a383034393a3a2f34382d3438203d3e20323035383438.roa (raw, json)
Hash identifier:          aIb2t9OInhFM9RrQZ1hpcdFshAs5wrg6Nw8/+5glloo=
Subject key identifier:   DD:D1:B5:32:10:E7:5F:2D:CD:96:27:1E:B4:78:F1:0C:82:99:12:CE
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       1A1B83C699A82BA18F466A21952DFA0DF41FFB82
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383034393a3a2f34382d3438203d3e20323035383438.roa
Signing time:             Sat 08 Apr 2023 05:07:42 +0000
ROA not before:           Sat 08 Apr 2023 05:02:42 +0000
ROA not after:            Sat 06 Apr 2024 05:07:42 +0000
asID:                     205848
IP address blocks:        2a12:dd47:8049::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1b:83:c6:99:a8:2b:a1:8f:46:6a:21:95:2d:fa:0d:f4:1f:fb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 05:02:42 2023 GMT
            Not After : Apr  6 05:07:42 2024 GMT
        Subject: CN=DDD1B53210E75F2DCD96271EB478F10C829912CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:73:d0:fc:51:6f:45:e6:69:00:12:7a:bb:4c:
                    ea:34:5d:4e:88:49:50:05:01:bc:48:c9:8a:38:1d:
                    e7:46:2c:7f:0d:25:1a:2d:2b:e8:87:ee:01:8d:4b:
                    03:26:59:2a:7e:b5:8a:af:9b:3c:43:0b:1a:d4:39:
                    ec:f4:33:bb:2a:d9:28:7c:c1:a3:de:3d:6c:4c:05:
                    35:ea:23:81:20:11:86:72:fd:fc:a1:f3:8c:ce:6c:
                    24:fd:5d:1c:dd:1c:c3:ac:a1:8f:f3:de:36:2a:6e:
                    19:e2:0c:0b:d2:77:7b:3d:2e:43:2b:bf:c7:d0:d6:
                    70:de:b3:70:73:62:93:9f:6e:be:78:a2:f7:e3:28:
                    71:99:cf:d2:a3:35:cd:5b:16:27:3f:e3:d3:ff:e2:
                    44:15:8f:78:c0:13:cd:49:1a:31:98:95:35:7b:04:
                    d5:43:3c:1c:9b:4b:8f:7f:e3:f3:9a:05:55:28:3e:
                    a2:cc:13:4d:bb:c6:60:32:12:c8:ea:82:bb:1e:d0:
                    0f:01:ec:62:d2:03:07:09:a5:eb:ec:e5:aa:96:d5:
                    4d:6f:1f:e1:24:29:39:05:a7:1e:f4:b3:9b:c4:ae:
                    75:d0:ed:26:6a:80:a0:dd:12:1b:91:68:32:5a:e9:
                    63:12:35:97:00:6e:5f:f9:42:2d:90:f5:22:99:35:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D1:B5:32:10:E7:5F:2D:CD:96:27:1E:B4:78:F1:0C:82:99:12:CE
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383034393a3a2f34382d3438203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8049::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:8b:a9:d8:67:a7:0b:c0:78:2a:32:a7:b8:9c:9c:f8:b9:f6:
         6a:0d:c2:6f:fb:61:49:00:62:11:c6:8f:6c:5c:3f:c1:2b:92:
         5f:da:a8:8b:83:1e:7e:a7:58:f5:ce:d8:0a:d2:48:27:29:e1:
         b2:c6:56:c8:7b:03:41:89:54:19:11:c6:20:5f:c5:c6:f1:aa:
         71:a8:eb:c0:83:1d:1b:71:23:1c:89:a6:c9:dd:9c:af:03:5e:
         ab:4c:0b:94:05:9c:01:c7:c2:f2:15:57:6e:7d:9c:9c:14:91:
         8c:29:79:c3:85:ac:cd:61:e2:58:b6:f4:54:8d:7f:c7:97:01:
         47:78:c8:50:56:e2:7d:51:8c:55:4b:2c:8e:8b:c7:4f:25:ae:
         6c:9a:21:03:08:b7:6b:17:fc:0a:01:ef:3f:ad:45:0b:28:45:
         60:40:00:d6:9c:ef:33:1b:e3:42:9b:e7:0a:65:9c:35:f0:24:
         67:e5:22:71:04:19:db:3b:f0:3c:88:26:0a:1e:9f:f8:f3:c0:
         97:6c:49:53:17:e0:5a:fe:8a:12:e5:38:dc:aa:99:72:29:53:
         3d:f0:42:a7:44:7a:8d:79:a6:a3:6e:86:b2:08:97:49:7c:37:
         89:f5:7f:d2:e1:a0:4d:ff:dd:4d:2a:4e:b9:03:75:99:15:5d:
         f3:a3:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----