Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383034613a3a2f34382d3438203d3e203537393537.roa
File:                     326131323a646434373a383034613a3a2f34382d3438203d3e203537393537.roa (raw, json)
Hash identifier:          1rPyr9IgUPtg8ThuxW+pvtEX0zaL4ogllbh5zi5s5H8=
Subject key identifier:   CD:CB:E6:8A:00:E5:FB:52:D6:69:17:90:57:9A:00:B5:49:DB:2B:7E
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       67AA078E74F7104C230D6EA323652184A25E3A7F
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383034613a3a2f34382d3438203d3e203537393537.roa
Signing time:             Sat 08 Apr 2023 04:39:52 +0000
ROA not before:           Sat 08 Apr 2023 04:34:52 +0000
ROA not after:            Sat 06 Apr 2024 04:39:52 +0000
asID:                     57957
IP address blocks:        2a12:dd47:804a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:aa:07:8e:74:f7:10:4c:23:0d:6e:a3:23:65:21:84:a2:5e:3a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:34:52 2023 GMT
            Not After : Apr  6 04:39:52 2024 GMT
        Subject: CN=CDCBE68A00E5FB52D6691790579A00B549DB2B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:30:dc:cc:65:27:e9:db:24:48:d9:56:75:
                    41:8e:f4:8c:ae:4c:7b:90:0a:f2:54:a4:b3:fe:8b:
                    b8:c2:41:5e:75:30:5e:4f:71:3f:00:05:5f:2e:f6:
                    c0:26:7c:30:47:9c:fb:ba:8e:fe:2f:7d:ff:ab:c3:
                    0a:41:eb:ba:2f:41:2b:53:64:bd:c4:d5:08:a8:f8:
                    f3:97:b5:c9:5a:0e:af:76:5d:0e:bc:55:2a:34:ab:
                    30:4b:a3:86:6e:ef:76:e1:b0:bf:1f:f0:e2:7e:24:
                    9c:60:be:f2:f3:e9:b1:ef:aa:be:3c:b6:18:38:32:
                    e7:98:47:6d:7d:ba:00:1d:f0:d7:fe:18:0f:03:f5:
                    f9:3b:97:c2:2a:65:6c:98:06:d4:2d:e9:af:0d:96:
                    f6:68:32:d8:b7:a8:11:a9:4f:a2:15:9f:94:83:7c:
                    af:bb:c8:f6:67:34:a4:b5:07:4f:57:3d:11:5e:f7:
                    38:ff:9c:96:13:f7:05:f4:32:27:b8:81:ec:9f:e4:
                    b4:05:79:fa:e8:c8:f1:3f:e1:da:67:ef:a6:1a:e1:
                    f4:73:df:f4:64:4a:a8:5c:56:ba:22:92:25:d9:d5:
                    47:f9:53:3c:fd:a2:6f:64:9f:91:6a:7b:cb:da:93:
                    e9:8c:fc:d6:c6:93:78:e0:1a:7f:93:4c:19:d2:ff:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CB:E6:8A:00:E5:FB:52:D6:69:17:90:57:9A:00:B5:49:DB:2B:7E
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383034613a3a2f34382d3438203d3e203537393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804a::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:fb:62:94:d2:a9:32:dc:de:27:15:61:06:ff:50:c8:05:26:
         31:2a:ea:5b:c3:a5:53:71:03:63:99:c8:02:54:34:0a:34:34:
         e8:bd:f6:b2:e9:8c:78:db:db:2d:b0:de:35:08:19:e4:e2:fb:
         31:27:1d:55:f2:e0:56:da:f9:cf:b6:ff:82:f3:1e:9c:21:7a:
         01:d2:c0:db:4c:96:38:71:e1:58:72:ba:96:19:26:03:25:ea:
         c9:28:f4:6c:05:d8:12:f0:43:04:f5:62:b1:0c:98:95:d9:5f:
         04:f2:40:37:8f:b1:b4:92:e1:1b:b8:b8:85:56:a1:c0:dd:03:
         f2:f4:b8:95:e0:51:17:97:b5:01:02:d1:49:88:04:13:f0:51:
         b2:b5:ba:ef:d8:5e:9f:c5:e3:d8:d0:eb:36:d5:ed:d9:d9:55:
         ef:03:e4:42:25:8e:90:a3:0d:2d:88:27:35:4c:3f:63:4c:ce:
         13:74:cb:d8:d7:3f:dc:25:a0:2f:05:9e:99:01:14:6e:88:13:
         a7:7f:06:48:a2:b1:b6:bf:1b:0c:02:a7:68:18:5d:58:9b:bf:
         91:3c:da:54:7c:9a:23:fb:a2:2d:15:ad:5d:4f:68:bb:c0:98:
         79:b2:fb:2f:2e:a6:3f:ff:8a:6c:99:6b:c9:8b:58:d3:1c:b8:
         60:47:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----