Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383034623a3a2f34382d3438203d3e203335393133.roa
File:                     326131323a646434373a383034623a3a2f34382d3438203d3e203335393133.roa (raw, json)
Hash identifier:          klP5D5Nu0SB/x9gME7cifCDQxzKsF6VDizheUYVkFRQ=
Subject key identifier:   EA:4D:DF:94:5E:F8:6B:D7:81:65:2C:0D:78:11:E1:B5:D3:86:A4:BC
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       40D1D90FFF17950499A3DA76465B6BE71A5B5F87
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383034623a3a2f34382d3438203d3e203335393133.roa
Signing time:             Sat 08 Apr 2023 04:26:43 +0000
ROA not before:           Sat 08 Apr 2023 04:21:43 +0000
ROA not after:            Sat 06 Apr 2024 04:26:43 +0000
asID:                     35913
IP address blocks:        2a12:dd47:804b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d1:d9:0f:ff:17:95:04:99:a3:da:76:46:5b:6b:e7:1a:5b:5f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:21:43 2023 GMT
            Not After : Apr  6 04:26:43 2024 GMT
        Subject: CN=EA4DDF945EF86BD781652C0D7811E1B5D386A4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:ce:c0:e1:20:a2:58:18:80:35:62:92:0d:
                    13:97:78:1f:ca:22:e7:f7:cb:9d:73:d4:96:a2:16:
                    85:40:0b:55:e4:7c:df:8e:83:f3:42:7d:59:d6:da:
                    c3:47:40:cb:f6:48:5a:61:a9:bd:56:18:9f:90:d2:
                    9b:80:11:08:b6:8c:de:dc:0b:f5:48:bf:48:1f:cc:
                    8e:7f:ce:9c:be:b9:99:76:44:cf:ba:55:53:34:9d:
                    4a:bd:26:1f:22:a2:2f:2a:35:0b:24:94:92:e5:93:
                    e4:f9:ac:2a:59:b7:6f:da:3f:de:fa:e4:97:c0:bc:
                    d1:45:b3:bc:53:e4:2d:c5:fe:12:88:5e:67:0b:14:
                    f3:91:a6:f6:7c:7d:0d:7a:c2:47:86:0f:f1:30:65:
                    d8:fe:e9:c5:fb:87:b4:10:91:e0:52:4d:65:d0:35:
                    5c:7b:d4:76:ab:dc:1b:88:3b:39:79:a8:05:f7:9e:
                    1f:3c:24:d7:e2:6a:03:a2:d7:72:cb:c6:ea:e4:95:
                    7c:e1:98:40:dd:69:ac:8f:39:04:cb:ea:b5:2f:56:
                    34:73:82:c4:0e:af:1a:f3:51:82:a7:01:ce:00:0a:
                    ae:d6:0e:b7:b5:d5:8f:64:64:d6:64:04:6a:55:d1:
                    f4:1d:7f:5b:df:64:4a:20:af:19:54:d0:96:5b:01:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4D:DF:94:5E:F8:6B:D7:81:65:2C:0D:78:11:E1:B5:D3:86:A4:BC
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383034623a3a2f34382d3438203d3e203335393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804b::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:88:b8:a7:8a:94:18:16:57:1b:f0:18:34:ab:a5:a8:a4:b3:
         d5:64:2a:20:69:6e:2d:25:db:0f:4c:b3:cb:7b:a3:e2:44:6d:
         4b:36:b2:d9:e5:7a:01:07:7f:e1:19:86:30:d5:98:18:74:3b:
         ef:d0:e1:a5:a2:54:e3:85:b1:dc:78:c5:7e:f2:27:8d:7f:a9:
         38:6c:d3:b1:90:d2:17:5b:41:7b:7d:a1:45:c9:f2:37:70:55:
         64:e6:f4:14:a1:5d:82:e7:e8:be:18:5a:27:fb:a5:e1:24:80:
         22:05:7e:cd:98:ec:d0:ce:b9:9f:2c:45:b3:c8:f5:3d:36:70:
         cf:41:28:47:69:08:8c:1b:8b:9c:1a:4e:de:47:81:af:ee:52:
         70:95:54:0d:b0:99:cc:69:67:6e:dc:bd:c1:f8:e9:b2:88:18:
         c8:81:fc:52:84:dd:a1:50:8a:c1:05:84:26:4d:e9:af:4d:53:
         b7:4f:ff:6d:38:db:a1:1f:e3:c2:50:07:e3:f0:ce:b1:60:d0:
         45:9e:8d:27:db:d3:42:22:70:01:9b:84:1b:a1:b7:c9:98:08:
         b3:77:b3:c0:31:d9:f3:60:28:59:d9:eb:af:a6:a1:f5:c8:ad:
         ff:97:0f:4f:03:06:2e:66:2e:8a:87:99:fd:59:c5:5c:13:33:
         4d:a6:b6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----