Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383034663a3a2f34382d3438203d3e20323133333237.roa
File:                     326131323a646434373a383034663a3a2f34382d3438203d3e20323133333237.roa (raw, json)
Hash identifier:          xx+laXWATfoqRO4/5/bTMNHo5hkkSUtjQMPiVS2Ykvs=
Subject key identifier:   33:DB:A5:D2:93:56:0E:42:A2:2E:3B:DC:60:FC:04:D8:68:35:E7:E3
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       4BE0BB9619B403ED3ADDF8D769C9F1A980AB35BB
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383034663a3a2f34382d3438203d3e20323133333237.roa
Signing time:             Sat 08 Apr 2023 04:41:07 +0000
ROA not before:           Sat 08 Apr 2023 04:36:07 +0000
ROA not after:            Sat 06 Apr 2024 04:41:07 +0000
asID:                     213327
IP address blocks:        2a12:dd47:804f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e0:bb:96:19:b4:03:ed:3a:dd:f8:d7:69:c9:f1:a9:80:ab:35:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:36:07 2023 GMT
            Not After : Apr  6 04:41:07 2024 GMT
        Subject: CN=33DBA5D293560E42A22E3BDC60FC04D86835E7E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:cd:c2:df:dd:93:f9:06:18:14:6b:fb:19:
                    5a:32:06:c6:2d:26:18:50:fb:30:7c:13:16:44:26:
                    41:0a:6e:3c:5d:bf:15:73:ac:f9:5f:4e:3f:21:75:
                    9c:c6:57:9c:6b:6c:70:15:ae:3b:f0:03:b6:7c:16:
                    63:6e:11:ce:2d:59:d5:68:a0:ba:77:26:63:77:53:
                    27:f4:26:40:77:ce:95:85:b0:0c:e4:a6:43:d3:46:
                    4d:f0:e7:04:9c:2f:96:5e:d2:f2:f8:aa:3c:2d:ec:
                    4e:e0:de:34:d3:b7:4c:43:a6:0e:8b:91:7b:30:d7:
                    63:76:4c:1e:6d:37:9c:df:42:e7:d2:62:d3:74:ea:
                    b1:a7:50:6c:8b:12:dc:b2:3f:41:87:aa:cb:08:2c:
                    9e:b4:0c:5b:ba:ab:4a:9b:f2:46:61:ff:18:45:2f:
                    74:fd:0d:21:3d:92:a6:58:e7:7b:07:a8:0a:29:1b:
                    2c:25:da:b2:c6:d7:28:6c:82:6c:49:61:54:31:24:
                    67:f1:18:96:4d:b0:c7:f4:07:2d:3b:68:ea:57:65:
                    b0:0f:cc:f2:e6:a8:a5:43:e2:f1:64:7d:d5:a6:83:
                    25:4b:77:fc:06:f8:45:65:2d:ab:fc:aa:24:2c:c7:
                    fb:b4:f7:e7:78:b8:ac:73:88:1c:0c:df:6e:d2:cf:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DB:A5:D2:93:56:0E:42:A2:2E:3B:DC:60:FC:04:D8:68:35:E7:E3
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383034663a3a2f34382d3438203d3e20323133333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804f::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:42:10:62:bc:4a:35:cc:e2:a6:96:20:82:08:48:13:55:b6:
         3c:91:93:91:1f:c6:13:12:90:49:ef:79:62:a7:b3:bd:78:f4:
         52:48:4c:84:a6:2d:ff:52:f7:69:f5:0b:00:1b:c4:5d:b3:f9:
         6d:9a:bd:f0:e8:ef:82:f7:97:5b:dc:be:3e:75:3f:8e:db:b3:
         60:64:91:72:5e:f8:d0:53:9a:fc:b2:a7:e1:05:54:13:13:ab:
         1f:77:76:87:f4:20:d6:9f:87:a0:3f:28:be:09:db:ed:02:19:
         be:c9:fa:8f:79:9f:7f:f5:ef:79:9b:37:ed:57:b3:5e:23:53:
         c1:72:2b:1d:29:6b:ba:c3:4a:a7:ef:db:02:f7:f1:5c:44:26:
         d2:f9:07:46:b7:7b:ab:a0:e2:e0:17:d7:98:42:90:c1:f0:ff:
         cd:fc:02:90:eb:43:fe:90:bb:4d:9a:33:33:f5:12:7a:10:e9:
         51:a2:80:53:2b:c7:20:cf:4f:c4:e9:1b:bf:0e:d2:4c:71:f3:
         86:b2:22:2f:19:62:0b:5d:47:39:e9:bb:27:bf:df:5e:d6:2c:
         78:2b:ae:db:11:6f:fa:c9:6d:ac:51:4b:ad:d3:41:e3:b7:58:
         f9:5f:04:7b:93:5d:1b:7e:13:7b:a2:8f:d4:a2:c9:77:5d:62:
         21:d9:71:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----