Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa
File:                     326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa (raw, json)
Hash identifier:          H2q2du5N/sCE+S3xF434jEw1EeROmdBiBzhMFhH0p7E=
Subject key identifier:   CF:B2:5B:D1:C9:03:4E:91:C4:BC:F0:21:D9:1D:F0:BA:36:A7:ED:67
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       5C98A97C554687DD7FF6D45ABCBE95D358F6C4BD
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa
Signing time:             Sat 08 Apr 2023 05:02:22 +0000
ROA not before:           Sat 08 Apr 2023 04:57:22 +0000
ROA not after:            Sat 06 Apr 2024 05:02:22 +0000
asID:                     211233
IP address blocks:        2a12:dd47:8050::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:98:a9:7c:55:46:87:dd:7f:f6:d4:5a:bc:be:95:d3:58:f6:c4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:57:22 2023 GMT
            Not After : Apr  6 05:02:22 2024 GMT
        Subject: CN=CFB25BD1C9034E91C4BCF021D91DF0BA36A7ED67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:04:ae:70:cd:61:17:4c:77:38:75:34:04:f5:
                    d4:c1:97:fb:06:f0:6f:da:7b:9a:29:fb:a7:ae:ef:
                    34:8d:17:dc:b4:c4:34:ee:55:b1:41:a2:5b:ed:e3:
                    b6:a7:d3:2e:70:c6:33:a1:80:72:1a:7f:0e:7b:30:
                    d1:3c:51:f1:a1:96:08:f5:46:73:2f:15:f3:6e:75:
                    7c:b8:4a:a3:f2:4c:fe:dd:cf:95:cf:56:36:5b:78:
                    2f:5e:76:ae:ae:7a:40:98:6c:61:8f:e7:3c:fd:69:
                    52:28:db:1f:83:c6:21:e0:9a:4c:11:fb:14:23:f1:
                    cb:cc:d4:08:93:81:c6:c1:f2:09:dd:80:6a:7d:ff:
                    09:ce:0f:b3:e2:d8:93:e0:9f:60:33:ae:10:51:3c:
                    91:61:77:57:be:c7:14:c1:ea:b0:69:e0:31:88:63:
                    84:c9:3d:8c:84:74:87:71:01:b1:e2:cf:ff:18:34:
                    55:9a:18:2d:e0:38:f4:92:31:2a:06:eb:01:e0:53:
                    f0:66:ec:d3:6f:8e:be:46:aa:9f:e8:b9:8a:96:84:
                    96:af:54:ee:ad:ea:b8:1a:07:d0:88:63:49:07:39:
                    3d:65:af:8a:0e:00:69:60:b6:41:32:f2:7f:fe:8b:
                    6b:80:9b:35:b8:09:03:4e:d6:f2:b1:5a:42:a4:fd:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B2:5B:D1:C9:03:4E:91:C4:BC:F0:21:D9:1D:F0:BA:36:A7:ED:67
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8050::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:70:5b:7d:fa:df:00:38:42:15:88:b3:75:04:3c:99:f6:33:
         21:51:d6:f6:b9:13:40:90:37:40:2c:38:32:8b:8b:8a:7f:6d:
         4c:34:57:df:75:ee:ac:e4:20:7a:5c:1b:92:b9:45:6e:b9:4e:
         fe:41:dd:7a:b3:44:26:8f:29:3c:90:47:a9:38:ff:65:28:4b:
         23:b3:7b:3e:d2:e9:7c:f1:8e:64:6e:ab:5b:82:90:48:6b:84:
         da:7c:b4:dd:b0:fe:2c:9b:3c:f6:98:46:db:13:1b:45:ca:05:
         86:60:83:3d:11:15:dc:23:5d:3d:3c:25:d5:5c:7a:07:5b:6a:
         b5:85:18:ee:a2:7b:f1:ac:a6:69:27:c0:ae:83:98:b2:93:b7:
         37:b8:f2:8d:37:1b:7d:d9:cf:eb:4c:be:30:87:17:d3:f1:24:
         e8:49:5e:40:94:6a:4f:70:27:e3:f2:45:9b:ad:1f:1b:96:9d:
         22:00:43:01:7e:d7:bb:eb:d8:e9:7c:bc:ed:3e:96:61:f4:46:
         8d:14:fa:0e:c0:f5:92:7c:f2:44:f9:e1:ae:12:a5:46:0f:67:
         6c:be:83:d2:91:a0:46:c5:2e:61:ba:f1:68:3f:8b:89:d2:ac:
         67:fd:ed:9d:f6:9e:af:5b:04:45:bf:b4:bb:36:61:87:1f:eb:
         53:e3:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----