Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa
File:                     326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa (raw, json)
Hash identifier:          fI9QAFIR47ZIgEhj5EBfwps+SPg6r8gMJOw5jCSlLQQ=
Subject key identifier:   78:6D:7E:37:5D:21:7E:1A:29:B6:A1:C2:AF:1F:60:37:4D:04:72:38
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       6F2366B81EE13C63B66BB85DC239714B518A5806
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa
Signing time:             Sat 08 Apr 2023 05:04:47 +0000
ROA not before:           Sat 08 Apr 2023 04:59:47 +0000
ROA not after:            Sat 06 Apr 2024 05:04:47 +0000
asID:                     204518
IP address blocks:        2a12:dd47:8080::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:23:66:b8:1e:e1:3c:63:b6:6b:b8:5d:c2:39:71:4b:51:8a:58:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:59:47 2023 GMT
            Not After : Apr  6 05:04:47 2024 GMT
        Subject: CN=786D7E375D217E1A29B6A1C2AF1F60374D047238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:0f:1d:42:1a:70:04:05:1e:bd:be:56:1c:
                    c6:9e:7b:02:b7:72:06:18:c8:f8:37:09:ad:c6:a0:
                    a8:86:94:fa:ea:38:32:22:18:df:0c:38:b0:44:17:
                    c0:04:2f:2d:3f:dd:51:bd:ea:07:36:e4:e4:ed:71:
                    fb:b2:dd:17:cf:51:91:ce:58:81:89:ec:fc:a8:de:
                    ee:03:24:2f:5c:17:13:e5:55:6b:29:3e:d4:94:06:
                    04:8a:f4:04:19:80:e7:99:75:e5:13:b9:24:c7:ce:
                    5e:5e:3b:ea:a3:77:c7:e3:8f:be:b2:ed:17:9c:ff:
                    80:a5:0d:0c:d0:e1:c0:bd:12:06:32:ed:2a:80:f1:
                    6f:a4:a4:d5:29:0e:81:f8:10:86:9e:fa:59:df:50:
                    48:aa:bf:d1:c4:c5:8d:ae:f0:ee:51:f0:78:2b:eb:
                    96:92:7d:65:d0:ac:f8:91:ab:db:39:c6:57:d4:32:
                    e4:75:3b:2b:e4:65:38:c4:2c:91:f0:28:96:c7:40:
                    7d:a8:fa:17:02:af:ca:98:14:b3:d1:7d:ef:91:c0:
                    68:0e:5c:b5:a1:0b:df:32:bf:e4:78:2e:fc:d7:54:
                    a2:0a:ad:7c:8d:d5:d9:15:e4:c0:af:aa:3b:7c:10:
                    1b:c8:fc:25:35:34:de:f2:07:23:d8:cc:91:22:54:
                    7e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6D:7E:37:5D:21:7E:1A:29:B6:A1:C2:AF:1F:60:37:4D:04:72:38
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8080::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:36:f0:eb:8c:38:33:1a:cd:2d:95:ff:e2:c6:1f:41:f2:
         ac:b8:7f:06:f2:7a:df:78:9b:c9:4c:7a:d4:e6:5d:17:ea:c1:
         72:cd:08:36:f5:bb:d0:b1:e0:1f:e3:6f:f3:93:4c:a2:0c:40:
         24:36:ee:20:47:f9:60:44:0a:8f:eb:3a:d4:6f:21:ed:bd:13:
         6a:dc:bb:22:dc:df:82:be:9b:4d:ba:69:80:8f:06:d5:f9:17:
         54:e8:b5:9a:58:30:e3:a9:01:4c:1c:de:13:aa:b1:55:3d:3b:
         21:2f:69:bf:cc:25:cd:0b:21:d0:c6:19:9a:81:b1:5a:a5:96:
         2f:97:ba:44:73:e6:e9:ed:a2:40:d7:e2:ca:5a:61:64:a1:ec:
         e4:72:a4:be:86:dd:72:50:95:97:cd:5e:38:ca:65:66:ee:f4:
         12:0f:5e:44:fb:85:86:ef:6c:db:52:fa:0f:3f:49:0d:52:76:
         b3:10:0f:97:47:52:68:c9:85:72:13:ab:94:2f:d9:63:f3:66:
         ec:c9:cc:bc:43:df:b0:e5:cf:ed:32:2c:07:db:86:e3:13:91:
         70:b4:8c:da:ba:ea:95:50:51:43:84:6c:25:54:4a:47:95:e0:
         3e:cb:87:eb:95:8d:09:97:92:9f:8a:d7:af:26:26:85:02:51:
         54:0a:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----