Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383062303a3a2f34342d3438203d3e20323132343833.roa
File:                     326131323a646434373a383062303a3a2f34342d3438203d3e20323132343833.roa (raw, json)
Hash identifier:          w1LIrdcms2X+Tv3xNICmV78Z1UH8hVUNtvovT8+L2xk=
Subject key identifier:   AF:41:DE:77:41:00:25:2B:3A:D8:BA:CC:48:3D:51:ED:C8:82:E5:E4
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       56B895320512F9220D5A8B22D1293D51D949C724
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383062303a3a2f34342d3438203d3e20323132343833.roa
Signing time:             Sat 08 Apr 2023 04:45:04 +0000
ROA not before:           Sat 08 Apr 2023 04:40:04 +0000
ROA not after:            Sat 06 Apr 2024 04:45:04 +0000
asID:                     212483
IP address blocks:        2a12:dd47:80b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b8:95:32:05:12:f9:22:0d:5a:8b:22:d1:29:3d:51:d9:49:c7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:40:04 2023 GMT
            Not After : Apr  6 04:45:04 2024 GMT
        Subject: CN=AF41DE774100252B3AD8BACC483D51EDC882E5E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:dd:e0:b1:aa:69:5c:be:21:dd:40:29:9f:
                    84:7f:9a:37:a1:ff:81:27:47:f4:18:6f:59:c0:31:
                    07:ac:1e:33:68:78:ca:fe:e8:12:a2:b1:aa:05:23:
                    a0:70:84:3c:9a:25:1e:29:a6:26:02:e1:93:82:95:
                    93:97:ff:cd:55:f9:3a:7f:c7:4c:68:40:33:a1:8b:
                    8b:10:40:9b:07:8c:a7:02:2b:9e:e2:63:df:95:f9:
                    93:9c:34:c8:dc:68:54:43:ce:03:3f:83:f5:51:62:
                    58:b1:df:0a:bd:3b:30:7a:28:c5:d5:23:39:aa:68:
                    8a:a4:a8:f0:33:74:32:2b:ef:3f:8b:dc:87:fe:52:
                    9d:3d:34:c8:1f:71:50:06:04:ba:36:40:9e:7b:ed:
                    57:c4:f0:46:30:5b:6e:1b:22:5a:7a:80:82:40:82:
                    68:2f:ec:e9:42:7a:70:7f:5f:24:2c:f2:26:8c:37:
                    a0:94:c1:6c:47:e8:5c:e9:1d:ee:d5:a6:02:b9:bc:
                    7c:70:ad:dc:60:ea:fd:22:68:6d:d3:ee:52:c9:8c:
                    78:50:13:0c:f5:dc:35:32:de:c2:67:0b:c4:9c:21:
                    50:48:ef:2c:a5:aa:45:b3:7f:a8:cf:1f:b4:03:67:
                    a4:c7:a8:a9:41:02:4d:fc:59:18:e7:39:27:3d:71:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:41:DE:77:41:00:25:2B:3A:D8:BA:CC:48:3D:51:ED:C8:82:E5:E4
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383062303a3a2f34342d3438203d3e20323132343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:07:4c:42:0b:06:bc:07:21:e5:3c:4e:1e:66:56:30:91:83:
         f7:df:90:b6:f3:91:3a:be:b7:02:a2:8c:4f:86:56:d5:81:1f:
         16:f4:d1:66:bb:a4:53:87:ea:7d:86:ec:90:73:aa:a3:49:e8:
         34:b1:b8:a9:d7:93:1f:01:34:c4:b9:97:12:45:26:84:45:e5:
         63:5f:c3:c3:0c:8f:d7:5c:a2:38:05:ec:f0:f4:b8:1c:89:94:
         93:6a:92:6f:a2:7e:8c:12:cd:e3:14:8d:84:64:fd:c9:20:ae:
         f9:00:1f:de:87:9a:96:31:1c:10:5f:b9:6d:3f:a1:05:10:8a:
         0c:5d:90:60:a9:70:59:7e:57:6e:58:82:50:37:79:6b:72:6d:
         5d:d4:b8:79:7b:71:56:c7:42:8c:77:88:5b:0f:28:d7:b5:89:
         03:07:1a:cb:ec:72:c0:3c:2b:a4:8f:8b:99:b1:44:47:4b:70:
         69:77:f9:ed:64:8c:a4:35:11:0f:4f:2b:d3:ca:09:71:04:7c:
         20:90:c2:dc:8d:2e:39:88:9a:49:12:46:97:43:d0:d4:85:f8:
         d9:42:88:37:57:35:7c:a0:c1:3f:c4:a8:81:81:2d:0c:c2:1b:
         5a:af:40:bb:0e:e3:1a:9c:92:76:fb:1b:94:9f:5c:35:b3:5e:
         a8:db:3c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----