Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383063303a3a2f34342d3438203d3e20323035393830.roa
File:                     326131323a646434373a383063303a3a2f34342d3438203d3e20323035393830.roa (raw, json)
Hash identifier:          H8ZpEo/rK71z5upgl14tOcZaBFQGK45ybjrWeXfC788=
Subject key identifier:   22:A6:93:CE:C3:AC:28:BA:73:F6:6D:8A:C6:04:FC:A3:D1:78:A9:66
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       698A3DEB384A70BFE75F4CF87C155C42FA999786
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383063303a3a2f34342d3438203d3e20323035393830.roa
Signing time:             Sat 08 Apr 2023 04:51:06 +0000
ROA not before:           Sat 08 Apr 2023 04:46:06 +0000
ROA not after:            Sat 06 Apr 2024 04:51:06 +0000
asID:                     205980
IP address blocks:        2a12:dd47:80c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8a:3d:eb:38:4a:70:bf:e7:5f:4c:f8:7c:15:5c:42:fa:99:97:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:46:06 2023 GMT
            Not After : Apr  6 04:51:06 2024 GMT
        Subject: CN=22A693CEC3AC28BA73F66D8AC604FCA3D178A966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:87:b9:70:c6:f1:3c:bc:d9:65:9b:49:3b:
                    5c:84:7e:f4:bf:c3:fd:a0:82:4d:37:53:63:19:cf:
                    f3:4e:0c:f4:43:1c:61:20:11:e2:19:fa:61:ed:0a:
                    bf:f3:24:8f:4b:60:0b:4d:12:78:0c:de:e7:9b:a7:
                    37:13:3f:ad:d8:9e:08:35:7d:cf:b9:43:23:b5:6a:
                    50:a6:58:8c:8a:c9:71:c0:79:0a:82:1b:c1:79:01:
                    01:1a:88:d6:dc:3b:dc:5f:d9:ae:36:a0:cd:e4:15:
                    90:4a:92:f1:d9:9d:f1:f4:cd:97:25:fd:56:4b:ff:
                    83:e1:80:82:6b:4a:e8:34:2d:11:30:9c:a7:06:27:
                    ce:4d:46:29:e8:65:83:49:98:7f:40:9e:76:76:24:
                    da:7b:d6:ac:a1:d3:35:2f:94:9f:03:29:08:9b:bb:
                    53:96:6d:07:ec:73:ce:d1:c1:f3:8c:06:1f:ce:62:
                    c3:a7:98:3b:d2:bd:a6:46:2e:b4:3c:d4:82:e0:4e:
                    46:1d:e3:74:e9:83:ae:fb:5f:5e:d4:34:52:f4:08:
                    22:77:10:18:3b:ad:26:69:5d:bf:60:39:ce:fc:e4:
                    78:20:2b:e8:83:a0:17:bf:ad:25:65:c9:58:f4:1c:
                    4e:cd:21:fe:97:8f:da:f6:7b:f9:22:16:ae:96:e7:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A6:93:CE:C3:AC:28:BA:73:F6:6D:8A:C6:04:FC:A3:D1:78:A9:66
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383063303a3a2f34342d3438203d3e20323035393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:9d:61:56:a1:7a:27:16:fe:45:3e:a3:0c:3a:f5:d2:4e:0e:
         3e:16:db:c9:27:9a:00:7e:bb:2e:bb:7a:39:c7:00:0c:bd:23:
         e6:7b:9a:8c:b5:d2:2c:65:30:05:3f:dd:d7:bc:25:a6:e7:d2:
         22:88:62:b6:2d:ef:f6:df:09:e8:f3:41:d4:25:8b:75:93:24:
         77:a2:fc:79:e9:cb:1d:e2:bc:b9:64:a4:44:3f:61:b4:9f:cb:
         5e:24:8b:ed:6b:b4:d5:49:ec:36:17:02:93:ab:3a:fb:be:04:
         3b:99:e1:07:74:63:f9:ad:70:3f:8b:54:b1:0b:4e:75:58:c6:
         b5:95:45:3d:23:b8:d8:3b:aa:29:af:47:2c:0a:1d:95:18:d3:
         a3:6c:5c:39:09:53:d6:41:50:ed:2b:2b:60:b6:be:a9:a8:f2:
         af:73:6a:53:90:8c:c2:d0:b4:93:87:0b:f0:31:b2:92:0a:79:
         cf:be:94:ec:7f:fa:8c:ea:f2:aa:3c:c1:02:1b:16:70:d0:34:
         3e:8f:c7:4a:25:9d:24:e0:7a:30:70:d4:1d:31:de:af:51:a5:
         09:54:10:1d:0b:30:f3:6f:69:40:da:a0:f2:e8:f1:dd:b1:f0:
         23:25:ae:1a:07:97:9b:a1:ac:84:3c:c9:38:d5:ab:46:88:51:
         6b:a9:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----