Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383065333a3a2f34382d3438203d3e20323132323432.roa
File:                     326131323a646434373a383065333a3a2f34382d3438203d3e20323132323432.roa (raw, json)
Hash identifier:          VOnjjMcmZvoAZlvBm/5MJ0FKee9FvQfvrm1RioluXI0=
Subject key identifier:   E0:1C:45:EF:0B:DD:C8:52:6B:5A:1B:7B:41:DE:D0:FB:02:1B:80:84
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       4FCAD27CAF61AB59752C704F1219ACA6FE15849D
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383065333a3a2f34382d3438203d3e20323132323432.roa
Signing time:             Sat 08 Apr 2023 04:48:07 +0000
ROA not before:           Sat 08 Apr 2023 04:43:07 +0000
ROA not after:            Sat 06 Apr 2024 04:48:07 +0000
asID:                     212242
IP address blocks:        2a12:dd47:80e3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ca:d2:7c:af:61:ab:59:75:2c:70:4f:12:19:ac:a6:fe:15:84:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:43:07 2023 GMT
            Not After : Apr  6 04:48:07 2024 GMT
        Subject: CN=E01C45EF0BDDC8526B5A1B7B41DED0FB021B8084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a2:ee:04:31:51:69:52:bd:eb:55:8e:dd:24:
                    3e:09:ee:00:f0:29:79:2b:34:dc:65:f6:1d:5c:21:
                    d6:20:a6:d2:c0:25:4c:02:88:5a:d2:d5:23:90:20:
                    fc:37:fa:e5:68:02:0c:f5:18:f8:60:df:0e:c8:77:
                    1b:82:95:4d:52:0d:a2:c2:89:0b:28:0f:c8:d2:f4:
                    36:81:eb:72:98:c2:3d:f0:7c:3d:bd:d6:92:bd:18:
                    7d:7e:cf:bb:f7:09:05:7d:3b:06:7f:91:a9:48:86:
                    40:f3:35:eb:0d:09:81:3e:fa:c2:94:96:cd:ea:92:
                    cd:d1:2f:c5:11:b3:82:5b:fd:27:35:ee:11:fa:80:
                    c8:be:16:b3:46:fd:7a:bd:89:b6:aa:53:8a:65:6b:
                    03:83:56:d3:eb:84:71:f6:40:97:94:03:f5:da:9e:
                    4b:06:c1:0c:60:32:84:ef:65:2d:df:70:83:19:77:
                    86:d3:19:45:7e:db:7c:5d:69:e6:b3:90:71:5f:4a:
                    ca:ce:56:6d:6e:9d:cd:d6:40:4c:f9:7c:28:b9:9b:
                    fc:08:bc:44:4f:09:3d:5b:88:93:d0:78:4d:cf:d9:
                    bb:16:65:8d:c0:61:ee:02:fd:30:c7:11:ea:8d:f9:
                    42:d7:25:4b:1d:60:c5:2d:12:92:ca:cd:33:85:da:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1C:45:EF:0B:DD:C8:52:6B:5A:1B:7B:41:DE:D0:FB:02:1B:80:84
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383065333a3a2f34382d3438203d3e20323132323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e3::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:a9:dc:25:c8:64:aa:42:fc:3d:eb:15:31:d8:4a:ae:1b:
         39:79:e5:2d:96:cd:28:50:72:f2:93:95:dc:a5:69:75:07:6e:
         f9:0e:e8:de:61:a0:48:1b:54:b9:ac:ce:bf:23:a6:5a:99:21:
         42:0e:08:10:44:f0:55:da:f6:0d:aa:8a:d0:c2:82:b2:1d:ed:
         8b:2f:9a:73:a9:4c:31:01:b5:b8:6f:a3:46:b2:c7:36:2f:6e:
         3e:8f:a7:13:b3:b3:10:1f:39:bf:92:96:53:94:60:70:6c:db:
         16:5d:d0:fd:8e:22:e3:9e:05:ce:1a:96:29:2b:2f:7e:c4:61:
         8f:71:c9:ea:80:ef:95:75:49:2f:40:fd:25:f1:cd:f8:29:33:
         49:d8:24:37:38:16:a1:13:87:ce:a9:20:18:34:63:73:80:b1:
         c4:75:ce:24:0f:80:80:e3:ef:4f:12:1c:95:41:a1:24:5b:8d:
         cf:cf:2e:f6:38:b1:8e:ec:39:f7:65:b8:d2:42:d7:b0:87:80:
         f7:81:f9:bb:33:40:42:be:b3:9e:49:45:1b:34:cf:05:ab:16:
         c4:6c:32:21:d4:fc:a5:ac:40:ae:cc:fd:40:4f:52:0d:c4:47:
         f3:21:2e:cd:52:c2:61:39:8c:a1:a1:ff:f1:af:13:73:03:d4:
         80:f5:ce:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----