Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383131303a3a2f34342d3434203d3e203437393234.roa
File:                     326131323a646434373a383131303a3a2f34342d3434203d3e203437393234.roa (raw, json)
Hash identifier:          GY9iLuFEcvevqPY8dH+nw0djWccM43MIwqETRrYB2UI=
Subject key identifier:   81:72:53:C1:EE:46:E3:E9:82:1A:93:43:5A:C7:F5:F4:79:37:45:15
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       06DA176ABA7A5BEE96902D8EF78EE6064E1E25E7
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383131303a3a2f34342d3434203d3e203437393234.roa
Signing time:             Sat 08 Apr 2023 04:33:15 +0000
ROA not before:           Sat 08 Apr 2023 04:28:15 +0000
ROA not after:            Sat 06 Apr 2024 04:33:15 +0000
asID:                     47924
IP address blocks:        2a12:dd47:8110::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:da:17:6a:ba:7a:5b:ee:96:90:2d:8e:f7:8e:e6:06:4e:1e:25:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:28:15 2023 GMT
            Not After : Apr  6 04:33:15 2024 GMT
        Subject: CN=817253C1EE46E3E9821A93435AC7F5F479374515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4d:1a:14:fd:8c:e8:24:a7:af:a8:8a:d7:8e:
                    d7:88:ef:83:07:fc:e4:5e:73:f5:82:50:f6:59:45:
                    c3:15:54:12:5c:67:6d:f0:e3:3d:8f:28:09:fb:04:
                    3f:70:33:4b:5d:80:76:99:d1:73:08:0d:dc:ec:81:
                    25:43:38:8d:09:50:76:13:fe:7f:a6:6a:f6:5b:d5:
                    ab:42:05:ec:dd:a7:42:c2:4a:fc:e5:9d:b3:0f:3e:
                    b7:3b:68:b9:18:c8:23:2b:a4:ec:2a:52:66:fe:66:
                    6d:71:f4:66:c1:92:c9:e7:43:5d:2f:6b:06:e6:44:
                    c0:01:da:c9:39:88:91:a1:43:2b:90:ff:aa:04:ed:
                    b7:f3:9a:8c:72:2c:11:ce:85:18:2b:87:a3:c9:9b:
                    28:2f:62:4c:2b:69:b6:5a:82:9f:f2:ab:76:66:c1:
                    5b:5f:17:3f:6f:d6:33:03:77:f9:24:bc:da:b9:42:
                    6f:0a:a9:2b:b3:5e:09:ba:c6:c8:62:bd:f9:d1:0a:
                    0c:9b:36:22:c6:34:5a:c9:57:2c:15:d2:6b:d5:79:
                    7e:38:79:75:7a:5d:6f:eb:ed:9a:60:b8:b0:34:83:
                    f4:b3:6b:e9:b6:c5:1c:49:3d:27:4a:ba:ce:ea:9e:
                    24:22:4d:62:e6:86:17:ed:b9:83:10:48:f6:c7:c2:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:72:53:C1:EE:46:E3:E9:82:1A:93:43:5A:C7:F5:F4:79:37:45:15
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383131303a3a2f34342d3434203d3e203437393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8110::/44

    Signature Algorithm: sha256WithRSAEncryption
         19:30:e3:fb:80:c2:0e:1d:62:01:1b:b7:3c:35:90:56:44:29:
         64:b3:2e:df:dd:11:45:e4:3e:4b:ec:cd:a1:23:4b:27:19:30:
         e5:af:87:50:d9:6d:61:76:2b:12:b2:77:5b:5a:87:16:e2:cf:
         4f:c0:c7:9e:b8:50:27:06:81:2e:33:ec:87:f6:0d:38:7c:f6:
         94:cf:81:a4:f4:03:bc:3a:c2:d0:93:7b:9c:95:2d:a3:97:c7:
         22:f1:45:ac:4a:3a:e4:71:86:9f:53:9f:37:4a:d4:67:1f:e5:
         de:e6:28:f0:5b:12:4a:0c:48:0b:d4:b6:43:30:72:61:ac:2c:
         ff:2f:72:e0:1a:79:9d:36:5a:18:8b:39:48:b3:58:bf:f4:87:
         c2:c6:bf:12:d0:ab:f9:0b:70:9d:4e:a0:0b:7f:75:6f:86:58:
         69:8b:12:6f:41:9f:59:94:60:8e:f8:e2:7e:e6:3f:cd:6a:27:
         fe:43:78:a5:07:5f:35:de:56:0a:8e:eb:6c:10:09:57:d2:16:
         55:4f:d7:75:26:3a:d0:dd:51:89:53:c3:52:33:9f:3f:5f:e4:
         b2:b7:38:2f:0e:97:22:52:5f:f7:f5:8f:13:8d:df:a0:0f:77:
         08:ac:79:de:0a:e4:17:7c:00:7a:7e:6d:03:bb:af:cd:f3:00:
         b3:ca:82:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----