Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383136393a3a2f34382d3438203d3e20323132393833.roa
File:                     326131323a646434373a383136393a3a2f34382d3438203d3e20323132393833.roa (raw, json)
Hash identifier:          7rvStDtiwtoWkrdf4cEfDJGwG9SFJZ/zJt1zdu1jScM=
Subject key identifier:   28:B3:C1:2D:94:32:D4:BF:74:30:80:A5:D0:05:D7:F2:A5:23:BC:91
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       144EC400B161C9D1F2A1230B8112F9E7FE517D3F
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383136393a3a2f34382d3438203d3e20323132393833.roa
Signing time:             Sat 08 Apr 2023 04:42:33 +0000
ROA not before:           Sat 08 Apr 2023 04:37:33 +0000
ROA not after:            Sat 06 Apr 2024 04:42:33 +0000
asID:                     212983
IP address blocks:        2a12:dd47:8169::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4e:c4:00:b1:61:c9:d1:f2:a1:23:0b:81:12:f9:e7:fe:51:7d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:37:33 2023 GMT
            Not After : Apr  6 04:42:33 2024 GMT
        Subject: CN=28B3C12D9432D4BF743080A5D005D7F2A523BC91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:bd:9e:60:7c:fc:dd:1a:70:74:54:50:1b:
                    7f:3c:35:fa:37:de:5a:0f:ad:6d:e4:af:0c:ab:a6:
                    eb:8e:25:14:7b:90:ac:07:ad:87:3c:11:92:1d:bd:
                    a6:bc:2d:d0:2a:06:fd:fe:d5:63:a6:59:1e:6a:79:
                    41:47:fd:0f:9d:01:37:91:fc:28:d5:30:16:c9:7f:
                    97:09:b6:f9:37:de:7f:62:be:9b:8e:76:c6:4b:8f:
                    c5:a9:79:77:54:0a:8a:25:f3:28:09:cc:eb:19:17:
                    ed:c0:45:77:5f:75:3e:05:ef:c5:58:21:cd:75:b7:
                    02:e1:f1:05:3f:6a:21:9f:25:d5:87:6f:97:8f:96:
                    12:18:8e:39:18:36:6d:43:6a:93:b6:55:8c:bf:f5:
                    c2:ff:4e:d4:e3:d9:f1:df:20:37:be:26:f7:33:ce:
                    33:95:96:ac:55:71:c0:7c:c7:25:83:c1:6d:ec:47:
                    53:4d:ee:0c:50:b7:58:ad:7b:52:65:2d:32:85:64:
                    f6:7a:09:84:89:8c:76:57:fd:b9:53:0b:1b:07:bb:
                    7c:06:0c:cf:3e:db:c0:5e:11:8b:d7:68:52:ad:97:
                    e3:c9:6a:0a:d0:0c:27:da:37:c4:05:ed:0d:46:c8:
                    ac:28:cf:dc:9a:ea:a4:5b:ae:4b:b6:db:65:94:9a:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B3:C1:2D:94:32:D4:BF:74:30:80:A5:D0:05:D7:F2:A5:23:BC:91
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383136393a3a2f34382d3438203d3e20323132393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8169::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:8d:e8:aa:b9:1d:58:03:8a:5d:04:54:0e:74:ab:25:54:6f:
         8b:1d:48:f7:98:8c:48:62:1b:16:ba:8c:be:07:13:72:35:f4:
         f6:a3:fc:58:8a:d2:8a:bd:36:c2:c9:21:b0:ca:6f:fb:ff:62:
         50:37:52:8b:80:c9:a9:73:d0:18:d1:cf:9f:ed:84:1a:ef:05:
         86:b4:7c:88:13:c8:4a:a4:a6:ee:3c:45:3d:05:75:57:42:41:
         37:87:84:6b:cd:45:62:aa:6f:57:ec:7b:d0:b3:cd:93:d8:67:
         8b:3a:d4:a9:d4:8f:9b:47:27:c8:98:8e:df:ec:50:0e:f7:48:
         de:be:c8:08:12:1f:29:f6:63:3d:01:34:73:7e:a3:a9:cc:7f:
         cb:98:ce:f2:9b:b2:a7:eb:8d:ca:30:3f:dc:8c:ca:b9:b8:3c:
         18:16:d8:0d:19:2a:7e:04:c8:06:ea:99:ca:91:03:71:a2:59:
         ce:cd:a4:02:0e:cf:9e:56:aa:9b:02:6f:22:d8:f0:84:ac:f6:
         4a:5c:13:45:13:05:6e:ff:58:97:18:3a:f1:ec:55:a8:c0:4b:
         21:95:86:bd:36:08:b5:54:f7:00:43:92:09:9c:cf:01:5c:99:
         79:47:de:22:2e:2a:dc:5c:7e:7c:b3:58:68:6c:25:7d:58:fb:
         d8:fa:33:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----