Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383161303a3a2f34342d3434203d3e203530383432.roa
File:                     326131323a646434373a383161303a3a2f34342d3434203d3e203530383432.roa (raw, json)
Hash identifier:          tSpu3hJFzhPywVLvU/9t4AaSZHagHyOy13gDQDYD4ks=
Subject key identifier:   46:32:D0:10:3D:41:FF:0B:7E:E5:91:CF:AE:EB:6F:FB:A4:83:34:4B
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       3216C133C456AC790226FD1DFABC663782F92811
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383161303a3a2f34342d3434203d3e203530383432.roa
Signing time:             Sat 08 Apr 2023 04:34:35 +0000
ROA not before:           Sat 08 Apr 2023 04:29:35 +0000
ROA not after:            Sat 06 Apr 2024 04:34:35 +0000
asID:                     50842
IP address blocks:        2a12:dd47:81a0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:16:c1:33:c4:56:ac:79:02:26:fd:1d:fa:bc:66:37:82:f9:28:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:29:35 2023 GMT
            Not After : Apr  6 04:34:35 2024 GMT
        Subject: CN=4632D0103D41FF0B7EE591CFAEEB6FFBA483344B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:1f:00:f1:de:5f:1d:bd:e7:a0:72:46:8d:
                    2f:6c:3f:c2:52:c2:e4:2e:8f:d2:17:cc:3a:ba:c2:
                    17:7a:12:93:e8:2a:07:fa:bd:92:e6:db:26:82:f6:
                    50:26:17:63:61:52:c1:4f:ad:02:33:71:fd:3b:8d:
                    c5:ef:d6:5a:87:54:40:2a:ac:f7:59:20:e4:d6:c0:
                    30:89:49:06:68:07:6e:9a:cf:14:52:e4:31:8e:3e:
                    4e:49:6f:46:9a:36:6a:f7:ed:ae:65:a6:97:5a:5b:
                    6d:81:d0:74:b6:82:0d:37:ac:54:dd:8f:e3:9b:bf:
                    29:1b:a6:73:63:36:02:b6:f6:41:33:42:ce:6b:98:
                    fb:ab:f0:14:84:02:7a:89:08:7f:18:8f:cd:54:e0:
                    60:91:76:09:40:f1:43:a9:bc:35:37:bb:39:ec:c9:
                    a8:fc:db:0d:5c:bf:b6:b7:b0:7a:7c:1f:17:1b:bc:
                    91:ab:86:d0:22:7b:f6:f2:78:7c:dd:eb:98:96:c4:
                    ff:48:29:6c:dd:c8:71:2a:94:7e:bb:12:67:99:d3:
                    10:42:63:42:a2:1d:9b:ce:35:0e:9c:7e:1f:3b:b5:
                    41:49:85:5f:d2:d7:b1:03:34:64:a2:5d:6a:11:36:
                    97:1c:0d:16:95:f5:1a:6d:30:11:cc:ae:df:62:a1:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:32:D0:10:3D:41:FF:0B:7E:E5:91:CF:AE:EB:6F:FB:A4:83:34:4B
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383161303a3a2f34342d3434203d3e203530383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         43:37:ae:cf:29:7a:50:98:1b:4d:ce:8e:a7:c1:c5:e2:b2:af:
         e7:39:21:7b:e1:e5:cc:5a:02:66:a4:f0:06:2a:8d:6c:56:70:
         fe:d0:27:7c:72:99:3d:d2:07:4f:b7:8a:1c:5b:8c:41:07:a7:
         1e:43:a7:da:ef:0b:8f:c0:64:e1:0e:6c:91:a5:ae:43:88:20:
         e8:62:b9:15:50:84:1e:fb:cc:1c:0c:65:72:b0:1d:f4:74:34:
         07:61:28:85:e3:cf:82:41:28:5e:e7:cb:5b:8f:80:d8:22:06:
         7c:6a:25:b9:13:f5:f7:41:8d:5a:54:83:45:d8:e8:1a:2d:51:
         4d:ae:59:2e:c7:08:8c:3f:c8:7c:d0:4d:18:59:c6:22:ca:7f:
         57:4c:54:57:fd:d0:a5:fb:80:a4:c7:b3:f0:a5:de:9f:83:77:
         05:0e:0e:5b:a2:89:e4:67:d6:49:8d:10:14:52:6b:6d:9d:40:
         3c:a5:98:61:6c:5c:d1:6f:8b:5c:16:17:23:03:11:a2:73:d2:
         c0:09:4f:ec:7b:59:48:ea:a6:ee:ce:95:17:fb:5b:a4:81:c7:
         ac:1a:ac:ec:3e:60:29:33:0b:cf:d1:4f:a6:e7:14:90:12:cf:
         c1:a9:8b:18:1e:2d:40:ce:88:50:63:f6:34:51:bf:4f:c3:13:
         8e:c7:1d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----