Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383263303a3a2f34342d3434203d3e20313439323936.roa
File:                     326131323a646434373a383263303a3a2f34342d3434203d3e20313439323936.roa (raw, json)
Hash identifier:          UQ1GolfjP0mGD6QgwGJHnJuOpwNn0u6O3IH5OJ8vwOM=
Subject key identifier:   B8:E0:53:70:9B:22:37:00:A2:08:73:19:81:58:A7:7F:B8:63:AE:A1
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       1FE2258CBE702FECEBFCDABDF31D518CD94EBB19
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383263303a3a2f34342d3434203d3e20313439323936.roa
Signing time:             Sat 08 Apr 2023 04:40:48 +0000
ROA not before:           Sat 08 Apr 2023 04:35:48 +0000
ROA not after:            Sat 06 Apr 2024 04:40:48 +0000
asID:                     149296
IP address blocks:        2a12:dd47:82c0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e2:25:8c:be:70:2f:ec:eb:fc:da:bd:f3:1d:51:8c:d9:4e:bb:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:35:48 2023 GMT
            Not After : Apr  6 04:40:48 2024 GMT
        Subject: CN=B8E053709B223700A20873198158A77FB863AEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:2e:3a:7f:98:35:6a:4d:01:b5:3a:c1:12:
                    89:16:d6:69:b5:22:03:3f:cb:bc:a8:8f:a7:e5:ae:
                    68:a2:a2:61:17:04:b3:c0:a9:de:3d:f0:53:54:c5:
                    05:85:42:87:04:af:7d:fa:cb:8b:bc:91:a7:07:87:
                    52:87:1f:4b:98:09:58:33:85:66:e5:01:fa:2b:25:
                    eb:09:5d:4b:c0:a1:c5:a7:9c:8a:bb:7c:d1:eb:a9:
                    51:0a:d5:ac:2b:61:01:ef:60:b3:5c:ae:d1:04:82:
                    60:ac:a2:f2:26:83:73:e0:5d:ae:b8:45:2e:2f:7a:
                    bf:d2:74:72:79:99:11:a1:71:72:2f:54:91:3b:56:
                    9b:be:4d:a0:94:da:83:3a:0a:45:82:43:29:03:02:
                    20:8e:ec:e0:76:5e:f2:a4:93:2e:b9:28:b7:a2:d0:
                    44:15:ff:23:74:0c:79:97:a6:95:6f:39:72:93:b9:
                    15:9d:c8:40:2c:8a:bc:d3:f2:23:96:50:b2:40:eb:
                    a2:14:97:86:74:cd:6d:4a:2a:dc:e9:a0:7e:03:a5:
                    4a:cb:bf:cf:67:f0:78:52:d4:11:27:7a:47:31:aa:
                    13:00:d5:b1:2e:61:87:27:f2:d8:c8:08:61:ad:64:
                    c2:0f:12:3e:53:cc:9e:30:d5:ba:5b:b6:5a:1b:60:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E0:53:70:9B:22:37:00:A2:08:73:19:81:58:A7:7F:B8:63:AE:A1
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383263303a3a2f34342d3434203d3e20313439323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:fa:01:3b:27:67:2d:9b:97:d9:0b:24:a2:25:e9:7e:cf:
         ff:40:7e:55:4d:f3:1e:02:b6:6a:69:cd:13:6a:3f:ab:1e:63:
         61:0f:6e:00:3e:f1:ea:48:26:a1:ca:e2:6e:69:26:6c:08:14:
         09:de:8f:3c:36:4f:81:1a:8e:43:00:e8:f3:7d:e9:36:4d:fc:
         32:91:54:d4:56:27:61:05:77:74:9b:a9:29:31:59:c9:d2:4c:
         32:89:0c:30:cb:59:11:ae:54:1f:0f:f3:4c:3a:52:1f:4b:9f:
         a8:c6:4b:e0:5b:ff:d1:e9:4e:8a:d3:cd:db:36:f1:3b:d6:c9:
         cf:5a:c0:2d:5a:00:69:4c:e7:27:27:8c:b2:b2:67:3a:3b:2d:
         f4:60:61:c2:90:63:71:f7:2d:d7:2b:07:a2:41:fc:ae:70:5d:
         61:43:22:7d:dd:5f:23:38:f4:5a:cb:15:1f:b5:3a:9b:41:8d:
         97:be:07:ca:97:63:80:8c:15:fe:dd:b8:81:ba:ba:b3:21:58:
         68:7f:87:0e:37:b7:4c:3d:31:35:07:14:df:40:53:db:77:66:
         2a:a6:c8:7b:ef:45:4b:e2:1e:05:ed:e8:a9:72:6d:b3:52:cd:
         eb:e0:cd:a3:cf:c6:81:21:89:7d:57:6d:18:d2:af:c4:48:8d:
         71:a2:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----