Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383332303a3a2f34342d3438203d3e20323132353938.roa
File:                     326131323a646434373a383332303a3a2f34342d3438203d3e20323132353938.roa (raw, json)
Hash identifier:          8yYw5KMkZ4Wn+nGnNv+7IVSedx1RnY0cYQvM13YDY00=
Subject key identifier:   F0:F0:B1:89:47:24:18:F1:32:D0:6E:2E:97:6A:AD:EE:31:E8:79:CC
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       61BAC5E3FF66FC31855B3E1534FE7DE5E7D1C94A
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383332303a3a2f34342d3438203d3e20323132353938.roa
Signing time:             Sat 08 Apr 2023 04:43:23 +0000
ROA not before:           Sat 08 Apr 2023 04:38:23 +0000
ROA not after:            Sat 06 Apr 2024 04:43:23 +0000
asID:                     212598
IP address blocks:        2a12:dd47:8320::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ba:c5:e3:ff:66:fc:31:85:5b:3e:15:34:fe:7d:e5:e7:d1:c9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:38:23 2023 GMT
            Not After : Apr  6 04:43:23 2024 GMT
        Subject: CN=F0F0B189472418F132D06E2E976AADEE31E879CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:f9:b9:17:91:b6:46:b3:6c:1d:58:cb:6e:
                    7e:b6:44:0f:49:e7:3a:d8:31:e9:e4:0c:4a:ee:50:
                    13:9f:36:f3:fe:cd:43:52:4a:5c:63:c5:60:c1:06:
                    0c:6e:54:20:07:72:d7:93:81:5e:ff:8e:b6:f2:06:
                    59:6d:fc:69:68:47:19:d7:92:28:02:51:aa:d0:4d:
                    15:3f:61:70:72:f0:77:3a:e6:3a:e7:28:46:50:32:
                    ab:f0:0f:fa:eb:db:4c:63:11:22:27:19:e2:28:f8:
                    be:c2:87:2e:9b:17:e0:51:0e:4d:3d:a9:66:10:8f:
                    e9:26:f5:d6:a6:a4:30:ee:80:d5:ad:a3:6e:5c:d1:
                    de:32:40:d7:9b:5a:e5:bb:34:b5:7a:56:34:c6:a4:
                    f7:b5:5d:f5:e7:10:de:31:0c:de:f2:f4:15:61:b0:
                    cc:b0:39:db:88:11:e9:34:8e:ac:f0:a6:ea:9b:4b:
                    7c:6d:e8:3c:07:20:3f:3a:2d:91:39:5a:f8:d4:cd:
                    32:64:1d:c8:54:cf:b7:00:02:e4:d4:24:f6:1a:96:
                    1b:bf:01:bc:42:73:20:27:3b:29:6d:99:23:c5:ef:
                    84:1c:ec:72:30:d0:ee:09:82:c7:41:c6:e1:62:55:
                    eb:3a:50:04:f2:0a:35:5d:64:0d:6b:63:15:f8:e8:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F0:B1:89:47:24:18:F1:32:D0:6E:2E:97:6A:AD:EE:31:E8:79:CC
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383332303a3a2f34342d3438203d3e20323132353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8320::/44

    Signature Algorithm: sha256WithRSAEncryption
         b1:e0:b5:e3:95:a6:48:9f:14:a2:95:55:7e:31:2a:f6:07:16:
         4a:66:a0:94:81:b7:f9:ee:55:2f:b2:15:1a:42:a8:f9:77:4a:
         3d:f7:6d:95:ad:d5:22:be:52:a2:de:a8:f0:fb:24:f8:11:08:
         ba:63:8d:c4:cf:93:87:25:ec:86:d9:50:94:1f:c8:1a:ac:0a:
         22:53:02:8c:9f:f6:5a:72:13:fa:d3:d3:65:d8:78:0d:33:c2:
         c0:33:f9:83:8b:f2:83:c2:95:1a:33:06:8e:d1:10:8c:28:9d:
         8b:24:58:5e:07:44:ed:82:ef:ec:08:8b:41:10:3c:30:5e:e6:
         48:49:f2:e8:9a:6c:bb:c4:b5:cf:e5:c0:fd:69:14:e0:ca:17:
         a3:7c:4b:d3:58:64:4e:c9:d9:8a:9c:0f:25:e8:79:64:d3:ce:
         f9:6c:32:32:99:28:fb:f5:4d:ed:df:8e:cc:d6:fb:46:bf:80:
         47:45:3b:b5:e3:a8:55:b8:a0:ab:ac:a5:c5:ea:a4:f3:08:9b:
         25:5a:ad:7f:d7:f1:31:5a:96:7a:6d:11:94:05:9e:0e:c3:d8:
         73:ba:b5:25:2d:1f:5e:39:28:b2:8b:52:c3:20:c1:1c:15:bd:
         f7:58:f4:5d:46:66:2e:2e:c6:b7:b5:24:07:d6:24:58:9d:99:
         99:7a:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----