Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383339303a3a2f34342d3434203d3e20323036303432.roa
File:                     326131323a646434373a383339303a3a2f34342d3434203d3e20323036303432.roa (raw, json)
Hash identifier:          nfj1bRQRd5eh7yuV8pZ05apjngQoMunauTlnQInEcK4=
Subject key identifier:   B1:83:AC:CB:C8:EA:43:70:0E:A1:97:D4:1E:20:89:BA:6A:31:EF:CC
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       33BCAA46186FABCFA7102B491F7A5BE74236BA0B
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383339303a3a2f34342d3434203d3e20323036303432.roa
Signing time:             Sat 08 Apr 2023 04:54:59 +0000
ROA not before:           Sat 08 Apr 2023 04:49:59 +0000
ROA not after:            Sat 06 Apr 2024 04:54:59 +0000
asID:                     206042
IP address blocks:        2a12:dd47:8390::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:bc:aa:46:18:6f:ab:cf:a7:10:2b:49:1f:7a:5b:e7:42:36:ba:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:49:59 2023 GMT
            Not After : Apr  6 04:54:59 2024 GMT
        Subject: CN=B183ACCBC8EA43700EA197D41E2089BA6A31EFCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:05:22:9d:2c:d4:38:62:3e:b2:89:e6:2c:
                    d2:70:e6:e2:4e:53:99:38:ba:d8:cb:d5:e6:63:dd:
                    82:83:b2:e2:ce:0b:dd:da:92:14:89:09:38:a2:37:
                    6f:27:b0:ab:fe:e2:72:6d:c0:0d:e2:f2:e9:e4:8c:
                    4c:97:00:f5:30:c9:11:e1:09:e3:ee:f9:c9:b7:ce:
                    ea:30:f9:4c:db:b8:70:1b:24:3e:f4:8c:ef:41:0e:
                    fb:48:c7:c6:ea:6e:cc:7e:2f:7d:e9:3e:cf:d0:2c:
                    f1:22:74:07:7e:d8:14:63:49:c3:de:23:aa:f2:9c:
                    9a:20:a5:4e:05:81:c6:89:be:67:7c:3c:63:70:06:
                    1d:0b:1e:72:ce:25:67:21:b8:b6:27:3c:d2:f6:59:
                    18:25:ad:61:f2:c3:14:e7:19:74:82:ab:0c:fe:93:
                    4e:3f:1b:f4:58:de:e7:e9:db:f0:52:cc:fb:09:76:
                    e3:97:d8:67:85:58:50:69:6c:7e:d3:71:5a:a1:51:
                    f0:d9:2d:c6:38:2c:29:49:45:61:f2:e6:75:55:2e:
                    b1:49:99:f2:66:b3:ba:2e:a5:63:78:b9:6b:29:f8:
                    f1:72:a4:12:3a:05:17:2b:3a:bb:6d:82:b7:7f:5e:
                    8f:47:60:52:c8:66:2b:6d:7f:fe:05:0f:58:da:61:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:83:AC:CB:C8:EA:43:70:0E:A1:97:D4:1E:20:89:BA:6A:31:EF:CC
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383339303a3a2f34342d3434203d3e20323036303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8390::/44

    Signature Algorithm: sha256WithRSAEncryption
         ae:b3:03:f3:3e:6f:21:07:91:89:56:0f:ea:29:d8:bc:a5:0d:
         a3:2d:9b:4d:d4:6b:36:fb:08:c6:42:bc:3b:8d:3b:cb:a7:16:
         0c:a3:bd:66:96:75:8e:f2:27:0d:fc:08:b6:d7:3b:42:30:94:
         30:73:12:6e:c8:4d:26:99:38:61:d9:58:dc:e8:57:8d:66:ba:
         b1:17:0e:a5:3e:51:a0:94:46:ac:8f:f3:00:ef:bb:32:2a:8c:
         64:f5:63:9f:03:3a:83:ec:c4:47:71:c1:0e:de:6c:19:f9:e5:
         6a:4c:1e:20:38:19:7e:88:f3:fd:bf:3d:2c:70:43:63:d7:53:
         f9:0c:8d:40:08:c2:86:07:0b:90:6e:40:c0:1c:b5:6a:0d:e1:
         22:cd:5b:14:ac:73:73:1e:67:5b:f2:c6:89:e4:6e:52:7e:94:
         bb:e8:2a:86:bc:90:27:3a:28:a5:ee:02:70:c4:d6:b0:73:29:
         6a:a2:37:76:7e:e5:c7:62:78:3d:58:63:44:80:47:0f:2c:3c:
         a3:ab:1c:53:4c:8c:8a:36:f5:32:e6:02:e4:3d:41:be:02:19:
         07:1f:d0:e2:69:8c:45:70:0a:a1:5b:5a:47:42:e7:1d:27:fa:
         85:2c:3d:9e:52:79:d1:7c:8e:47:13:01:d7:37:c6:f5:33:73:
         c6:6f:77:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----