Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383363303a3a2f34342d3438203d3e20323039363532.roa
File:                     326131323a646434373a383363303a3a2f34342d3438203d3e20323039363532.roa (raw, json)
Hash identifier:          GqRC8WImJmedPqr0VvRJ/q3/OhHhtA46Im14FPC8yds=
Subject key identifier:   5B:8E:5B:85:EB:02:C2:5C:E3:26:28:74:55:7A:C9:B4:18:0B:7D:FD
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       4B86599E5B20F419F59F75B169D9DBBA14EC8D3B
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383363303a3a2f34342d3438203d3e20323039363532.roa
Signing time:             Sat 08 Apr 2023 04:54:16 +0000
ROA not before:           Sat 08 Apr 2023 04:49:16 +0000
ROA not after:            Sat 06 Apr 2024 04:54:16 +0000
asID:                     209652
IP address blocks:        2a12:dd47:83c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:86:59:9e:5b:20:f4:19:f5:9f:75:b1:69:d9:db:ba:14:ec:8d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:49:16 2023 GMT
            Not After : Apr  6 04:54:16 2024 GMT
        Subject: CN=5B8E5B85EB02C25CE3262874557AC9B4180B7DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:55:90:db:24:15:a1:07:0f:97:8a:c3:cf:
                    59:06:8e:81:cc:71:c5:df:ca:f8:a5:00:75:be:da:
                    36:db:09:1f:87:f4:3d:b7:6b:d3:c1:88:b8:19:33:
                    36:e5:f3:5a:15:08:f4:48:ca:f9:2f:43:d1:36:78:
                    e6:88:c0:0b:b2:db:8b:a1:68:79:ec:8a:5a:a0:a4:
                    8a:95:3d:88:3a:88:2e:9a:02:d4:1b:72:fe:d3:79:
                    fa:1b:4c:13:c0:a0:bf:7d:1e:10:72:42:bc:41:9c:
                    91:30:6d:67:95:ee:32:59:52:d0:9a:d6:86:93:1e:
                    62:40:cb:c5:b5:46:1d:b2:9a:65:4e:a7:5f:ad:93:
                    9b:6f:f4:8d:12:29:41:48:50:58:7d:e5:88:69:4d:
                    6d:09:3b:2a:3b:28:29:8a:cb:96:2a:69:07:46:8b:
                    44:26:34:09:0a:87:db:bc:75:c2:9b:98:02:5c:e9:
                    4b:4a:2d:3c:ff:cf:02:87:d4:b4:46:cb:6d:be:5f:
                    1f:81:f3:ac:fd:af:50:b7:58:5b:24:97:b4:75:18:
                    a4:5f:14:5c:7a:a7:ad:f8:9e:39:38:48:a6:b3:f2:
                    d6:5a:4c:a0:62:e4:21:0a:35:25:8a:f5:3d:69:22:
                    ef:35:44:39:04:31:84:c8:fe:2f:c1:6a:a4:85:3a:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8E:5B:85:EB:02:C2:5C:E3:26:28:74:55:7A:C9:B4:18:0B:7D:FD
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383363303a3a2f34342d3438203d3e20323039363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:63:3a:dd:bf:e6:34:9d:80:25:5c:f2:f1:cb:91:58:a2:
         51:ee:e8:5d:78:2a:91:f1:81:2b:96:a6:fe:95:ab:14:04:a8:
         97:11:05:09:9a:65:8b:eb:02:ee:8a:13:5f:ba:63:65:c8:07:
         bd:96:bc:e9:04:8d:85:1c:cb:92:2b:fe:c6:a9:34:d9:7c:64:
         38:72:a6:a5:a7:9d:e2:a3:f9:dd:59:5a:a1:8e:90:23:16:59:
         24:fd:0e:b6:1a:d4:35:d9:66:fd:69:01:61:8f:b3:b4:3c:07:
         ac:c7:1c:24:40:5a:c2:15:55:7e:95:37:16:7a:d2:bb:b2:4e:
         18:3d:07:e9:02:1b:31:2c:44:37:af:a4:49:1b:55:df:ff:e6:
         40:0e:7c:64:cc:bb:12:37:6e:0a:73:23:e9:f8:1b:81:f2:99:
         f3:26:31:2e:17:e9:15:6f:50:1b:54:79:51:d1:87:f8:ab:38:
         80:ef:34:11:22:73:ee:b5:4f:a8:84:09:0c:77:19:9d:43:7f:
         71:60:80:7c:ef:2d:ff:75:9b:98:f4:a6:f0:83:52:5b:7a:aa:
         e5:b5:b8:79:3b:35:39:f8:a9:4a:e3:bb:00:e6:9c:2c:53:86:
         c1:fb:57:07:ae:49:f7:57:85:32:5c:e6:af:07:89:0d:4a:58:
         6d:d0:9d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----