Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383530303a3a2f34382d3438203d3e203439353831.roa
File:                     326131323a646434373a383530303a3a2f34382d3438203d3e203439353831.roa (raw, json)
Hash identifier:          vbgcv8tUtdicg7Q3GIA8TcsvhB2Oss6KArF8WD/qKso=
Subject key identifier:   0D:AE:58:A7:A4:77:E1:6C:8D:5C:FB:7F:F8:4D:67:13:EC:C7:F9:77
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       0E1F71609887EB4DC0C8944A61016AA03439FD4C
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383530303a3a2f34382d3438203d3e203439353831.roa
Signing time:             Sat 08 Apr 2023 04:33:51 +0000
ROA not before:           Sat 08 Apr 2023 04:28:51 +0000
ROA not after:            Sat 06 Apr 2024 04:33:51 +0000
asID:                     49581
IP address blocks:        2a12:dd47:8500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1f:71:60:98:87:eb:4d:c0:c8:94:4a:61:01:6a:a0:34:39:fd:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:28:51 2023 GMT
            Not After : Apr  6 04:33:51 2024 GMT
        Subject: CN=0DAE58A7A477E16C8D5CFB7FF84D6713ECC7F977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:63:94:97:ed:3b:9c:10:67:88:de:9a:0b:
                    aa:62:3b:37:ed:c5:45:95:e4:07:1c:04:2d:8e:fe:
                    7c:57:d8:47:c0:39:6a:30:4d:f0:f3:55:d0:63:c2:
                    70:68:e5:1b:0d:1b:11:29:a9:66:86:9e:d1:13:c5:
                    ae:f0:3d:c2:5c:74:79:a7:63:b9:51:3e:27:73:27:
                    a0:57:09:c9:9d:d1:60:73:86:17:2a:f9:63:2b:cd:
                    47:c5:c5:30:41:a9:32:fe:ef:ee:91:4d:1e:62:5f:
                    98:b4:5f:8f:21:85:de:a6:b4:8a:d1:7b:73:42:2a:
                    a3:5f:74:31:25:27:be:b5:f0:8c:d8:36:11:62:f6:
                    b1:c4:b1:2e:34:4e:92:e8:60:b3:4a:02:67:bc:01:
                    67:66:8c:51:e1:58:23:42:9e:14:3a:6e:c3:2b:9d:
                    c6:a7:5f:af:7c:36:d4:cb:21:4c:83:5b:d1:c4:e8:
                    06:3e:62:28:af:38:7a:1f:67:37:4f:8f:81:cb:d5:
                    5c:1e:de:d8:7f:fa:5b:3e:e9:a7:b0:c6:53:0e:49:
                    5c:04:89:a3:a5:bd:41:b3:d7:6f:9e:28:83:20:2e:
                    0d:fd:cd:c3:9d:38:b0:82:db:b4:e6:20:ba:25:e8:
                    77:c2:ee:df:d1:b1:e4:d2:63:9c:76:4d:d9:62:c1:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AE:58:A7:A4:77:E1:6C:8D:5C:FB:7F:F8:4D:67:13:EC:C7:F9:77
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383530303a3a2f34382d3438203d3e203439353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8500::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:27:8c:8e:f9:3b:c5:7c:11:59:7f:0e:52:16:3b:d6:b4:4f:
         2a:70:a8:3f:32:e2:b2:ce:db:eb:93:73:98:63:a2:da:0d:eb:
         7c:d6:19:cd:d8:d7:81:36:9b:99:01:3c:63:4f:cd:c1:e7:8f:
         8a:e0:62:0d:70:ff:e5:dd:c5:57:6e:e2:ef:04:79:08:e8:95:
         c6:ee:9b:f9:a6:fd:ef:72:68:35:7c:1c:63:da:78:bd:8f:27:
         ca:f3:3c:9a:28:14:95:29:47:52:d8:6e:bd:9b:cd:47:db:2b:
         3a:7a:26:99:eb:a1:6f:0b:68:b6:7f:09:47:48:41:a7:7d:bb:
         a5:af:46:b4:db:dd:9d:51:c0:df:14:82:d4:7e:cd:c0:90:2a:
         50:73:b2:bf:c3:5f:d6:f4:0a:1b:b8:0f:9f:fc:db:9d:9f:fb:
         26:fa:71:3e:b7:f7:b5:71:a1:ac:90:72:c4:a9:f8:b7:3c:03:
         9a:b9:af:1a:5a:e4:a3:a1:92:c7:1f:88:d3:3d:68:9c:07:90:
         a4:cd:e1:3c:32:9a:e9:0b:4d:0f:d6:9d:4c:1d:aa:85:0c:1e:
         63:ef:a4:84:15:d9:6b:24:86:9d:c0:88:2e:7c:e1:a1:dc:3d:
         1e:72:aa:9b:45:ac:e5:65:f2:35:78:38:e9:79:d6:fc:27:83:
         c5:3f:02:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----