Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa
File:                     326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa (raw, json)
Hash identifier:          iVGlWcLaUtUG8hcz1RJpccG3/e3hinsiZTw1rQI3RtE=
Subject key identifier:   D9:45:B3:CB:78:CD:59:B1:C4:BD:52:42:26:6A:AB:15:91:0A:44:67
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       527B209F0326BB7029A5A857C1EF0ADDEB941ECE
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa
Signing time:             Sat 08 Apr 2023 04:32:03 +0000
ROA not before:           Sat 08 Apr 2023 04:27:03 +0000
ROA not after:            Sat 06 Apr 2024 04:32:03 +0000
asID:                     56328
IP address blocks:        2a12:dd47:8c00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7b:20:9f:03:26:bb:70:29:a5:a8:57:c1:ef:0a:dd:eb:94:1e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:27:03 2023 GMT
            Not After : Apr  6 04:32:03 2024 GMT
        Subject: CN=D945B3CB78CD59B1C4BD5242266AAB15910A4467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:05:17:f9:68:6e:5c:95:a7:04:84:38:8a:
                    c8:00:50:51:ec:58:75:60:7a:86:88:52:8b:6a:87:
                    68:fb:c1:2e:53:3d:4f:5d:04:43:cc:38:08:b6:b9:
                    56:43:bf:4f:14:87:6e:ed:ec:4e:bc:af:22:2a:16:
                    62:9f:5a:cd:55:e1:c5:ce:04:7b:85:b0:44:89:76:
                    ec:86:9e:78:60:ef:d1:e4:92:ad:6d:d9:d2:3b:07:
                    1c:0f:9f:cd:44:75:1c:82:02:bf:2a:e4:bb:a7:c8:
                    db:bd:53:bc:f0:f9:ab:52:86:1c:1e:48:bc:3e:84:
                    60:29:7b:fd:ee:39:78:69:34:fb:fd:1a:2f:5d:22:
                    f9:e1:a8:a6:ec:eb:8c:c0:d1:68:98:2a:7d:de:45:
                    39:00:10:09:b4:78:9d:c2:67:49:16:b0:53:09:98:
                    27:1a:74:f1:23:c6:f2:a8:ae:36:a1:56:1a:bb:19:
                    55:40:b3:fd:27:0c:2e:a9:4c:5e:3b:7b:b6:59:1d:
                    42:f0:f7:19:71:00:d6:eb:75:e4:1a:c4:8d:5f:10:
                    db:d9:3f:6d:ff:0a:9c:3a:8c:b4:77:fb:3b:ba:41:
                    d6:67:04:0a:25:3a:50:d2:27:24:5a:de:41:30:d5:
                    3d:64:3d:90:90:c9:27:34:9c:4e:3e:d0:98:b9:aa:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:45:B3:CB:78:CD:59:B1:C4:BD:52:42:26:6A:AB:15:91:0A:44:67
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8c00::/39

    Signature Algorithm: sha256WithRSAEncryption
         87:50:f2:cd:e8:71:ad:d5:8f:37:78:8d:a5:02:7c:9d:b1:32:
         d7:0e:59:0f:64:80:ba:3b:89:28:98:b6:52:d0:17:a3:7d:52:
         03:40:96:4d:b5:9c:c2:41:ad:50:d0:1c:6e:2a:9d:59:12:db:
         0c:9d:58:0e:8e:fe:5d:99:0a:60:51:d8:ca:96:69:44:8c:2e:
         93:86:5b:91:0a:b4:28:71:a1:ff:04:d8:f2:42:08:bb:17:d3:
         71:37:6f:46:e7:f8:84:c2:16:a8:68:eb:48:82:2f:c3:2c:c2:
         bc:ba:c5:dd:2d:4c:37:e6:5b:80:b7:54:fc:ee:e3:62:65:4e:
         1f:65:ee:12:96:41:0c:16:1f:de:1e:1f:e3:f6:a6:ef:23:ce:
         28:a7:46:80:29:f0:7a:46:60:c0:83:86:bf:d8:2a:ef:3c:4e:
         47:ab:bf:41:7b:28:98:07:bc:04:1d:15:a4:28:92:06:b9:d4:
         81:95:1c:1b:dd:cc:b0:8c:2c:f5:59:23:a7:18:91:3c:5e:d7:
         01:b8:b7:f6:54:28:40:f8:a7:fc:1e:61:52:7a:98:ae:7f:6b:
         31:ed:55:59:3b:c7:71:bb:57:b8:48:e9:e4:02:24:fd:47:a4:
         c2:33:02:2f:c5:8d:df:93:41:b6:42:95:08:63:bd:f2:09:92:
         94:9c:9c:94
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUUnsgnwMmu3AppahXwe8K3euUHs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNDI3MDNaFw0yNDA0MDYwNDMyMDNaMDMxMTAvBgNV
BAMTKEQ5NDVCM0NCNzhDRDU5QjFDNEJENTI0MjI2NkFBQjE1OTEwQTQ0NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZIQUX+WhuXJWnBIQ4isgAUFHs
WHVgeoaIUotqh2j7wS5TPU9dBEPMOAi2uVZDv08Uh27t7E68ryIqFmKfWs1V4cXO
BHuFsESJduyGnnhg79Hkkq1t2dI7BxwPn81EdRyCAr8q5LunyNu9U7zw+atShhwe
SLw+hGApe/3uOXhpNPv9Gi9dIvnhqKbs64zA0WiYKn3eRTkAEAm0eJ3CZ0kWsFMJ
mCcadPEjxvKorjahVhq7GVVAs/0nDC6pTF47e7ZZHULw9xlxANbrdeQaxI1fENvZ
P23/Cpw6jLR3+zu6QdZnBAolOlDSJyRa3kEw1T1kPZCQySc0nE4+0Ji5qkKHAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQU2UWzy3jNWbHEvVJCJmqrFZEKRGcwHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMHwG
CCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4ZgcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzODYzMzAzMDNhM2EyZjMzMzky
ZDM0MzgyMDNkM2UyMDM1MzYzMzMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgEqEt1HjDANBgkqhkiG
9w0BAQsFAAOCAQEAh1DyzehxrdWPN3iNpQJ8nbEy1w5ZD2SAujuJKJi2UtAXo31S
A0CWTbWcwkGtUNAcbiqdWRLbDJ1YDo7+XZkKYFHYypZpRIwuk4ZbkQq0KHGh/wTY
8kIIuxfTcTdvRuf4hMIWqGjrSIIvwyzCvLrF3S1MN+ZbgLdU/O7jYmVOH2XuEpZB
DBYf3h4f4/am7yPOKKdGgCnwekZgwIOGv9gq7zxOR6u/QXsomAe8BB0VpCiSBrnU
gZUcG93MsIws9VkjpxiRPF7XAbi39lQoQPin/B5hUnqYrn9rMe1VWTvHcbtXuEjp
5AIk/UekwjMCL8WN35NBtkKVCGO98gmSlJyclA==
-----END CERTIFICATE-----