Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa
File:                     326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa (raw, json)
Hash identifier:          TG7P+I03TW4vq3hiPqHCSUj00KmcVtAF72v+65KN5RE=
Subject key identifier:   02:84:93:7B:BE:9E:74:63:59:43:B1:A0:91:82:1C:83:03:B4:8E:59
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       556D454341393BBA4090613B061A093F533E0D18
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa
Signing time:             Sat 08 Apr 2023 04:43:49 +0000
ROA not before:           Sat 08 Apr 2023 04:38:49 +0000
ROA not after:            Sat 06 Apr 2024 04:43:49 +0000
asID:                     212503
IP address blocks:        2a12:dd47:8ee0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6d:45:43:41:39:3b:ba:40:90:61:3b:06:1a:09:3f:53:3e:0d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:38:49 2023 GMT
            Not After : Apr  6 04:43:49 2024 GMT
        Subject: CN=0284937BBE9E74635943B1A091821C8303B48E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:85:ac:e5:2d:b6:d1:65:74:aa:3e:58:24:
                    ca:9a:88:fa:8f:7a:ff:e0:2c:7d:23:be:75:a5:e4:
                    c3:f8:48:fc:36:83:9a:a3:07:56:fa:80:1c:68:47:
                    b5:3a:62:38:e2:4d:59:5b:44:5e:3d:02:1c:a1:ea:
                    7d:65:ce:59:ea:83:b1:2a:b8:a1:8b:20:a2:ff:eb:
                    d0:27:0d:6f:79:52:83:7b:de:a4:48:b9:4c:ba:c1:
                    7a:43:67:1a:9a:05:e0:8c:f9:30:f5:1c:bb:54:29:
                    e2:30:79:ec:5f:5e:cb:01:5c:b5:99:ae:15:af:3f:
                    9f:b7:bf:99:da:37:03:6a:50:f6:9d:3e:71:d1:c1:
                    9a:8d:cb:c8:a8:5e:1e:44:d7:72:20:17:96:5f:f0:
                    c1:28:c8:04:27:5a:ee:df:7b:b6:69:68:68:7b:b6:
                    b9:bd:af:6e:00:f2:96:c0:71:22:b5:38:c2:a4:fd:
                    4f:41:d1:36:0b:2e:2b:da:a0:d2:36:fa:3a:ee:2d:
                    76:fb:7b:1a:8e:33:4a:19:68:dc:bd:fb:25:95:a3:
                    c5:3f:83:22:34:6c:db:b0:9a:f6:a3:0f:76:d4:f8:
                    f3:08:a4:1c:e7:1c:8b:99:1b:02:fe:11:9f:92:fc:
                    dd:2a:89:92:3a:53:bb:08:f8:b0:db:85:fc:40:83:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:84:93:7B:BE:9E:74:63:59:43:B1:A0:91:82:1C:83:03:B4:8E:59
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ee0::/44

    Signature Algorithm: sha256WithRSAEncryption
         63:55:dd:5b:b6:54:09:d9:b6:45:6c:49:33:a3:f2:f3:b3:70:
         01:2f:27:c5:f5:50:f6:ec:59:be:6c:4d:c7:5a:08:44:7e:4d:
         ea:a0:f1:c6:c9:1a:e0:e7:fe:fc:c6:c2:78:b3:75:7c:60:36:
         17:b2:cf:1b:81:65:05:7e:8f:5a:a1:7d:bc:87:cb:26:a4:4f:
         d3:46:8b:4f:0e:17:bc:da:f0:ed:4b:da:cf:79:44:87:5a:eb:
         09:5d:24:61:36:bf:7f:1a:4b:e0:f8:25:91:1f:0b:e2:b1:6d:
         af:b7:0a:b1:37:ed:52:8f:07:47:35:4e:90:3e:65:1d:c0:ad:
         31:35:11:08:3a:ba:a2:dd:98:b5:2b:7a:ca:e9:63:d8:32:ce:
         e5:72:f9:29:c0:f5:d2:23:d2:a8:ad:6d:21:33:8b:5a:fd:1b:
         d4:d9:32:8a:fb:fa:10:64:58:d3:db:a5:46:6e:dd:d5:c2:f3:
         e9:98:4c:34:17:50:55:92:a5:d6:6b:bc:6d:e3:cd:94:52:9b:
         32:45:fd:10:c0:db:6f:53:26:35:f6:e1:80:06:dd:27:1f:b3:
         e2:aa:3d:d9:07:e5:57:2f:72:23:0e:ee:60:46:eb:ee:79:86:
         28:61:93:35:54:ce:c0:41:7e:4c:65:0b:50:5d:e7:ec:8f:10:
         5b:60:e5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----