Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a393030303a3a2f33362d3336203d3e203439353139.roa
File:                     326131323a646434373a393030303a3a2f33362d3336203d3e203439353139.roa (raw, json)
Hash identifier:          dz5dRCOhf/bHaHIiUKD7YC7SaLSQKuFQpN5EMPFikSc=
Subject key identifier:   C7:41:78:2B:41:98:F4:16:B1:CA:CB:66:2A:FC:C1:E8:E9:0D:2E:81
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       55323D8582C6D9ED288499C6FF164E0E16190D59
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a393030303a3a2f33362d3336203d3e203439353139.roa
Signing time:             Sat 08 Apr 2023 04:33:33 +0000
ROA not before:           Sat 08 Apr 2023 04:28:33 +0000
ROA not after:            Sat 06 Apr 2024 04:33:33 +0000
asID:                     49519
IP address blocks:        2a12:dd47:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:32:3d:85:82:c6:d9:ed:28:84:99:c6:ff:16:4e:0e:16:19:0d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:28:33 2023 GMT
            Not After : Apr  6 04:33:33 2024 GMT
        Subject: CN=C741782B4198F416B1CACB662AFCC1E8E90D2E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:8e:0f:1b:c0:1b:60:cb:9b:47:7a:89:88:
                    07:16:06:6a:cd:43:b6:29:94:7e:9a:d4:87:52:a9:
                    82:a2:90:e8:01:7f:58:a6:45:c4:88:e1:23:d5:00:
                    fc:9d:34:06:4e:0f:59:c1:da:78:98:f6:f5:e5:01:
                    ef:dd:8c:1f:26:f1:7e:d9:f6:e8:e5:e9:cb:ca:e1:
                    e8:89:15:a6:75:c2:52:5d:1f:79:65:d2:ed:2d:b0:
                    bc:cf:f9:d7:68:fe:51:be:a4:d4:4f:ad:e6:db:25:
                    9c:e3:99:f0:a0:6e:1e:33:59:3e:2d:43:f3:b2:68:
                    58:56:1e:f1:1e:46:39:6a:ca:02:1c:75:da:29:91:
                    6f:80:5e:53:e5:23:39:f9:49:71:b1:2d:55:3c:f7:
                    2c:13:85:5c:c1:06:23:d5:cf:19:a8:1d:f5:73:97:
                    8c:96:20:95:04:5b:11:cf:2e:c7:c7:7c:81:ba:4d:
                    54:81:5d:58:40:57:67:dc:8e:6b:ef:51:2e:93:3f:
                    c4:29:c0:d3:12:33:d8:d3:b6:aa:7d:27:4f:ab:fd:
                    45:58:9e:dd:95:8e:97:ee:b4:52:3e:13:14:86:22:
                    99:d3:01:c4:82:36:6b:a6:2a:73:c5:6e:4d:ba:29:
                    49:e2:af:5d:60:2f:f6:bf:84:e1:c0:97:73:8c:b4:
                    d3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:41:78:2B:41:98:F4:16:B1:CA:CB:66:2A:FC:C1:E8:E9:0D:2E:81
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a393030303a3a2f33362d3336203d3e203439353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:25:be:1e:87:09:6e:89:c7:a6:e8:97:bc:da:e8:aa:26:
         dc:83:4f:9e:06:e6:86:71:35:82:43:52:b5:99:cc:1e:e4:54:
         55:07:13:62:d2:99:f5:63:2d:3a:7e:4a:28:64:d3:90:bf:5f:
         5d:c0:6c:35:b8:8d:13:8b:dd:a6:b0:e9:ac:f2:8f:1c:48:ca:
         00:f4:0b:d2:c1:fa:76:d4:a1:c1:0d:60:33:4c:ac:18:b8:80:
         29:37:03:65:8b:33:80:98:f3:aa:33:e2:3d:5e:f5:8c:94:d1:
         4b:d6:2e:e5:6e:3f:a5:61:cb:3e:11:78:fe:4c:89:37:71:e9:
         1d:e2:96:3e:da:68:53:f3:6a:79:a8:4a:7a:b5:44:e9:1a:6a:
         4b:c7:22:1f:9e:9d:c2:66:1c:75:0f:ce:10:16:ad:fc:7c:0c:
         95:52:b3:5b:f1:a9:e4:e3:b8:4a:2d:c1:15:97:78:53:ce:f2:
         b5:65:2d:06:1e:bc:8d:ce:1f:89:c1:9f:46:da:4d:19:fe:77:
         c2:0d:a9:de:12:c1:bb:70:84:ea:52:e0:a3:cc:ee:a7:e4:57:
         2a:e7:b2:b6:fe:99:84:ef:d2:77:e9:b0:54:6b:3d:89:9b:c3:
         01:bb:d1:d5:c4:8b:5e:60:8e:bc:11:30:d0:ee:e8:ca:0c:af:
         f4:28:51:80
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUVTI9hYLG2e0ohJnG/xZODhYZDVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNDI4MzNaFw0yNDA0MDYwNDMzMzNaMDMxMTAvBgNV
BAMTKEM3NDE3ODJCNDE5OEY0MTZCMUNBQ0I2NjJBRkNDMUU4RTkwRDJFODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe+o4PG8AbYMubR3qJiAcWBmrN
Q7YplH6a1IdSqYKikOgBf1imRcSI4SPVAPydNAZOD1nB2niY9vXlAe/djB8m8X7Z
9ujl6cvK4eiJFaZ1wlJdH3ll0u0tsLzP+ddo/lG+pNRPrebbJZzjmfCgbh4zWT4t
Q/OyaFhWHvEeRjlqygIcddopkW+AXlPlIzn5SXGxLVU89ywThVzBBiPVzxmoHfVz
l4yWIJUEWxHPLsfHfIG6TVSBXVhAV2fcjmvvUS6TP8QpwNMSM9jTtqp9J0+r/UVY
nt2VjpfutFI+ExSGIpnTAcSCNmumKnPFbk26KUnir11gL/a/hOHAl3OMtNNjAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUx0F4K0GY9BaxystmKvzB6OkNLoEwHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMHwG
CCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4ZgcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzOTMwMzAzMDNhM2EyZjMzMzYy
ZDMzMzYyMDNkM2UyMDM0MzkzNTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqEt1HkDANBgkqhkiG
9w0BAQsFAAOCAQEAb58lvh6HCW6Jx6bol7za6Kom3INPngbmhnE1gkNStZnMHuRU
VQcTYtKZ9WMtOn5KKGTTkL9fXcBsNbiNE4vdprDprPKPHEjKAPQL0sH6dtShwQ1g
M0ysGLiAKTcDZYszgJjzqjPiPV71jJTRS9Yu5W4/pWHLPhF4/kyJN3HpHeKWPtpo
U/NqeahKerVE6RpqS8ciH56dwmYcdQ/OEBat/HwMlVKzW/Gp5OO4Si3BFZd4U87y
tWUtBh68jc4ficGfRtpNGf53wg2p3hLBu3CE6lLgo8zup+RXKueytv6ZhO/Sd+mw
VGs9iZvDAbvR1cSLXmCOvBEw0O7oygyv9ChRgA==
-----END CERTIFICATE-----