Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a393333303a3a2f34342d3434203d3e20323130383130.roa
File:                     326131323a646434373a393333303a3a2f34342d3434203d3e20323130383130.roa (raw, json)
Hash identifier:          MV8lgL71Jkrdnq4GI2svWthUl87zMcvUwlMzdBojd4w=
Subject key identifier:   46:CC:2C:CF:A9:11:0B:A4:BC:9B:C4:79:30:E5:46:29:C1:16:85:BD
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       07C92C7343A3C879BDA806891181BD6784FD96AA
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a393333303a3a2f34342d3434203d3e20323130383130.roa
Signing time:             Sat 08 Apr 2023 05:01:18 +0000
ROA not before:           Sat 08 Apr 2023 04:56:18 +0000
ROA not after:            Sat 06 Apr 2024 05:01:18 +0000
asID:                     210810
IP address blocks:        2a12:dd47:9330::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c9:2c:73:43:a3:c8:79:bd:a8:06:89:11:81:bd:67:84:fd:96:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:56:18 2023 GMT
            Not After : Apr  6 05:01:18 2024 GMT
        Subject: CN=46CC2CCFA9110BA4BC9BC47930E54629C11685BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:f7:09:60:bf:06:5d:99:a9:73:48:ce:c3:
                    98:4d:da:55:ab:45:ca:71:14:21:58:03:1e:ac:7f:
                    26:da:24:e0:e6:f6:91:05:54:50:d5:9f:66:51:2c:
                    be:2b:c9:f1:05:2a:00:52:a6:7e:72:a8:45:60:7f:
                    23:37:24:28:d5:d1:ee:d3:bf:6f:20:07:6b:08:b5:
                    58:14:d8:47:4f:51:a0:fe:7c:ac:17:2b:74:82:5e:
                    90:04:09:64:96:bf:4c:84:f1:ef:90:2e:2b:1c:4b:
                    ae:6b:da:a9:90:fe:09:b4:b1:ce:18:bc:92:07:26:
                    b3:db:a2:6a:92:42:95:27:c4:63:9f:67:ff:32:f7:
                    84:dc:de:b6:cc:1a:03:99:63:09:54:d6:39:66:9a:
                    dc:11:1b:26:02:2e:d6:3e:2b:4a:dc:78:ad:f7:78:
                    e9:10:52:cb:ee:42:69:6d:78:35:ce:cd:9f:f8:56:
                    b2:92:d3:60:9f:2c:9b:f5:85:2d:83:06:b8:3c:c5:
                    94:ae:46:b4:25:70:78:39:47:92:b4:fb:c8:88:0f:
                    28:f2:d1:48:e9:15:12:ce:f4:6c:82:f7:59:22:80:
                    4a:e7:35:09:3d:bd:2b:d9:ed:58:43:31:a4:24:22:
                    e2:2d:43:28:af:df:39:e7:29:ef:19:89:b2:f5:53:
                    3f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CC:2C:CF:A9:11:0B:A4:BC:9B:C4:79:30:E5:46:29:C1:16:85:BD
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a393333303a3a2f34342d3434203d3e20323130383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:9330::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:55:0a:95:1c:1c:64:b5:7d:33:0a:99:88:fa:90:8f:4b:9d:
         44:48:83:11:a3:d1:a9:10:27:dc:e8:0e:7f:92:3e:4d:03:a8:
         47:c0:e8:54:93:3e:fb:5a:ee:ad:cf:70:31:1a:ae:97:40:09:
         47:db:c5:a5:f4:40:e5:91:cd:bc:e0:de:90:13:2d:16:3c:5d:
         78:3f:d7:69:f2:e8:cb:2d:04:3f:18:3b:12:0f:78:17:fe:94:
         92:43:60:4f:4d:95:df:45:0f:75:7d:a6:38:a7:d7:d6:d7:2a:
         92:b3:7e:93:fb:b9:35:fb:4f:b8:8e:4e:81:aa:8c:ea:bd:f2:
         ef:46:5d:cd:41:6c:ea:2d:3f:29:20:13:b1:32:a1:e5:fd:04:
         0f:9d:ec:df:81:48:d3:b1:9c:17:4a:c7:61:39:42:38:d4:f2:
         be:e6:81:c7:7b:cc:27:92:b2:8b:05:eb:f9:62:7b:94:56:20:
         2e:40:c4:4b:a5:9d:19:7e:9c:ba:04:20:59:3a:56:2c:6b:ab:
         54:81:a8:b6:65:6f:0f:5f:fe:17:df:bf:26:26:6c:94:4c:dc:
         7a:5f:c3:ea:ed:78:0b:71:9c:e4:19:89:c1:85:0b:00:d5:a9:
         48:e1:ba:e1:f7:57:45:5c:44:37:db:7b:0d:e4:40:b0:39:84:
         91:6d:93:f9
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUB8ksc0OjyHm9qAaJEYG9Z4T9lqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNDU2MThaFw0yNDA0MDYwNTAxMThaMDMxMTAvBgNV
BAMTKDQ2Q0MyQ0NGQTkxMTBCQTRCQzlCQzQ3OTMwRTU0NjI5QzExNjg1QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HfcJYL8GXZmpc0jOw5hN2lWr
RcpxFCFYAx6sfybaJODm9pEFVFDVn2ZRLL4ryfEFKgBSpn5yqEVgfyM3JCjV0e7T
v28gB2sItVgU2EdPUaD+fKwXK3SCXpAECWSWv0yE8e+QLiscS65r2qmQ/gm0sc4Y
vJIHJrPbomqSQpUnxGOfZ/8y94Tc3rbMGgOZYwlU1jlmmtwRGyYCLtY+K0rceK33
eOkQUsvuQmlteDXOzZ/4VrKS02CfLJv1hS2DBrg8xZSuRrQlcHg5R5K0+8iIDyjy
0UjpFRLO9GyC91kigErnNQk9vSvZ7VhDMaQkIuItQyiv3znnKe8ZibL1Uz8RAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQURswsz6kRC6S8m8R5MOVGKcEWhb0wHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMH4G
CCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzOTMzMzMzMDNhM2EyZjM0MzQy
ZDM0MzQyMDNkM2UyMDMyMzEzMDM4MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeTMDANBgkq
hkiG9w0BAQsFAAOCAQEAeVUKlRwcZLV9MwqZiPqQj0udREiDEaPRqRAn3OgOf5I+
TQOoR8DoVJM++1rurc9wMRqul0AJR9vFpfRA5ZHNvODekBMtFjxdeD/XafLoyy0E
Pxg7Eg94F/6UkkNgT02V30UPdX2mOKfX1tcqkrN+k/u5NftPuI5OgaqM6r3y70Zd
zUFs6i0/KSATsTKh5f0ED53s34FI07GcF0rHYTlCONTyvuaBx3vMJ5KyiwXr+WJ7
lFYgLkDES6WdGX6cugQgWTpWLGurVIGotmVvD1/+F9+/JiZslEzcel/D6u14C3Gc
5BmJwYULANWpSOG64fdXRVxEN9t7DeRAsDmEkW2T+Q==
-----END CERTIFICATE-----