Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a643130303a3a2f34302d3430203d3e20333933353737.roa
File:                     326131323a646434373a643130303a3a2f34302d3430203d3e20333933353737.roa (raw, json)
Hash identifier:          RCUTc5tXA77Qm3E2O1rCDxaWaaY91F4GY5QbFvAfSds=
Subject key identifier:   DC:70:0A:D9:54:F9:CA:5C:3E:64:71:A2:75:55:BA:C0:E1:DD:56:74
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       4C65102627C41FE03CE28CDF2B3642BA0605A7B1
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a643130303a3a2f34302d3430203d3e20333933353737.roa
Signing time:             Sat 08 Apr 2023 04:28:52 +0000
ROA not before:           Sat 08 Apr 2023 04:23:52 +0000
ROA not after:            Sat 06 Apr 2024 04:28:52 +0000
asID:                     393577
IP address blocks:        2a12:dd47:d100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:65:10:26:27:c4:1f:e0:3c:e2:8c:df:2b:36:42:ba:06:05:a7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:23:52 2023 GMT
            Not After : Apr  6 04:28:52 2024 GMT
        Subject: CN=DC700AD954F9CA5C3E6471A27555BAC0E1DD5674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:2d:82:93:9a:c7:a5:02:cd:9d:e2:07:0a:
                    cb:c9:dd:9e:5f:c9:b5:38:39:91:10:c5:a2:4e:5c:
                    51:62:63:48:32:93:00:d5:bf:88:e3:2a:02:ea:51:
                    5c:f2:61:28:2c:32:71:c4:4a:09:6e:c1:ad:68:ae:
                    84:81:98:67:0e:b8:97:13:bb:7f:2d:15:ce:7f:a8:
                    36:36:fa:1a:89:ec:de:ba:e9:10:f9:c1:28:8b:8c:
                    ed:13:34:b5:81:bc:01:34:94:82:67:76:97:ba:53:
                    73:97:31:cd:d3:06:14:f0:fa:fa:22:a8:8b:82:0f:
                    92:89:75:23:65:c2:17:a7:f8:85:15:89:27:8e:d3:
                    86:cb:71:ad:3c:f3:fb:72:53:f5:da:63:bd:ad:4f:
                    1e:6e:1e:c3:e8:8c:d4:c4:56:7f:d4:0f:ef:74:af:
                    2b:f4:30:43:48:73:23:2a:6a:a2:9e:fc:4f:72:1a:
                    0d:ad:fc:4f:ff:35:b1:a4:75:fe:dd:01:de:f4:5a:
                    69:4e:8e:5a:be:88:2f:11:56:ae:c4:03:c3:f8:0f:
                    8b:5b:f4:46:07:17:37:bd:97:4e:8a:cc:8d:e1:f6:
                    b8:cd:40:4e:d8:78:53:36:90:bd:e5:6b:d7:2f:50:
                    e7:e4:d8:65:56:3d:dd:8b:b2:c1:a9:85:de:de:6f:
                    8b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:70:0A:D9:54:F9:CA:5C:3E:64:71:A2:75:55:BA:C0:E1:DD:56:74
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a643130303a3a2f34302d3430203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:36:89:05:df:11:60:5c:0e:ba:bf:a7:15:dc:e7:ac:14:b3:
         aa:57:97:ea:58:6e:1c:c7:4e:27:19:ac:ba:ce:80:64:e9:45:
         80:8f:4c:9b:70:f8:05:ec:b8:c7:80:54:50:07:37:4b:99:20:
         d9:0a:cd:f6:42:7b:22:f9:80:73:67:62:fc:07:ae:fa:fe:03:
         24:b3:7a:22:b9:60:24:f9:a3:21:0d:44:cb:d4:68:69:e4:2e:
         88:76:bb:b6:bf:8d:8e:c9:d6:cc:6d:35:4f:6e:c9:f3:57:91:
         4a:7c:8e:fe:9e:7b:4c:48:f0:dd:b6:d3:50:50:d6:02:07:1d:
         4b:42:c0:3b:2a:d4:58:c4:13:58:d8:2f:29:e9:88:85:d0:3d:
         81:b6:61:cb:f2:fc:74:95:59:8d:56:1f:2d:86:1b:34:ce:b9:
         06:9d:3c:51:02:6d:af:44:e7:67:04:7e:88:55:e9:76:62:ba:
         df:f9:63:a3:e0:59:d0:75:ee:f2:78:cb:5f:d0:82:76:58:3c:
         60:82:38:1d:95:db:74:f0:94:fc:36:68:fa:97:17:1e:f1:eb:
         dd:0c:57:ed:0b:a3:75:96:42:25:f3:56:80:18:ba:ff:0f:2c:
         0c:76:65:95:4e:c5:1d:1d:b1:6b:3f:3e:d0:eb:3d:27:fa:cd:
         76:f1:67:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----