Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a643630303a3a2f33392d3438203d3e20323132323432.roa
File:                     326131323a646434373a643630303a3a2f33392d3438203d3e20323132323432.roa (raw, json)
Hash identifier:          w0A04LGNRdxZIlXXaqdkv6WMbZoHU3nGrE44iaMtELQ=
Subject key identifier:   84:35:9C:B4:45:5F:1D:5A:F5:60:75:8F:60:73:A4:44:29:F7:BE:3A
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       42B638D462CAC79E6DA9D8D28CC00FDF2B239D84
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a643630303a3a2f33392d3438203d3e20323132323432.roa
Signing time:             Sat 08 Apr 2023 04:47:43 +0000
ROA not before:           Sat 08 Apr 2023 04:42:43 +0000
ROA not after:            Sat 06 Apr 2024 04:47:43 +0000
asID:                     212242
IP address blocks:        2a12:dd47:d600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b6:38:d4:62:ca:c7:9e:6d:a9:d8:d2:8c:c0:0f:df:2b:23:9d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:42:43 2023 GMT
            Not After : Apr  6 04:47:43 2024 GMT
        Subject: CN=84359CB4455F1D5AF560758F6073A44429F7BE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:34:5a:2d:a1:af:cb:07:d3:e9:13:f2:87:
                    30:0f:03:d1:b9:53:3f:57:e6:fc:b2:92:b7:82:d1:
                    69:02:d3:e4:93:55:37:7c:0c:33:b3:dd:37:31:93:
                    4e:5a:7b:73:ef:85:64:bb:ac:2c:31:2d:26:60:f0:
                    96:e0:4e:37:86:c2:e5:fa:e6:a9:b6:db:31:cb:08:
                    57:e0:73:0c:f1:a9:b7:d0:1e:7c:1b:48:5b:d1:c2:
                    5b:41:e1:c1:5f:68:44:2e:84:78:e3:76:2f:4e:38:
                    6a:45:d0:01:66:ef:f9:16:37:65:b5:60:6d:82:76:
                    4e:ee:5c:e8:c3:44:29:70:97:73:ac:14:58:fa:bd:
                    be:b7:19:ec:6b:f5:ae:30:36:67:d2:57:79:e6:c9:
                    10:be:11:e0:ef:7a:d5:da:e7:65:2d:1c:b6:f0:dc:
                    39:88:cf:93:46:cb:a4:e8:90:9d:37:87:85:14:2b:
                    89:b7:36:d7:1e:22:70:8e:6e:4e:4f:bc:01:1c:f0:
                    6e:82:8c:44:ed:d2:4a:c8:00:12:15:28:3b:37:4e:
                    f8:91:bb:ec:75:ed:96:72:b2:0e:72:12:8b:07:61:
                    1b:56:3d:62:2f:87:b8:2e:2b:9d:b0:22:9c:2b:54:
                    94:aa:6e:00:00:4d:21:58:04:da:5b:12:fe:76:bc:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:35:9C:B4:45:5F:1D:5A:F5:60:75:8F:60:73:A4:44:29:F7:BE:3A
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a643630303a3a2f33392d3438203d3e20323132323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d600::/39

    Signature Algorithm: sha256WithRSAEncryption
         07:28:0f:cb:b1:dd:38:97:94:82:c2:e0:54:49:22:36:dc:92:
         20:a3:3e:68:15:7e:67:a0:32:aa:90:74:d1:c7:25:68:7b:24:
         0c:86:d2:2e:9e:6f:2d:f1:bb:0b:e5:35:49:9f:21:4e:09:9f:
         e4:47:1a:38:45:6d:26:be:a9:eb:d8:43:fb:c5:ad:e5:a2:c2:
         ee:62:4f:f3:81:b4:eb:05:3d:5f:06:10:df:fc:73:88:87:9e:
         20:9f:59:65:ab:ba:1f:6c:a0:80:c7:57:4d:bd:71:9d:36:25:
         16:2e:5c:10:bc:80:ba:4a:86:62:70:e3:44:5d:92:2f:13:8a:
         cb:99:0f:0c:13:cc:22:33:d0:67:2f:7c:15:65:cc:f3:b0:2d:
         d5:a0:07:8c:fb:d8:96:55:a2:ba:14:72:3b:20:21:6f:3f:cf:
         4f:61:dc:5b:20:e3:a6:ed:70:56:ed:0c:a9:67:cb:23:70:21:
         62:53:20:c3:63:6a:2b:ad:b4:bd:b5:f0:86:5a:1c:d5:ce:6b:
         1a:be:74:05:4f:66:e7:bd:7a:6d:d4:53:bb:72:64:3d:c3:fe:
         62:d7:c7:68:7a:2e:9e:be:4d:72:ad:e9:5f:c2:26:14:30:ec:
         ae:4d:03:69:e7:8b:8b:88:be:f4:e8:d4:a4:17:35:7b:97:58:
         23:8e:c9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----