Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a643830303a3a2f34302d3430203d3e20323133303836.roa
File:                     326131323a646434373a643830303a3a2f34302d3430203d3e20323133303836.roa (raw, json)
Hash identifier:          B3IdhA4Q/CNxb4QBPqDJyPnzi315fBE4fMVzwkUWZHc=
Subject key identifier:   DA:C0:4B:32:F9:83:D7:32:2A:DD:4B:49:70:09:00:6D:C7:C5:D4:38
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       7BF54829882E5195F0A084515C4D17B0750BD313
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a643830303a3a2f34302d3430203d3e20323133303836.roa
Signing time:             Sat 08 Apr 2023 04:29:25 +0000
ROA not before:           Sat 08 Apr 2023 04:24:25 +0000
ROA not after:            Sat 06 Apr 2024 04:29:25 +0000
asID:                     213086
IP address blocks:        2a12:dd47:d800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f5:48:29:88:2e:51:95:f0:a0:84:51:5c:4d:17:b0:75:0b:d3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:24:25 2023 GMT
            Not After : Apr  6 04:29:25 2024 GMT
        Subject: CN=DAC04B32F983D7322ADD4B497009006DC7C5D438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:de:7d:13:da:bb:2c:ab:f4:dd:0c:4a:96:
                    5a:21:14:ed:c5:33:83:47:81:7c:8c:b7:d1:28:31:
                    37:e9:65:de:0a:04:ba:65:a5:9f:14:0d:a1:1b:e1:
                    55:bf:84:16:da:73:aa:98:3b:e5:a2:82:b1:1f:f2:
                    6c:0f:a8:91:2c:4e:69:34:d4:e0:8a:9d:8a:48:6f:
                    50:f5:8a:72:63:eb:bf:0c:ba:5e:5a:7f:d8:2c:d7:
                    75:85:87:93:0d:b1:a7:52:b6:32:57:73:99:ad:e8:
                    32:88:ce:bf:57:c5:ff:1a:d6:d6:ae:87:a0:5b:57:
                    63:ce:7d:b0:98:98:33:3e:f7:8e:ab:d4:b4:a3:93:
                    ef:01:2d:70:91:0b:9c:25:14:79:5c:70:b3:e6:d8:
                    05:8a:39:5c:b9:49:64:3d:3f:7a:3c:30:33:4c:2a:
                    24:20:77:f9:3f:a1:e0:e7:86:bb:a9:21:9e:71:6d:
                    42:52:9b:77:63:fb:aa:ab:40:b9:88:a8:b6:e7:3f:
                    56:8e:18:68:2c:c2:9f:ed:25:d5:c3:0e:9e:d1:48:
                    03:89:d9:d1:73:57:57:43:7d:76:0d:9d:67:de:24:
                    ce:9e:36:e2:9b:b2:de:cd:e7:27:81:59:b5:50:ef:
                    8e:a0:d0:05:f9:27:b5:a0:24:4c:82:f4:33:ef:7e:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C0:4B:32:F9:83:D7:32:2A:DD:4B:49:70:09:00:6D:C7:C5:D4:38
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a643830303a3a2f34302d3430203d3e20323133303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:ac:dd:6f:4b:c0:59:dd:d2:c2:ff:a7:b2:e9:29:f8:35:c4:
         f6:5e:31:8d:7f:df:e7:1e:fd:4f:59:9b:c3:e6:fa:d5:6f:4f:
         70:e9:b5:4e:ec:91:4e:ff:b7:80:17:7d:bb:d2:d8:21:42:6e:
         da:54:b3:e8:21:f9:50:9c:34:a5:f1:4e:05:c5:9e:6e:31:ed:
         66:65:7a:3d:04:ff:3b:85:b7:0f:03:26:f6:3d:c4:90:d1:ec:
         16:d1:51:e4:cc:db:5d:3d:82:37:97:19:e4:9a:66:c5:12:a8:
         2a:ef:7f:a3:36:27:68:71:6c:55:61:9d:cd:78:be:16:4d:76:
         0a:1b:63:94:c9:ed:0f:df:8b:5d:c2:b6:c3:1e:5a:e3:56:10:
         d2:16:c3:f6:56:19:71:07:81:14:ee:bf:0b:91:39:56:6f:00:
         8a:fe:09:cb:ab:93:50:9a:c4:d5:da:df:60:2e:df:17:78:f9:
         59:22:16:df:79:4d:81:d0:7a:0b:5a:fd:70:22:1d:77:5f:a7:
         34:3c:c0:90:dc:25:cd:32:8d:a3:11:2a:88:bf:ca:69:7c:7c:
         f9:bc:d5:73:39:95:30:6f:a2:3f:44:84:b9:bf:32:95:8c:e3:
         63:26:97:2e:99:cc:f2:18:56:9f:c9:42:a2:27:16:86:ed:a7:
         6e:07:34:8a
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUe/VIKYguUZXwoIRRXE0XsHUL0xMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNDI0MjVaFw0yNDA0MDYwNDI5MjVaMDMxMTAvBgNV
BAMTKERBQzA0QjMyRjk4M0Q3MzIyQURENEI0OTcwMDkwMDZEQzdDNUQ0MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObt59E9q7LKv03QxKllohFO3F
M4NHgXyMt9EoMTfpZd4KBLplpZ8UDaEb4VW/hBbac6qYO+WigrEf8mwPqJEsTmk0
1OCKnYpIb1D1inJj678Mul5af9gs13WFh5MNsadStjJXc5mt6DKIzr9Xxf8a1tau
h6BbV2POfbCYmDM+946r1LSjk+8BLXCRC5wlFHlccLPm2AWKOVy5SWQ9P3o8MDNM
KiQgd/k/oeDnhrupIZ5xbUJSm3dj+6qrQLmIqLbnP1aOGGgswp/tJdXDDp7RSAOJ
2dFzV1dDfXYNnWfeJM6eNuKbst7N5yeBWbVQ746g0AX5J7WgJEyC9DPvfkYnAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQU2sBLMvmD1zIq3UtJcAkAbcfF1DgwHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMH4G
CCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDM3M2E2NDM4MzAzMDNhM2EyZjM0MzAy
ZDM0MzAyMDNkM2UyMDMyMzEzMzMwMzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UfYMA0GCSqG
SIb3DQEBCwUAA4IBAQBWrN1vS8BZ3dLC/6ey6Sn4NcT2XjGNf9/nHv1PWZvD5vrV
b09w6bVO7JFO/7eAF3270tghQm7aVLPoIflQnDSl8U4FxZ5uMe1mZXo9BP87hbcP
Ayb2PcSQ0ewW0VHkzNtdPYI3lxnkmmbFEqgq73+jNidocWxVYZ3NeL4WTXYKG2OU
ye0P34tdwrbDHlrjVhDSFsP2VhlxB4EU7r8LkTlWbwCK/gnLq5NQmsTV2t9gLt8X
ePlZIhbfeU2B0HoLWv1wIh13X6c0PMCQ3CXNMo2jESqIv8ppfHz5vNVzOZUwb6I/
RIS5vzKVjONjJpcumczyGFafyUKiJxaG7aduBzSK
-----END CERTIFICATE-----