Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a646230303a3a2f34302d3438203d3e203530353830.roa
File:                     326131323a646434373a646230303a3a2f34302d3438203d3e203530353830.roa (raw, json)
Hash identifier:          sGYLpAZhbWzUfDI9aQVP5r6mjuo7rsAVEXjmGEnhdVY=
Subject key identifier:   B1:7B:23:7F:FC:A3:9D:38:9B:44:5D:46:35:55:17:6F:B6:F0:73:01
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       6B3698B0C4E40B4AA6E7DB6CB3073B5F5FF966F6
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a646230303a3a2f34302d3438203d3e203530353830.roa
Signing time:             Sat 08 Apr 2023 04:27:45 +0000
ROA not before:           Sat 08 Apr 2023 04:22:45 +0000
ROA not after:            Sat 06 Apr 2024 04:27:45 +0000
asID:                     50580
IP address blocks:        2a12:dd47:db00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:36:98:b0:c4:e4:0b:4a:a6:e7:db:6c:b3:07:3b:5f:5f:f9:66:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:22:45 2023 GMT
            Not After : Apr  6 04:27:45 2024 GMT
        Subject: CN=B17B237FFCA39D389B445D463555176FB6F07301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:aa:38:6f:88:6b:d2:db:75:5f:8f:e9:90:
                    95:cc:f4:01:de:37:0e:29:a7:95:fe:02:69:37:47:
                    7b:2f:7d:48:b4:9a:02:2e:e2:f5:1c:e0:34:37:ab:
                    3f:3b:36:a4:1e:af:c7:a4:de:cf:ad:04:d6:2b:2c:
                    17:6d:5a:5f:e6:67:41:32:0a:84:e1:89:68:b2:25:
                    35:3d:df:c3:3f:19:e8:97:21:92:89:51:36:e9:d2:
                    41:8c:27:38:e9:d5:5a:d9:8d:5e:2e:53:01:7f:ea:
                    54:57:69:e6:d5:aa:61:08:28:e1:8d:da:ec:f9:09:
                    01:66:a5:7c:8f:97:ba:e2:e1:1c:3e:52:20:33:ed:
                    87:6c:ba:0d:d3:9f:34:bf:83:ee:48:25:df:07:49:
                    d5:39:1f:04:cd:7b:9a:6c:5e:d5:04:bb:aa:cd:69:
                    f6:9f:84:a4:7d:73:56:01:4c:a5:14:53:0e:e8:fe:
                    0a:a2:2a:5d:a5:bf:91:e1:ef:0e:32:4b:d0:9e:cd:
                    dd:eb:8c:b1:9c:dc:51:f8:24:67:00:fe:11:d9:54:
                    db:98:6c:1b:07:c4:d4:64:6a:fa:2f:d9:c2:5e:19:
                    61:3d:e6:7c:0c:38:2f:44:f0:e1:24:cc:9d:5e:22:
                    28:ed:a2:22:cd:98:c1:39:d3:c7:21:b1:79:ce:11:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7B:23:7F:FC:A3:9D:38:9B:44:5D:46:35:55:17:6F:B6:F0:73:01
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a646230303a3a2f34302d3438203d3e203530353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:db00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:c5:97:67:b9:20:55:24:c3:78:12:63:20:05:e7:85:c2:
         4f:32:bb:bf:f5:79:7d:92:5f:a0:ed:10:c6:b4:c0:20:e8:b3:
         bc:35:b9:55:de:c9:f2:1c:30:5f:3d:81:c2:2a:2e:72:cf:d9:
         e3:40:80:1d:8f:1a:0d:e3:8c:58:c4:38:cc:6c:ea:39:2d:52:
         27:48:94:11:6a:bf:06:b3:86:91:04:4e:d1:51:91:67:d4:0e:
         d2:57:37:6d:d6:db:6e:94:6b:e5:ba:3a:19:9d:90:34:14:2b:
         c3:51:1b:a3:7b:b5:23:3b:d2:13:55:8f:8a:2c:e7:8d:8c:fb:
         0c:b0:31:6b:33:5b:ad:6b:60:83:3c:94:b9:09:d4:7f:ac:3a:
         4f:81:b3:8c:26:b1:2d:1b:6e:3c:12:69:32:4e:3e:73:da:54:
         ae:49:d5:17:d8:f2:ce:d0:07:70:f4:07:da:93:12:fb:fb:4e:
         c9:50:e8:5b:52:a7:b2:3a:67:85:5d:a2:2a:0f:f1:57:2e:93:
         9e:de:39:7c:63:f8:ea:5e:08:2a:07:a9:46:11:0c:71:e1:20:
         3a:41:3a:41:5c:9d:4d:ba:f4:68:e9:0c:de:f0:24:a1:97:53:
         75:29:cf:68:58:6f:a3:3f:5b:da:d7:3f:35:72:9d:f6:eb:68:
         6e:31:37:f5
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUazaYsMTkC0qm59tsswc7X1/5ZvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNDIyNDVaFw0yNDA0MDYwNDI3NDVaMDMxMTAvBgNV
BAMTKEIxN0IyMzdGRkNBMzlEMzg5QjQ0NUQ0NjM1NTUxNzZGQjZGMDczMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJqo4b4hr0tt1X4/pkJXM9AHe
Nw4pp5X+Amk3R3svfUi0mgIu4vUc4DQ3qz87NqQer8ek3s+tBNYrLBdtWl/mZ0Ey
CoThiWiyJTU938M/GeiXIZKJUTbp0kGMJzjp1VrZjV4uUwF/6lRXaebVqmEIKOGN
2uz5CQFmpXyPl7ri4Rw+UiAz7Ydsug3TnzS/g+5IJd8HSdU5HwTNe5psXtUEu6rN
afafhKR9c1YBTKUUUw7o/gqiKl2lv5Hh7w4yS9Cezd3rjLGc3FH4JGcA/hHZVNuY
bBsHxNRkavov2cJeGWE95nwMOC9E8OEkzJ1eIijtoiLNmME508chsXnOESvJAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUsXsjf/yjnTibRF1GNVUXb7bwcwEwHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMHwG
CCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4ZgcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDM3M2E2NDYyMzAzMDNhM2EyZjM0MzAy
ZDM0MzgyMDNkM2UyMDM1MzAzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1H2zANBgkqhkiG
9w0BAQsFAAOCAQEAWl3Fl2e5IFUkw3gSYyAF54XCTzK7v/V5fZJfoO0QxrTAIOiz
vDW5Vd7J8hwwXz2Bwioucs/Z40CAHY8aDeOMWMQ4zGzqOS1SJ0iUEWq/BrOGkQRO
0VGRZ9QO0lc3bdbbbpRr5bo6GZ2QNBQrw1Ebo3u1IzvSE1WPiiznjYz7DLAxazNb
rWtggzyUuQnUf6w6T4GzjCaxLRtuPBJpMk4+c9pUrknVF9jyztAHcPQH2pMS+/tO
yVDoW1KnsjpnhV2iKg/xVy6Tnt45fGP46l4IKgepRhEMceEgOkE6QVydTbr0aOkM
3vAkoZdTdSnPaFhvoz9b2tc/NXKd9utobjE39Q==
-----END CERTIFICATE-----