Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a646632303a3a2f34342d3434203d3e20323132313634.roa
File:                     326131323a646434373a646632303a3a2f34342d3434203d3e20323132313634.roa (raw, json)
Hash identifier:          FmQqdDh1laOa65n3/fr5Audl2YJhyTqGHE1Mcg8V4/Y=
Subject key identifier:   96:08:5A:31:BD:78:A3:C5:C9:EE:27:0C:0E:C0:AE:02:F6:65:23:63
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       62540A24037BC4BF65A63668A6D10E201EB1EA5B
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a646632303a3a2f34342d3434203d3e20323132313634.roa
Signing time:             Sat 08 Apr 2023 04:42:04 +0000
ROA not before:           Sat 08 Apr 2023 04:37:04 +0000
ROA not after:            Sat 06 Apr 2024 04:42:04 +0000
asID:                     212164
IP address blocks:        2a12:dd47:df20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:54:0a:24:03:7b:c4:bf:65:a6:36:68:a6:d1:0e:20:1e:b1:ea:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:37:04 2023 GMT
            Not After : Apr  6 04:42:04 2024 GMT
        Subject: CN=96085A31BD78A3C5C9EE270C0EC0AE02F6652363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:27:83:40:5e:91:36:73:e9:97:20:90:a5:
                    bb:40:a8:cf:18:5f:d0:78:d2:e0:3b:5e:54:64:e8:
                    3e:5c:9f:64:4d:37:3d:19:9a:d3:31:7d:4d:30:c0:
                    b6:aa:4e:5d:d7:10:dc:19:7e:3e:d6:95:96:28:3a:
                    3e:7e:ca:45:5f:31:9f:f2:a9:aa:5a:82:70:a8:82:
                    80:e4:a7:4f:3a:f7:6d:02:39:86:31:69:cc:a5:2b:
                    00:74:e6:2a:ad:e8:52:67:80:dc:1b:6d:c7:49:c7:
                    de:96:79:2c:a6:c0:83:a9:45:ab:03:4f:47:53:ed:
                    0a:bc:cc:69:56:91:d2:cb:e8:68:10:ba:e0:d0:ea:
                    5f:50:ea:75:ae:f6:4e:00:ac:3c:59:82:dc:98:c9:
                    b2:99:32:a7:28:2d:74:71:c1:99:ee:6d:c6:5e:80:
                    76:b1:97:b3:73:d6:08:03:3c:0a:0e:52:2e:08:e7:
                    b8:bf:f2:e5:b9:ef:37:ca:dd:6e:e2:24:71:38:89:
                    28:f5:ec:58:f1:d8:2b:a0:81:9b:ad:03:17:cd:0c:
                    74:db:07:2d:00:c3:d9:dd:2a:45:39:22:15:76:6a:
                    36:52:10:de:45:bf:f4:14:d7:d2:cf:59:e2:cf:db:
                    da:9d:38:57:2e:8a:c8:60:e2:a8:9d:73:9b:05:0e:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:08:5A:31:BD:78:A3:C5:C9:EE:27:0C:0E:C0:AE:02:F6:65:23:63
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a646632303a3a2f34342d3434203d3e20323132313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:df20::/44

    Signature Algorithm: sha256WithRSAEncryption
         01:6e:3d:56:5a:24:b2:20:1e:4a:8d:fc:c0:7e:60:d0:ec:74:
         33:63:f8:70:f7:0d:ed:96:50:96:23:3b:ff:5a:b1:5f:3b:b9:
         f2:5a:01:c0:d0:40:32:7c:bc:5d:72:08:da:a3:8c:53:e6:b6:
         8b:21:7f:95:d7:8f:97:b4:e7:7f:0a:4a:45:22:cd:7c:e8:d3:
         35:2c:e2:51:fd:93:ce:11:1e:58:3c:a6:a7:ee:5b:ea:18:ce:
         82:24:36:b1:43:e0:b5:fc:7f:23:49:aa:0d:90:73:1c:4b:d6:
         04:b2:54:65:88:aa:e9:4a:ab:57:82:da:00:2d:f8:01:15:c3:
         33:be:f9:e7:f9:85:1a:ce:79:82:2c:b6:91:a7:09:ab:64:d5:
         43:5a:58:47:a9:58:2a:48:ec:f4:28:a8:77:da:25:13:96:a0:
         d8:82:fb:6c:66:6a:e7:3b:fd:9c:6e:44:fc:51:fd:87:45:d3:
         79:a2:ad:c2:0b:52:f8:87:dd:26:1d:88:c8:83:05:5d:03:f1:
         e5:56:fc:ec:5d:71:de:18:a4:44:7d:b4:39:df:70:d5:3e:77:
         8e:8c:3f:c0:5a:e2:c3:7c:bf:33:36:0f:b2:f0:38:ff:54:16:
         15:77:3e:01:08:28:53:af:89:fc:72:a0:17:f5:77:0d:f8:ee:
         3d:6b:7e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----