Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a663130303a3a2f34342d3434203d3e20323132313638.roa
File:                     326131323a646434373a663130303a3a2f34342d3434203d3e20323132313638.roa (raw, json)
Hash identifier:          VeUpd76TgKfS8whY7DPh/YYx8koD0gxFFmp51U1jN1k=
Subject key identifier:   CC:81:BC:34:AC:5E:DE:5F:9E:13:89:27:64:D4:D2:12:39:5C:F2:A3
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       35894387192B435EAF00E45003F5DE6E4061D4CE
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a663130303a3a2f34342d3434203d3e20323132313638.roa
Signing time:             Sat 08 Apr 2023 04:48:25 +0000
ROA not before:           Sat 08 Apr 2023 04:43:25 +0000
ROA not after:            Sat 06 Apr 2024 04:48:25 +0000
asID:                     212168
IP address blocks:        2a12:dd47:f100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:89:43:87:19:2b:43:5e:af:00:e4:50:03:f5:de:6e:40:61:d4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:43:25 2023 GMT
            Not After : Apr  6 04:48:25 2024 GMT
        Subject: CN=CC81BC34AC5EDE5F9E13892764D4D212395CF2A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:d5:57:c7:fb:85:77:ba:80:95:93:e2:2c:
                    c4:62:04:86:65:f2:f9:55:90:ed:11:23:ad:66:b8:
                    45:06:89:ce:9c:83:9b:6d:2f:59:8b:bf:6b:f6:6c:
                    5b:e7:b3:3f:ce:7f:fe:68:81:5d:55:cd:1e:3a:ea:
                    9f:be:41:ca:96:dc:ba:b7:90:2b:56:ea:cd:ab:77:
                    eb:4b:da:1d:b9:fa:37:a2:be:8b:3b:18:c8:bc:85:
                    fc:75:01:96:01:ea:ef:61:a7:54:af:b4:92:0c:46:
                    54:c2:93:4b:10:c4:eb:9f:c4:ec:9f:e8:f7:fc:dc:
                    a0:9d:aa:b2:7f:4e:f2:fd:9e:2b:01:6d:9e:92:c9:
                    f6:c9:d0:9a:a2:56:95:d1:cc:54:0d:ed:39:07:79:
                    45:83:32:fc:45:42:3f:5d:23:12:4c:c1:55:99:9e:
                    5b:26:41:58:3a:09:37:d8:24:2e:99:a8:aa:40:41:
                    8f:fe:95:af:4b:ad:19:31:96:a0:26:ea:b7:07:d3:
                    32:f1:22:e9:f1:22:a2:d0:9a:37:e6:63:8c:47:81:
                    aa:9d:81:39:cb:54:13:43:dd:91:9b:95:12:44:fb:
                    3d:da:63:78:dd:d7:39:cc:f7:a4:23:52:51:7f:c8:
                    bc:2a:f1:57:d1:3a:b1:50:f0:85:11:35:98:83:f7:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:81:BC:34:AC:5E:DE:5F:9E:13:89:27:64:D4:D2:12:39:5C:F2:A3
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a663130303a3a2f34342d3434203d3e20323132313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f100::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:f2:a4:18:8e:78:ed:63:f4:d5:31:e1:53:b5:5b:3c:89:
         0b:19:66:d0:b9:ea:29:20:0c:5c:9b:b1:52:14:99:5d:f8:ca:
         03:be:fa:60:cb:7b:7f:12:2b:4e:96:63:de:0c:79:eb:10:e2:
         41:5a:03:18:28:46:c9:7e:df:c4:b1:db:d5:20:d3:65:f9:ee:
         2b:a1:91:f8:ed:9c:3e:26:cb:37:1f:9f:56:18:1c:8b:1a:54:
         2c:88:52:46:e8:83:a6:a5:d7:85:31:4b:c0:d9:7b:36:9b:8f:
         9f:06:ad:c3:a7:64:1c:64:2e:12:df:63:ee:8a:9b:cf:48:75:
         0f:f3:b0:d6:3e:89:e4:88:7c:14:5d:9c:68:9b:4e:17:92:ac:
         1d:b2:cb:de:16:c1:6d:61:df:14:d8:03:ff:7c:a9:9c:08:23:
         d1:ed:69:38:29:3c:e0:28:79:9e:99:b9:25:ca:67:68:9c:d0:
         d0:a9:62:64:5e:61:59:56:01:e5:d7:3b:4c:97:29:91:52:7c:
         54:45:a0:e2:22:72:2f:6d:0a:f3:6b:bc:21:3d:7f:4c:ed:f3:
         47:81:6b:1d:db:20:ab:1c:2c:54:f0:55:58:87:58:04:f3:43:
         12:4d:66:f7:58:8d:55:10:8d:65:ed:24:a6:38:09:72:41:10:
         5f:19:35:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----