Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a663530303a3a2f34302d3430203d3e20313939323939.roa
File:                     326131323a646434373a663530303a3a2f34302d3430203d3e20313939323939.roa (raw, json)
Hash identifier:          mYWTvKZMXdMFuUpF4xwdf8k6kkDQZq/TKDmwhyrw+TA=
Subject key identifier:   1A:94:AE:8C:D2:DA:BE:F0:8B:75:11:C9:F0:FB:C9:CE:9E:2F:20:A3
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       22F5F9D2DA45669DBD41E2F27EFEFE2C9FAC4EB7
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a663530303a3a2f34302d3430203d3e20313939323939.roa
Signing time:             Sat 08 Apr 2023 05:23:17 +0000
ROA not before:           Sat 08 Apr 2023 05:18:17 +0000
ROA not after:            Sat 06 Apr 2024 05:23:17 +0000
asID:                     199299
IP address blocks:        2a12:dd47:f500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f5:f9:d2:da:45:66:9d:bd:41:e2:f2:7e:fe:fe:2c:9f:ac:4e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 05:18:17 2023 GMT
            Not After : Apr  6 05:23:17 2024 GMT
        Subject: CN=1A94AE8CD2DABEF08B7511C9F0FBC9CE9E2F20A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:6e:c3:14:ef:03:bb:69:b4:b3:c4:9c:8b:
                    46:33:9b:1b:03:24:99:4d:b1:64:1a:8a:8f:13:aa:
                    83:49:00:0e:73:77:ce:ce:66:14:6e:99:1d:66:93:
                    36:1d:40:9a:8a:b1:90:e3:93:b5:60:a5:c0:3e:9f:
                    df:c9:cf:41:62:6d:55:9a:26:62:bb:75:91:d4:76:
                    3b:ed:fa:8a:8f:47:46:8a:0e:25:8e:f5:2d:b0:eb:
                    85:c2:92:87:cb:50:00:1b:3e:5d:92:25:f8:8f:3b:
                    87:18:fe:78:98:29:4a:c6:d1:05:8c:1e:1f:b4:8e:
                    a9:51:76:31:79:cc:31:d9:df:12:46:c4:69:dd:b1:
                    81:f0:67:c4:f9:15:f1:51:c8:13:41:97:95:47:4f:
                    48:21:d1:d2:15:4c:7f:1b:64:35:b2:f7:91:4a:a1:
                    4c:92:53:1e:fc:c5:cc:dc:d1:de:70:1b:d8:14:74:
                    59:b4:ad:8a:ff:da:78:d9:45:a0:64:32:e6:bc:0f:
                    ac:63:06:84:04:fa:78:25:18:bc:41:ed:a2:e9:bf:
                    c5:ec:f7:30:fa:b3:e5:3a:50:0f:c7:82:80:3e:b9:
                    e9:08:1c:41:c6:99:5f:87:c3:bb:27:d7:56:b1:cd:
                    f5:67:c1:ca:bb:5a:7d:c3:cc:99:56:41:7e:ac:ff:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:94:AE:8C:D2:DA:BE:F0:8B:75:11:C9:F0:FB:C9:CE:9E:2F:20:A3
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a663530303a3a2f34302d3430203d3e20313939323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f500::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:08:d2:db:9a:91:21:75:59:d1:b5:bd:15:25:b8:94:2c:b7:
         cb:1c:eb:3a:77:2a:7a:59:06:09:ab:36:f0:e5:39:1a:8e:87:
         36:49:ac:64:a5:46:2d:5e:4d:5d:b7:a6:57:56:5e:1e:43:37:
         99:13:0b:b8:8a:cb:eb:4d:b1:11:b5:30:33:85:1e:1c:d3:2c:
         3d:9c:3b:af:59:72:ea:02:0c:bc:32:88:30:ac:97:dd:bc:34:
         9f:a3:c3:5a:4e:00:25:b7:a8:c1:9b:53:87:02:f5:fd:14:48:
         a4:a9:76:ed:c2:e3:be:cf:cc:cc:43:1c:7d:e1:9f:4a:d8:97:
         23:18:12:f4:8a:75:8d:9d:ca:f1:58:f9:1b:b7:1e:87:40:4a:
         c5:72:27:01:e7:87:4f:09:49:21:65:ca:ae:c6:0a:93:00:b7:
         76:15:4a:de:b5:23:e1:f9:90:c3:92:ba:71:46:5d:2e:17:db:
         33:97:bc:73:aa:9d:eb:8b:26:6a:37:f8:1c:87:0d:7b:6a:cc:
         a9:91:55:fb:16:ed:5d:63:74:8c:bd:15:fc:ec:5a:65:32:b3:
         ed:5e:a8:fc:4b:27:7e:ad:4d:0f:5c:a3:17:6d:b4:0c:3b:8b:
         ae:85:9b:dd:d3:79:3c:0d:18:10:30:7d:8f:e9:4d:5f:d0:cc:
         cd:eb:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----