Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a663630303a3a2f34302d3438203d3e20323131333930.roa
File:                     326131323a646434373a663630303a3a2f34302d3438203d3e20323131333930.roa (raw, json)
Hash identifier:          UxWTADwkqwZLpTbwH7IQrLA7IIDjlx5TSmytJ7cyz70=
Subject key identifier:   2B:72:69:49:BA:74:3B:8B:01:1C:89:A5:C2:A5:E8:65:F2:C4:84:25
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       1142797EE3E68C691BBD9B854A988A581A94D92D
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a663630303a3a2f34302d3438203d3e20323131333930.roa
Signing time:             Sat 08 Apr 2023 05:00:59 +0000
ROA not before:           Sat 08 Apr 2023 04:55:59 +0000
ROA not after:            Sat 06 Apr 2024 05:00:59 +0000
asID:                     211390
IP address blocks:        2a12:dd47:f600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:42:79:7e:e3:e6:8c:69:1b:bd:9b:85:4a:98:8a:58:1a:94:d9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:55:59 2023 GMT
            Not After : Apr  6 05:00:59 2024 GMT
        Subject: CN=2B726949BA743B8B011C89A5C2A5E865F2C48425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:ea:54:54:f0:c7:7c:c6:27:23:e1:11:bf:
                    62:bc:d8:20:03:2a:47:63:fc:46:58:f0:e4:33:c6:
                    1f:d3:45:f9:53:22:c0:0b:be:09:8b:de:e7:9a:fc:
                    26:58:f7:6a:19:49:ed:d7:ae:af:77:4a:44:e5:e6:
                    bf:53:33:5c:a4:45:66:a1:69:76:b2:8f:df:a8:03:
                    01:27:ea:85:f0:70:c6:46:45:45:62:98:11:22:5a:
                    31:f5:e3:b6:b5:73:ed:44:f9:39:06:e9:9b:70:93:
                    02:3c:5f:1c:53:c4:13:9c:e1:e5:70:03:46:9c:7d:
                    61:e3:9f:49:ca:90:f3:3e:59:e2:cf:34:42:fd:28:
                    bc:0b:6a:9a:78:5f:78:8e:a6:12:26:ea:df:d1:71:
                    c6:11:47:91:09:1f:b3:1b:31:3c:bb:a2:df:4e:c8:
                    8a:3a:9d:f0:91:fe:73:f6:1e:2a:57:cf:a9:51:ee:
                    ab:d1:9a:ba:29:e2:37:d0:ad:f3:fe:0a:a9:58:cb:
                    6e:82:b7:b3:6a:ac:10:4e:df:74:03:33:14:ff:4e:
                    0a:92:bd:d8:ca:e3:fa:b7:38:06:c6:da:33:d0:aa:
                    4a:1b:64:c5:1c:3d:66:7b:44:aa:8b:7c:4b:95:46:
                    14:bc:40:ad:8b:88:e3:3b:56:2d:85:b7:dd:e5:5f:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:72:69:49:BA:74:3B:8B:01:1C:89:A5:C2:A5:E8:65:F2:C4:84:25
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a663630303a3a2f34302d3438203d3e20323131333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f600::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:59:3e:b9:bd:56:25:97:69:2a:95:f2:d8:ca:eb:ac:59:c3:
         fd:65:80:98:9a:74:cf:c6:c9:31:ce:ee:b5:e6:54:44:9e:66:
         f2:0d:35:7e:a6:42:e5:5f:4b:9b:10:2b:58:c6:bf:76:5c:f6:
         63:88:8c:7e:8d:5d:d0:53:6f:fa:28:40:30:92:17:2d:f7:bf:
         83:2c:db:c5:dc:ff:5f:08:89:68:ae:ed:e0:c0:af:33:19:25:
         ce:c7:b5:4a:a5:6f:69:a2:47:85:2d:f4:01:5f:63:ad:f8:50:
         20:b3:41:6d:e7:cc:28:21:d3:f3:01:be:86:e6:0a:b8:01:08:
         db:97:06:5d:f4:cf:32:eb:8e:83:d3:57:6d:c4:34:93:a5:88:
         ad:c2:52:53:80:d3:7a:42:4e:2d:e4:7a:ce:52:0d:48:89:31:
         ac:b0:13:9a:3e:7a:04:e7:73:73:77:58:f9:63:43:5f:2e:66:
         62:dd:9b:9f:e3:fa:06:dd:af:34:ac:ac:88:06:17:54:9c:5b:
         7e:c1:79:40:85:79:7c:a0:fa:9d:ec:7d:4d:fa:4b:89:62:77:
         08:ee:40:34:59:26:82:34:87:23:05:e8:05:a9:1c:47:2b:46:
         d0:81:14:31:89:70:a2:22:3a:1a:ab:0a:6f:92:83:a5:f4:6e:
         8d:11:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----