Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a666130303a3a2f34302d3438203d3e20323038363930.roa
File:                     326131323a646434373a666130303a3a2f34302d3438203d3e20323038363930.roa (raw, json)
Hash identifier:          imxTheHrd/QmmrOjuJuVSd/R2kzJf/rxuQ4JFkGfD/I=
Subject key identifier:   C1:D2:F8:F4:14:B9:69:F4:AC:29:14:24:31:8A:62:AA:1F:88:61:3C
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       2C9F414E413B7318BE491B7BC4790B3FC86074FB
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a666130303a3a2f34302d3438203d3e20323038363930.roa
Signing time:             Sat 08 Apr 2023 04:53:52 +0000
ROA not before:           Sat 08 Apr 2023 04:48:52 +0000
ROA not after:            Sat 06 Apr 2024 04:53:52 +0000
asID:                     208690
IP address blocks:        2a12:dd47:fa00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9f:41:4e:41:3b:73:18:be:49:1b:7b:c4:79:0b:3f:c8:60:74:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:48:52 2023 GMT
            Not After : Apr  6 04:53:52 2024 GMT
        Subject: CN=C1D2F8F414B969F4AC291424318A62AA1F88613C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:cf:4a:d3:20:98:0e:8c:c3:86:57:fc:33:
                    84:d8:63:0b:08:9f:8b:d7:c0:0d:4b:e6:bf:b3:dc:
                    31:f1:b7:7d:d1:15:19:b4:c1:34:77:16:ac:b7:ee:
                    e0:19:df:9d:1b:2e:1e:1a:ca:ac:67:32:26:da:24:
                    98:3b:5a:cd:46:bd:d9:c7:45:65:9f:ae:fe:7f:30:
                    25:2c:4c:11:59:09:69:f2:38:8d:52:c7:06:8a:1a:
                    a1:6b:2a:5c:f3:5b:14:e7:5c:21:2f:b5:81:ff:c7:
                    3f:e6:7f:77:42:68:8b:cc:c2:eb:15:d8:0e:38:22:
                    8d:96:88:72:d0:bf:69:17:66:0f:72:1b:9b:b9:72:
                    4e:c9:3a:aa:04:8e:29:b6:50:c6:5e:15:9f:59:1e:
                    06:cf:c5:29:d0:39:fe:f5:be:41:16:9d:7d:c0:e8:
                    56:ed:83:ce:e2:c1:b0:3d:49:89:de:9f:64:36:70:
                    fb:3c:0d:a1:0c:55:d8:a7:da:25:4e:2d:db:2f:5b:
                    fa:ea:79:26:b0:13:64:36:74:58:ff:c3:26:b7:87:
                    08:7d:64:74:dc:27:ec:b3:0a:0f:73:77:58:69:1e:
                    52:10:cf:f6:03:12:22:2a:80:1c:16:8b:15:d1:0b:
                    b3:76:13:64:cf:20:5d:81:6f:cd:c2:a8:33:5e:c3:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D2:F8:F4:14:B9:69:F4:AC:29:14:24:31:8A:62:AA:1F:88:61:3C
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a666130303a3a2f34302d3438203d3e20323038363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:7d:ca:f6:39:96:3f:8e:e9:cd:0c:7c:2a:1a:50:49:93:80:
         ab:3e:4e:6b:6f:91:16:c2:a5:47:6f:b5:4e:5e:ac:4f:32:22:
         7b:60:fa:6f:3c:c1:7d:5d:6d:36:8d:9f:d4:0d:1c:c5:c4:55:
         5a:90:5b:86:23:4b:cd:d8:2b:c4:b7:e8:96:05:f4:0d:73:77:
         be:4a:79:fd:2f:46:2e:5b:91:31:ce:ce:c0:5e:d2:0e:7c:04:
         ab:2e:ce:cd:48:f5:52:48:ac:7b:08:8e:60:ea:04:1b:9d:b3:
         3f:09:f3:02:68:70:78:49:3f:96:7b:39:6f:40:2e:01:08:65:
         1a:31:d4:4c:3a:41:8f:42:b1:55:78:65:0d:60:e7:96:8b:c7:
         f4:9f:65:27:f6:39:c2:3d:d1:03:8d:27:eb:00:e1:1a:74:33:
         06:8c:ec:20:9e:81:ec:3d:0b:cc:9a:eb:b8:8b:a1:6a:81:7d:
         ca:54:ea:93:6f:03:f4:63:ec:1b:81:c3:32:58:b3:44:a7:70:
         1c:ef:61:72:47:c5:7a:fc:9a:08:e3:41:41:e1:5e:f4:74:7b:
         a7:5a:45:2d:dc:69:bd:83:36:e6:dc:6e:ca:e2:7d:31:7c:45:
         34:4b:aa:13:8c:0f:d5:59:99:2a:e8:65:af:6b:e1:92:32:23:
         a3:26:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----