Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/7/32332e3133392e34302e302f32332d3233203d3e203530303538.roa
File:                     32332e3133392e34302e302f32332d3233203d3e203530303538.roa (raw, json)
Hash identifier:          uWidSLs5Q2XnJ+L4YQVxGzSWqWtO3IN4mynkJIDoQRU=
Subject key identifier:   9E:D4:A2:2E:F8:5C:88:06:33:A2:13:24:0A:E3:05:23:0F:F1:49:25
Certificate issuer:       /CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
Certificate serial:       5C2270F3755E14D1A7FEE8636D43F14DB80C113D
Authority key identifier: 21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0
Authority info access:    rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer
Subject info access:      rsync://rpki.co/repo/August/7/32332e3133392e34302e302f32332d3233203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 09:22:01 +0000
ROA not before:           Sat 08 Apr 2023 09:17:01 +0000
ROA not after:            Sat 06 Apr 2024 09:22:01 +0000
asID:                     50058
IP address blocks:        23.139.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:22:70:f3:75:5e:14:d1:a7:fe:e8:63:6d:43:f1:4d:b8:0c:11:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
        Validity
            Not Before: Apr  8 09:17:01 2023 GMT
            Not After : Apr  6 09:22:01 2024 GMT
        Subject: CN=9ED4A22EF85C880633A213240AE305230FF14925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:87:72:89:8c:c8:37:7c:35:ab:c7:f6:02:71:
                    fd:60:f5:e5:80:bd:b2:e7:35:ab:88:21:6c:d0:e4:
                    35:5d:d7:59:b7:f0:48:9e:00:e2:0c:9c:72:be:1d:
                    98:9b:97:01:0b:90:34:e0:47:c2:e5:20:79:61:4d:
                    95:70:0b:78:7c:5e:4a:9a:98:a9:78:ce:cd:7d:24:
                    6f:c8:b1:89:45:14:3a:35:78:34:75:1f:4e:ca:06:
                    d0:20:32:7b:26:02:43:b1:a0:4a:e8:90:f9:b0:76:
                    9c:11:7e:00:cf:81:ff:6b:f6:4e:7f:34:c4:04:97:
                    2b:8e:07:8a:54:61:16:2c:13:1a:34:91:78:69:67:
                    aa:a7:8d:8e:48:91:fd:1f:5c:7a:50:e1:fa:30:4f:
                    c1:55:32:b8:5d:0c:b8:80:78:6e:2c:8a:92:f6:61:
                    4f:6a:ae:a0:1f:98:92:50:65:b5:2f:c3:4f:fe:69:
                    e7:00:0b:74:00:3d:2e:cb:69:fe:ba:44:6e:c1:c5:
                    ce:1d:d5:9a:13:a2:a4:a6:e2:e0:a3:fa:f9:c1:36:
                    32:95:c8:32:06:c5:dc:04:81:23:b8:03:f6:cc:55:
                    4d:a5:58:cc:7e:4f:78:37:80:35:e0:bc:79:e6:eb:
                    1c:4d:c7:ec:cf:2b:95:b3:dc:19:58:91:a8:c5:4f:
                    44:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D4:A2:2E:F8:5C:88:06:33:A2:13:24:0A:E3:05:23:0F:F1:49:25
            X509v3 Authority Key Identifier:
                keyid:21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/7/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/7/32332e3133392e34302e302f32332d3233203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e2:fa:19:7c:c1:de:29:7b:59:a4:f8:d3:84:fd:85:2a:7c:24:
         da:58:4e:28:8d:a7:10:8c:3a:5b:36:bc:f0:d2:a3:ea:c1:c4:
         22:1b:ba:1b:b0:05:fc:c6:c4:99:d4:b9:a7:01:03:9b:d2:97:
         a5:16:ef:91:b1:24:90:e8:e8:fb:3b:5c:bf:88:ad:b5:a6:f8:
         f1:bc:2d:1e:a5:01:64:4f:1a:b3:84:02:62:1f:56:8d:77:b2:
         6c:38:86:16:1d:f9:fb:73:2d:39:de:ed:ac:eb:a9:f2:50:46:
         93:42:68:ef:4d:9b:82:cf:94:3b:41:e5:ce:2d:69:e8:aa:ee:
         05:e5:c6:e9:10:67:31:c5:1a:58:4e:97:c6:21:0e:df:3a:4f:
         e7:b1:f2:1b:89:6d:20:3d:60:5c:09:89:fb:18:f9:ab:ee:2b:
         b1:2f:73:87:a5:1c:f0:51:0f:35:7c:1c:6f:b9:f9:fb:1c:e4:
         a0:1f:86:9c:6b:35:71:ad:6e:58:e5:40:c3:ed:c8:0c:ab:15:
         f8:9c:9e:ad:d2:4b:35:0a:24:04:3f:d6:e0:a9:79:6d:28:11:
         20:e5:f9:31:30:07:64:bf:14:b6:f5:eb:01:6b:9e:39:1f:bb:
         06:ac:0f:4b:e8:6a:81:a5:e8:42:1b:6b:4e:89:3b:ec:3f:22:
         41:c8:ab:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----