Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/7/323630323a666234343a3130303a3a2f34302d3430203d3e2031303132.roa
File:                     323630323a666234343a3130303a3a2f34302d3430203d3e2031303132.roa (raw, json)
Hash identifier:          QPOVfMpgZlLxynx7rOEYATzLBGoPHyfZ28bLxUYlTJI=
Subject key identifier:   5F:96:82:FE:E7:08:B7:C6:0D:18:4A:5C:71:AA:EB:81:18:BB:F1:61
Certificate issuer:       /CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
Certificate serial:       3474D0233D2790A4BE055905B9D2EABC552067B4
Authority key identifier: 21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0
Authority info access:    rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer
Subject info access:      rsync://rpki.co/repo/August/7/323630323a666234343a3130303a3a2f34302d3430203d3e2031303132.roa
Signing time:             Sat 08 Apr 2023 09:22:02 +0000
ROA not before:           Sat 08 Apr 2023 09:17:02 +0000
ROA not after:            Sat 06 Apr 2024 09:22:02 +0000
asID:                     1012
IP address blocks:        2602:fb44:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:74:d0:23:3d:27:90:a4:be:05:59:05:b9:d2:ea:bc:55:20:67:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21802A9A6615773EE6DEA95FFEFCC4F40E7994F0
        Validity
            Not Before: Apr  8 09:17:02 2023 GMT
            Not After : Apr  6 09:22:02 2024 GMT
        Subject: CN=5F9682FEE708B7C60D184A5C71AAEB8118BBF161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:65:69:76:6e:f2:f6:66:eb:28:73:74:ed:
                    ad:04:d7:22:25:0b:3f:84:ef:d1:65:4c:0b:42:ac:
                    f7:29:cc:2a:28:8b:f2:bf:cc:60:4c:d8:6c:26:a1:
                    46:72:09:27:55:fa:95:76:73:c6:0f:1d:dd:8f:25:
                    d6:ef:7e:97:13:12:c1:96:a8:78:b9:09:0f:e6:e2:
                    e1:4b:95:72:72:c9:c8:53:2b:95:9f:58:a6:3e:3f:
                    74:91:8e:53:a7:28:05:f0:47:e1:33:84:2c:34:28:
                    fc:96:6e:0e:23:88:dd:8a:14:44:50:ed:ce:24:45:
                    ba:82:78:d0:d2:46:2e:41:f4:e2:61:a8:a6:16:0e:
                    a5:34:7b:46:68:03:78:8c:51:1e:48:96:63:ff:14:
                    f6:84:57:1b:20:ff:4a:d2:b9:f2:90:c7:83:2d:29:
                    e1:2f:d5:29:6f:bb:8b:4f:f3:f3:22:77:05:6c:79:
                    5d:32:f1:17:59:a1:96:3d:d8:6c:44:d6:b3:1f:bd:
                    23:15:2a:83:92:46:3a:33:cb:93:fa:c4:d3:12:d1:
                    e8:a3:97:f0:62:20:ea:1b:e8:a3:62:43:7a:7e:6e:
                    28:25:70:2a:2a:0b:59:2c:05:fc:33:43:15:25:90:
                    87:c9:fe:1c:df:6e:ec:73:c1:80:bf:3e:81:c6:5d:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:96:82:FE:E7:08:B7:C6:0D:18:4A:5C:71:AA:EB:81:18:BB:F1:61
            X509v3 Authority Key Identifier:
                keyid:21:80:2A:9A:66:15:77:3E:E6:DE:A9:5F:FE:FC:C4:F4:0E:79:94:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/7/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/10/21802A9A6615773EE6DEA95FFEFCC4F40E7994F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/7/323630323a666234343a3130303a3a2f34302d3430203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb44:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:4a:75:a7:13:54:69:36:7f:12:c9:18:97:85:68:dc:2d:89:
         d6:87:ab:ad:d0:96:26:0e:74:9e:97:29:3b:1f:69:ea:67:45:
         58:7c:7f:74:b8:19:d9:ad:02:1f:cf:fb:c8:f1:67:34:ec:d9:
         b7:28:91:93:95:f4:ba:f5:b8:a5:e4:bb:aa:bb:f2:40:2d:60:
         28:e4:12:c1:ad:a7:31:93:82:38:31:fa:26:7b:90:01:a8:73:
         49:e9:92:ae:5d:bd:bd:1c:53:35:a0:86:56:fd:b4:89:bf:5e:
         40:7c:4f:4d:32:31:b5:22:90:b1:40:f2:3e:1d:d3:9a:25:0b:
         c3:ce:af:42:f9:20:3a:ac:50:86:cb:b7:8e:ea:d5:3d:a0:ff:
         fb:ba:62:d9:44:86:80:7e:c2:d6:17:98:26:e6:33:eb:d8:86:
         3d:fc:bb:5f:4b:34:29:db:1d:49:ef:40:dc:06:e8:ec:29:5d:
         19:e1:cc:23:ab:12:47:9a:2a:e8:62:14:1a:4a:87:44:95:33:
         ab:f1:41:07:6b:43:d5:a9:d3:ad:ae:f6:b9:29:58:03:30:81:
         d9:90:5f:d5:c2:a6:c3:05:a5:9b:f3:06:2f:51:92:79:a9:13:
         3a:51:24:bb:be:e3:42:8d:a5:18:64:3a:2c:a8:59:1a:96:08:
         aa:36:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----