Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa
File:                     326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          lgT94Geq20MwiAXwctCUxzcv8xFZRp7OqyRUx736PhQ=
Subject key identifier:   F1:47:B0:91:50:02:AE:04:74:24:78:96:EC:B8:77:24:B7:B5:57:74
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       37E65E5E1BA2C4E25CAD2154B3409B0317435BE5
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 09:22:04 +0000
ROA not before:           Sat 08 Apr 2023 09:17:04 +0000
ROA not after:            Sat 06 Apr 2024 09:22:04 +0000
asID:                     945
IP address blocks:        2a13:c000:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e6:5e:5e:1b:a2:c4:e2:5c:ad:21:54:b3:40:9b:03:17:43:5b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:04 2023 GMT
            Not After : Apr  6 09:22:04 2024 GMT
        Subject: CN=F147B0915002AE0474247896ECB87724B7B55774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:65:bb:3e:b5:e7:d3:9d:11:8c:20:ad:c1:
                    54:24:5c:3f:d0:53:0c:04:be:56:28:a8:80:61:20:
                    dc:0b:07:45:76:91:34:73:22:35:9b:a4:38:58:79:
                    a3:0b:cb:a8:86:72:86:cb:46:d5:6f:6b:08:59:20:
                    db:09:7a:49:98:53:6c:c4:b2:00:41:90:7d:e3:cd:
                    02:72:0a:03:f2:52:aa:3d:e1:2d:74:89:f6:33:5e:
                    b9:f9:b3:0e:76:bc:bb:91:7f:8f:62:0b:62:c9:ac:
                    80:21:38:7c:a4:66:b7:d1:1e:f2:fb:7e:7c:05:91:
                    38:68:24:4b:5d:3b:ae:87:72:08:e3:bd:fb:a1:2e:
                    88:df:2b:bb:c5:e1:07:d8:83:5d:7b:d1:12:c1:c7:
                    c6:41:11:9a:c1:87:ef:e1:ae:dc:31:8d:9c:96:22:
                    a0:a6:9f:33:df:70:ca:d6:8b:3f:19:32:3f:62:c1:
                    ce:e1:e2:dd:58:a0:cc:28:17:ca:84:3c:fc:2b:83:
                    5c:07:75:ef:61:5e:6a:91:f5:a1:98:c0:77:ad:ed:
                    e6:39:00:f5:87:90:c7:49:73:1c:f5:b1:39:2d:12:
                    37:d5:78:14:94:dd:c2:55:20:7b:44:0b:c1:59:f5:
                    24:30:c5:e5:cf:6f:3d:22:3b:df:6e:4f:02:81:9e:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:47:B0:91:50:02:AE:04:74:24:78:96:EC:B8:77:24:B7:B5:57:74
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030303a313030303a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:3c:05:c6:24:b5:50:6f:de:1a:c6:5d:a9:d7:9b:35:88:
         84:b8:a3:98:94:82:04:c1:74:fe:d6:c3:04:64:59:6a:4b:57:
         32:c4:3d:90:2f:1c:9d:d0:d3:f9:cc:1e:1c:4c:cb:4b:7d:71:
         5a:5e:d8:54:cb:4f:7a:2a:12:20:84:94:d8:86:50:96:ef:da:
         ad:a4:53:f5:49:40:af:de:ca:38:b2:12:a4:4a:22:3b:77:b8:
         56:ef:c9:fd:ce:7f:33:e6:90:b4:bd:7d:8a:77:2f:40:6f:cf:
         c2:21:f3:f8:55:f1:18:51:73:ee:05:85:7f:ce:c4:62:cd:71:
         e8:42:2e:32:73:82:76:5d:39:91:01:a8:cc:c0:99:4e:6d:f1:
         46:2b:f7:08:f8:5f:1c:07:98:03:6c:03:2a:1b:2b:bc:b2:dd:
         ab:87:00:27:e1:5a:6d:4c:af:c8:d9:22:88:5b:4f:4e:da:e7:
         84:75:00:15:15:95:2f:6f:36:b7:44:30:11:15:6b:cd:3b:31:
         88:aa:43:b8:5d:a4:56:8e:be:96:e0:b3:c2:ca:26:f0:9b:f9:
         75:93:20:9c:21:d3:86:5c:79:5e:e0:e8:6e:cd:5e:74:ec:37:
         98:d6:c3:9a:fa:6b:90:14:7b:9e:14:46:c1:99:73:c2:3b:50:
         68:23:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----