Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa
File:                     326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa (raw, json)
Hash identifier:          9nbE8ioiYifH7jTv01cM7hJlzxeFceTS+QKhSIei7eo=
Subject key identifier:   3E:7A:8E:97:13:C9:31:2B:2A:71:6F:EB:61:C3:AC:38:5C:44:32:82
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       0575EDBA6F232CF823C3960C1EE8D724BF4C7B26
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa
Signing time:             Sat 08 Apr 2023 09:22:06 +0000
ROA not before:           Sat 08 Apr 2023 09:17:06 +0000
ROA not after:            Sat 06 Apr 2024 09:22:06 +0000
asID:                     59486
IP address blocks:        2a13:c000:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:75:ed:ba:6f:23:2c:f8:23:c3:96:0c:1e:e8:d7:24:bf:4c:7b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:06 2023 GMT
            Not After : Apr  6 09:22:06 2024 GMT
        Subject: CN=3E7A8E9713C9312B2A716FEB61C3AC385C443282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:5b:f7:83:46:1b:1c:2b:39:24:83:b3:4f:
                    10:a2:02:10:cc:95:57:40:c9:1b:8f:4b:ed:80:91:
                    bd:cf:83:80:ed:04:41:09:00:4e:ad:f3:ab:b5:ac:
                    14:18:96:4d:62:9b:18:74:4d:b3:b5:a1:6f:d0:73:
                    06:3b:d4:89:c4:43:7a:6d:c9:9d:81:20:ba:aa:14:
                    0b:5c:d5:58:09:ae:21:a7:64:c0:0e:a6:d4:ce:2e:
                    ae:b6:12:a5:ce:d4:07:9b:36:b9:a1:b6:31:a8:7f:
                    f4:a9:e8:05:ce:f5:05:13:be:02:92:1e:11:aa:ed:
                    ae:3f:d4:a9:cd:34:28:d6:3c:15:e8:ee:5d:f0:e3:
                    31:d6:e8:f5:0c:38:1d:fe:57:1f:3d:b1:98:85:76:
                    34:b2:9f:c2:35:e7:79:49:f8:b9:7f:8a:3f:1f:66:
                    ba:b2:e6:20:f1:42:0f:25:88:76:ca:04:49:cf:47:
                    5b:27:8f:38:4e:3c:2f:ba:38:e9:59:47:05:15:99:
                    ca:f7:34:c2:4d:3a:12:8f:af:57:af:b1:c1:eb:01:
                    df:a4:d0:8c:c4:2d:92:4a:c3:dd:50:71:73:48:ee:
                    24:fb:90:c4:52:aa:7a:ed:f1:0b:bc:17:2c:1f:43:
                    ab:66:0e:29:24:3d:62:8c:ac:02:c6:0c:2e:69:0d:
                    ba:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7A:8E:97:13:C9:31:2B:2A:71:6F:EB:61:C3:AC:38:5C:44:32:82
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030303a323030303a3a2f33362d3336203d3e203539343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         73:5a:27:da:ed:73:c5:57:7e:48:22:f2:f6:47:be:8f:25:3d:
         de:41:47:b5:a2:ca:7a:14:7c:c9:08:84:0e:ce:31:5d:24:d9:
         f0:2a:24:23:d6:5e:c8:0c:89:4d:69:9b:e1:ff:da:60:7a:c1:
         38:f2:61:83:b9:69:c7:fa:84:89:3a:d9:d8:13:00:a6:46:0c:
         da:f9:5c:7d:fe:00:e4:e3:6b:7c:a4:0f:14:7c:dc:e3:18:1d:
         79:a7:20:11:76:85:68:36:c6:2a:21:82:77:6f:be:fa:16:2a:
         75:50:b7:95:96:9b:ba:27:7f:81:98:13:66:f0:d2:e1:31:cb:
         96:d2:0b:0b:3b:d1:5f:8d:e7:d7:42:fd:ab:b7:99:64:98:4d:
         59:70:16:c7:57:5b:cb:18:99:95:67:9b:65:f9:f8:13:d1:c3:
         39:4a:e1:20:8c:9a:1b:c8:8a:d0:02:7e:c3:4b:85:13:0f:0a:
         0b:c6:47:a5:96:e6:05:ab:c6:2a:79:3d:80:2d:34:b6:b2:af:
         e9:e9:da:ef:da:d3:5d:9a:7f:1b:61:9d:d7:6c:7c:20:7c:29:
         15:19:7c:44:ca:c0:45:91:04:d1:b5:35:81:58:1e:6f:60:79:
         9b:a0:86:f0:e4:3c:c2:f7:b0:7f:3a:a6:2a:37:e7:92:c9:b6:
         62:2d:f4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----