Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa
File:                     326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa (raw, json)
Hash identifier:          BsoO6EqEV6DMmPOOoeDIVJK6AbUeCdu18EUWNhUNt/g=
Subject key identifier:   7A:0E:1C:67:31:88:B3:3D:A1:BC:44:7E:8A:19:20:11:70:CC:7B:B3
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       721F2EDAF1147B17FFD5F6B69BB82DFF48958AB7
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa
Signing time:             Sat 08 Apr 2023 09:22:05 +0000
ROA not before:           Sat 08 Apr 2023 09:17:05 +0000
ROA not after:            Sat 06 Apr 2024 09:22:05 +0000
asID:                     7719
IP address blocks:        2a13:c000:2000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1f:2e:da:f1:14:7b:17:ff:d5:f6:b6:9b:b8:2d:ff:48:95:8a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:05 2023 GMT
            Not After : Apr  6 09:22:05 2024 GMT
        Subject: CN=7A0E1C673188B33DA1BC447E8A19201170CC7BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:10:58:75:79:0a:2c:5b:da:13:f0:c5:bb:
                    39:25:61:97:a7:c3:33:82:c3:c9:c5:84:07:d5:cc:
                    92:d8:a1:92:18:5c:92:cf:29:35:02:d2:6d:f6:68:
                    b5:62:20:84:55:48:d6:13:67:50:58:ad:b3:a2:31:
                    d3:8b:aa:b1:9d:97:6b:9f:a3:74:dc:92:cf:1b:ee:
                    90:b6:5e:61:ad:3d:ad:5a:4a:0a:cb:fc:3f:72:7a:
                    6a:07:72:11:d7:4d:85:fd:3a:f1:6a:45:77:00:f8:
                    7e:e6:ea:b6:04:47:c4:88:d4:59:7d:04:31:d2:ec:
                    df:15:c6:3c:21:5b:3d:a2:9a:35:5a:6b:1b:6a:49:
                    82:f2:30:ba:fd:3e:6b:62:26:b1:61:f6:98:3b:5b:
                    51:09:d9:4a:72:9b:40:2b:61:bb:7a:ce:f5:0d:50:
                    39:0b:8a:03:cd:71:58:5f:51:5a:57:de:1e:bd:6b:
                    4f:01:13:1d:bb:7c:bb:3f:7c:cf:88:b5:e4:06:f9:
                    aa:32:9c:b0:57:7e:d2:c7:0b:9b:42:b3:85:90:c1:
                    53:33:8c:d4:f9:b4:43:3e:81:b6:5b:84:35:35:45:
                    ff:cf:de:b4:fb:34:98:f7:71:2e:09:98:41:38:c9:
                    da:79:d7:cd:8a:4c:ab:3b:f4:5d:c1:a4:8b:df:5e:
                    f9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0E:1C:67:31:88:B3:3D:A1:BC:44:7E:8A:19:20:11:70:CC:7B:B3
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:2d:bc:9f:61:9a:fe:ed:56:85:74:ea:e1:4a:78:71:e7:
         e3:c1:c7:81:0e:3c:1e:7e:21:e7:39:35:d2:46:46:37:8a:8a:
         4f:21:fe:76:07:17:13:8c:50:ed:d1:50:a5:ad:98:ec:0a:cc:
         ae:fa:ed:76:aa:bb:16:39:ad:5f:a3:19:a0:ec:0e:7e:2c:41:
         1d:08:f1:a0:31:f7:b4:25:51:da:d5:5a:fe:b1:2b:13:f4:64:
         97:a6:37:03:be:fd:21:ad:e7:b0:02:ca:1f:54:b2:2f:c9:12:
         01:22:d4:0d:84:26:b7:9a:e4:5f:9b:97:20:78:9f:33:27:e8:
         61:54:f0:53:1c:96:d3:b5:11:4e:18:c1:00:d6:60:0d:ce:65:
         d0:7e:fc:aa:b8:68:49:f0:ae:50:05:80:87:32:c9:3d:14:6d:
         72:98:09:47:5c:9c:6d:fc:93:e8:91:55:93:b1:8e:13:10:37:
         7b:01:39:2a:26:e4:2e:3c:eb:d5:43:de:86:98:6a:43:d1:48:
         a0:6a:e4:61:ed:e1:0c:03:2f:b0:9b:16:ec:22:99:7a:6c:18:
         41:83:ef:5d:64:98:a7:7c:1d:66:82:81:2b:dd:46:59:10:5e:
         5d:13:1d:4f:b5:07:1a:f1:19:f1:bc:a9:a5:65:00:27:c7:cd:
         eb:1a:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----