Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030303a3a2f32392d3239203d3e203530303538.roa
File:                     326131333a633030303a3a2f32392d3239203d3e203530303538.roa (raw, json)
Hash identifier:          auYz53dTHxu9fKWtkhEXBHiPuYAzqg11OuIkw6WLshc=
Subject key identifier:   EC:2F:BC:15:69:5E:1D:9D:F4:C3:3A:D4:30:42:F4:EF:22:F6:E9:19
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       640B1F72E162C4DB406727F7D592AA5A959523D5
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030303a3a2f32392d3239203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 09:22:06 +0000
ROA not before:           Sat 08 Apr 2023 09:17:06 +0000
ROA not after:            Sat 06 Apr 2024 09:22:06 +0000
asID:                     50058
IP address blocks:        2a13:c000::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0b:1f:72:e1:62:c4:db:40:67:27:f7:d5:92:aa:5a:95:95:23:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:06 2023 GMT
            Not After : Apr  6 09:22:06 2024 GMT
        Subject: CN=EC2FBC15695E1D9DF4C33AD43042F4EF22F6E919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:ed:1f:ea:d9:36:12:a7:41:ae:b9:1b:5f:
                    07:50:f2:c7:61:10:3b:d0:b8:55:c0:4e:0e:1e:cf:
                    73:5b:96:7e:74:50:23:87:e7:17:44:d5:b4:c0:8b:
                    12:21:6c:84:c7:b2:17:3c:1c:9d:dc:4e:9e:a5:50:
                    9a:97:b9:12:cc:3d:34:7e:d8:04:54:5a:89:7b:d6:
                    94:86:ad:e0:35:b3:dc:df:fb:10:d2:5c:05:e5:db:
                    9b:04:c6:78:aa:53:45:3a:a7:2a:c5:b3:6f:f4:45:
                    08:80:8e:ad:8b:14:15:2a:9a:c8:bf:c0:cc:1d:44:
                    5f:e7:8f:77:53:02:53:02:3d:74:cc:92:59:39:cd:
                    87:8c:f4:c9:f4:20:a3:23:47:dc:ad:6c:4c:d2:8c:
                    51:91:b3:00:03:41:55:2c:12:b6:e9:3b:ae:52:a7:
                    ad:41:bc:dc:ce:ca:02:cc:cd:84:5c:99:74:e0:33:
                    2b:e5:bb:bd:f9:3f:a1:83:33:34:b9:0d:8d:28:d9:
                    72:f3:d0:2a:3a:18:cd:e9:63:9c:3a:c3:cc:f3:27:
                    2c:8d:42:61:ea:8a:cd:bd:97:43:51:69:72:a4:d1:
                    e8:06:2e:88:ef:fb:10:b3:6b:73:1a:0b:ec:6f:c7:
                    e4:64:2e:2c:3c:05:7d:a1:a9:b0:a1:e3:aa:d0:b2:
                    f0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2F:BC:15:69:5E:1D:9D:F4:C3:3A:D4:30:42:F4:EF:22:F6:E9:19
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030303a3a2f32392d3239203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000::/29

    Signature Algorithm: sha256WithRSAEncryption
         64:bb:c7:a8:77:bb:dc:d6:4a:8b:ca:cd:10:cb:2d:85:31:54:
         87:a1:ca:77:db:4f:19:e2:ef:ef:dd:6a:32:96:78:a6:34:a5:
         b0:0c:1d:11:51:92:f5:de:c8:ec:d3:b1:90:29:61:95:7b:94:
         a0:49:8d:b4:35:49:cf:08:11:7f:ea:4f:e1:9e:0c:2f:c5:16:
         3c:a6:52:4f:91:28:54:ae:d1:4b:2c:a4:cc:18:29:e6:06:aa:
         0b:21:1a:31:7e:88:f6:1c:98:35:bb:f7:05:a1:8b:0a:02:7b:
         ef:19:89:4f:3c:d5:bd:59:4b:bd:76:88:70:75:e3:60:c0:9e:
         b5:13:6b:26:31:8c:fe:5f:28:4b:48:d5:c0:aa:00:e2:f8:fd:
         b1:c6:2a:71:c2:54:72:eb:f3:4c:49:1c:c3:db:6e:92:00:7f:
         1d:88:c1:ce:5f:2b:f3:1a:7e:89:c6:7a:40:b0:78:b9:ad:9b:
         dd:4b:29:b4:68:3d:8e:a3:18:89:cf:90:e2:a2:9a:f8:08:69:
         b3:60:7a:91:88:f9:7a:88:6b:8e:57:ed:3e:33:38:31:cd:8b:
         46:3f:8c:bc:31:d0:dc:92:dd:cf:0e:0e:2a:70:cc:97:d8:0a:
         c9:3e:fb:c2:50:a3:4f:4c:c9:cb:cb:4f:65:fe:2c:34:db:82:
         ee:18:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----