Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030313a3a2f33322d3332203d3e20393435.roa
File:                     326131333a633030313a3a2f33322d3332203d3e20393435.roa (raw, json)
Hash identifier:          ajWfJvBvP7aVRevgGptTpamfWiEuSt1HxQQoD+v2z2c=
Subject key identifier:   48:BC:52:39:11:DD:DC:4E:34:FA:59:D9:F8:CA:F1:6C:06:8F:A5:A9
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       1202225782E7DB0A8ACED14ECCB84CEE5E7FD81E
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030313a3a2f33322d3332203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 09:22:02 +0000
ROA not before:           Sat 08 Apr 2023 09:17:02 +0000
ROA not after:            Sat 06 Apr 2024 09:22:02 +0000
asID:                     945
IP address blocks:        2a13:c001::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:02:22:57:82:e7:db:0a:8a:ce:d1:4e:cc:b8:4c:ee:5e:7f:d8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:02 2023 GMT
            Not After : Apr  6 09:22:02 2024 GMT
        Subject: CN=48BC523911DDDC4E34FA59D9F8CAF16C068FA5A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:cc:a4:03:c6:f5:c7:f6:ff:11:0a:1c:5f:
                    c9:9b:e0:fa:ae:9d:bb:bf:6b:9e:62:72:35:eb:94:
                    22:ff:81:90:9e:eb:59:c3:8a:20:1b:1d:34:f8:35:
                    f5:46:63:25:b4:94:27:2c:41:6c:65:d7:26:5f:cf:
                    44:c7:5e:3f:2d:91:ed:ba:50:bc:47:57:39:e1:bc:
                    d3:0c:70:ba:e7:70:c7:7b:83:1f:8c:bf:c5:77:11:
                    65:aa:cc:37:10:bf:6e:38:02:74:26:af:19:69:ad:
                    0f:7d:4c:dc:0b:11:d9:f4:3a:91:be:8c:03:be:31:
                    b8:9a:97:ab:cb:9f:89:c4:2f:91:c6:4e:bc:1e:f5:
                    1a:cd:e4:79:72:3a:1c:03:4e:71:10:ff:1b:9b:cb:
                    07:e7:99:e8:c8:7c:36:0a:58:e1:f8:80:5d:10:14:
                    cf:96:b0:71:9b:c7:87:88:d5:b3:f5:5d:62:ce:b3:
                    c6:45:c4:ce:7c:83:07:fd:e6:61:2f:40:fa:56:06:
                    8c:e6:e3:6c:23:c4:0b:fc:25:8b:41:b4:31:67:d9:
                    e4:b3:fd:44:52:6d:df:c3:8e:6f:64:6f:67:d0:71:
                    f4:a6:64:95:0e:1e:26:5e:53:4b:8e:50:e8:ac:1f:
                    e5:4a:65:6e:ed:c9:41:30:d0:05:6c:e2:91:d4:1e:
                    87:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BC:52:39:11:DD:DC:4E:34:FA:59:D9:F8:CA:F1:6C:06:8F:A5:A9
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030313a3a2f33322d3332203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c001::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:1f:df:d4:71:e7:b4:50:d6:7d:38:b8:62:e9:3e:10:3f:a3:
         05:a1:ba:27:12:55:56:5b:41:af:5d:3a:85:ff:02:1c:d7:10:
         88:30:f7:ab:ad:13:56:9c:42:bc:34:a9:2c:b3:3c:4c:d0:4e:
         26:85:d2:56:92:37:4a:cb:84:a0:7f:b9:32:a3:77:2e:23:cc:
         e3:00:e5:9c:06:de:26:6b:d9:f2:7f:e4:23:7e:63:93:51:17:
         b8:32:db:d8:35:72:99:cd:e2:81:f0:05:90:ac:3b:98:99:67:
         2e:d3:8b:c0:08:80:a0:39:88:96:dc:5d:1e:22:19:b0:ec:b9:
         87:69:fb:3e:7b:0d:da:85:a0:24:6b:29:ca:ba:42:0d:fc:ae:
         27:ef:ef:77:b6:f6:d4:0d:f5:17:0c:4d:d4:44:76:6f:53:b2:
         8e:85:52:c6:fa:82:30:d2:7f:45:cc:dc:79:6b:97:cb:6c:a2:
         f6:02:48:1e:6c:75:99:d0:26:31:85:8d:1d:e3:78:6c:0f:43:
         e3:6a:c5:00:b6:c8:3f:47:b3:07:ed:80:eb:0e:0f:3a:11:b4:
         13:ab:da:0d:bc:c0:f0:bf:24:b7:fb:c0:6d:a2:47:ae:bc:fe:
         df:7e:f2:39:69:6a:69:b7:35:00:4f:af:04:74:2b:ed:fb:f7:
         a5:de:c9:64
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIUEgIiV4Ln2wqKztFOzLhM7l5/2B4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0MzcxQURFMTNEQThFOTZCOTdBRkEwQ0YzREYzMDk0
QUFCMERCMDAeFw0yMzA0MDgwOTE3MDJaFw0yNDA0MDYwOTIyMDJaMDMxMTAvBgNV
BAMTKDQ4QkM1MjM5MTFERERDNEUzNEZBNTlEOUY4Q0FGMTZDMDY4RkE1QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6bsykA8b1x/b/EQocX8mb4Pqu
nbu/a55icjXrlCL/gZCe61nDiiAbHTT4NfVGYyW0lCcsQWxl1yZfz0THXj8tke26
ULxHVznhvNMMcLrncMd7gx+Mv8V3EWWqzDcQv244AnQmrxlprQ99TNwLEdn0OpG+
jAO+Mbial6vLn4nEL5HGTrwe9RrN5HlyOhwDTnEQ/xubywfnmejIfDYKWOH4gF0Q
FM+WsHGbx4eI1bP1XWLOs8ZFxM58gwf95mEvQPpWBozm42wjxAv8JYtBtDFn2eSz
/URSbd/Djm9kb2fQcfSmZJUOHiZeU0uOUOisH+VKZW7tyUEw0AVs4pHUHocjAgMB
AAGjggHEMIIBwDAdBgNVHQ4EFgQUSLxSORHd3E40+lnZ+MrxbAaPpakwHwYDVR0j
BBgwFoAUDUNxreE9qOlrl6+gzz3zCUqrDbAwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC85LzBENDM3
MUFERTEzREE4RTk2Qjk3QUZBMENGM0RGMzA5NEFBQjBEQjAuY3JsMGUGCCsGAQUF
BwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC8x
NC8wRDQzNzFBREUxM0RBOEU5NkI5N0FGQTBDRjNERjMwOTRBQUIwREIwLmNlcjBu
BggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJzeW5jOi8vcnBraS5jby9yZXBv
L0F1Z3VzdC85LzMyNjEzMTMzM2E2MzMwMzAzMTNhM2EyZjMzMzIyZDMzMzIyMDNk
M2UyMDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF
BQcBBwEB/wQRMA8wDQQCAAIwBwMFACoTwAEwDQYJKoZIhvcNAQELBQADggEBAGsf
39Rx57RQ1n04uGLpPhA/owWhuicSVVZbQa9dOoX/AhzXEIgw96utE1acQrw0qSyz
PEzQTiaF0laSN0rLhKB/uTKjdy4jzOMA5ZwG3iZr2fJ/5CN+Y5NRF7gy29g1cpnN
4oHwBZCsO5iZZy7Ti8AIgKA5iJbcXR4iGbDsuYdp+z57DdqFoCRrKcq6Qg38rifv
73e29tQN9RcMTdREdm9Tso6FUsb6gjDSf0XM3Hlrl8tsovYCSB5sdZnQJjGFjR3j
eGwPQ+NqxQC2yD9HswftgOsODzoRtBOr2g28wPC/JLf7wG2iR668/t9+8jlpamm3
NQBPrwR0K+3796XeyWQ=
-----END CERTIFICATE-----