Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030323a3a2f33312d3331203d3e20393435.roa
File:                     326131333a633030323a3a2f33312d3331203d3e20393435.roa (raw, json)
Hash identifier:          Lk1iIRgEVdi7gzVPj9IMDWfgRXAYvZOmHLhV6dMXpe8=
Subject key identifier:   3F:89:D1:DF:DA:05:8B:0E:1D:3B:95:66:BD:1A:7F:A8:AB:CE:00:26
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       069B85771584BB30E4D82428A8D2DFA4EF45EBBD
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030323a3a2f33312d3331203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 09:22:06 +0000
ROA not before:           Sat 08 Apr 2023 09:17:06 +0000
ROA not after:            Sat 06 Apr 2024 09:22:06 +0000
asID:                     945
IP address blocks:        2a13:c002::/31 maxlen: 31

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9b:85:77:15:84:bb:30:e4:d8:24:28:a8:d2:df:a4:ef:45:eb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:06 2023 GMT
            Not After : Apr  6 09:22:06 2024 GMT
        Subject: CN=3F89D1DFDA058B0E1D3B9566BD1A7FA8ABCE0026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:6f:43:15:ad:87:b8:45:0e:4a:6c:60:60:
                    2e:e9:ed:cc:29:b4:c8:37:83:15:bb:52:03:8a:90:
                    35:a3:08:a8:d7:87:4f:42:0f:b8:8f:f5:f8:96:47:
                    c8:00:2d:b0:6f:2a:2c:8a:fe:b9:ae:7a:ce:b9:58:
                    ba:d4:96:e2:aa:2b:b6:20:81:b8:36:4e:69:98:d2:
                    6f:f9:50:a9:09:dc:57:e2:00:3a:86:46:ad:e2:bf:
                    8b:d6:5e:b4:2c:9f:3d:8d:28:99:88:ec:48:3e:ae:
                    57:1e:43:16:06:c7:e8:a5:f7:b2:00:8b:98:0d:55:
                    e7:bd:1d:a2:d9:3d:31:fa:b6:a6:b2:30:35:75:a6:
                    1c:f7:76:b1:f5:2d:b1:fb:36:09:6c:df:c4:ae:2a:
                    8f:63:2a:b2:48:ac:37:8e:d5:e1:5c:96:45:3d:25:
                    83:10:5c:1e:b3:93:40:10:78:a0:9c:ea:70:b9:da:
                    82:5d:a2:6d:79:36:e4:8b:fc:7a:6d:c5:f8:d0:64:
                    d2:cb:19:ec:5a:dd:72:c5:97:a9:a4:35:4f:f3:6c:
                    8b:62:33:67:8a:e3:87:12:31:53:23:39:bd:00:3d:
                    dd:2f:43:bb:87:90:b7:af:c3:e9:d6:9d:07:a0:f0:
                    b6:72:e7:eb:a4:92:60:31:5b:5b:fc:a3:b2:6b:b5:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:89:D1:DF:DA:05:8B:0E:1D:3B:95:66:BD:1A:7F:A8:AB:CE:00:26
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030323a3a2f33312d3331203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c002::/31

    Signature Algorithm: sha256WithRSAEncryption
         90:8e:de:a8:a2:aa:c5:d4:59:00:2c:1d:3a:3d:00:df:15:57:
         ad:c6:07:f6:bd:92:80:1c:d9:06:d0:c4:fd:76:ef:6b:c6:90:
         28:4e:d3:11:e3:7c:ed:ca:8c:80:74:b4:f4:f1:ad:a2:20:8a:
         bd:f0:c1:da:f8:94:08:9a:8f:e5:9d:60:1b:a3:b3:73:a6:68:
         f9:a2:57:4d:9c:c5:2f:fd:56:1e:00:60:8d:4c:64:74:ff:57:
         7c:42:81:62:95:e4:3d:3e:25:8b:c0:14:9a:5d:26:2a:4f:ae:
         92:ff:7d:e3:ae:df:d3:dd:77:28:0e:e6:c2:25:e5:2b:19:c9:
         89:2a:87:b3:fb:9d:e0:0a:a1:ec:47:ab:bc:d7:f8:47:44:79:
         3c:5f:44:6f:26:65:07:3c:54:6c:8f:a3:f6:cd:78:5e:7b:e3:
         f0:48:a9:02:b2:10:2b:82:a5:c3:4e:b9:9b:66:aa:1a:1b:8e:
         08:3b:67:79:a8:72:c7:e4:83:4b:96:52:e8:53:c8:5a:0c:c3:
         8d:46:58:7e:8b:9f:82:5b:a3:9c:c4:cc:08:ef:07:1d:ea:36:
         cf:6b:99:1f:69:d4:bc:79:9a:3f:cf:24:34:55:16:9e:16:85:
         90:76:6e:4c:da:7e:dd:ff:72:54:fb:48:dc:40:a4:11:c1:06:
         8c:4d:dd:66
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIUBpuFdxWEuzDk2CQoqNLfpO9F670wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0MzcxQURFMTNEQThFOTZCOTdBRkEwQ0YzREYzMDk0
QUFCMERCMDAeFw0yMzA0MDgwOTE3MDZaFw0yNDA0MDYwOTIyMDZaMDMxMTAvBgNV
BAMTKDNGODlEMURGREEwNThCMEUxRDNCOTU2NkJEMUE3RkE4QUJDRTAwMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8aG9DFa2HuEUOSmxgYC7p7cwp
tMg3gxW7UgOKkDWjCKjXh09CD7iP9fiWR8gALbBvKiyK/rmues65WLrUluKqK7Yg
gbg2TmmY0m/5UKkJ3FfiADqGRq3iv4vWXrQsnz2NKJmI7Eg+rlceQxYGx+il97IA
i5gNVee9HaLZPTH6tqayMDV1phz3drH1LbH7Ngls38SuKo9jKrJIrDeO1eFclkU9
JYMQXB6zk0AQeKCc6nC52oJdom15NuSL/HptxfjQZNLLGexa3XLFl6mkNU/zbIti
M2eK44cSMVMjOb0APd0vQ7uHkLevw+nWnQeg8LZy5+ukkmAxW1v8o7Jrta3rAgMB
AAGjggHEMIIBwDAdBgNVHQ4EFgQUP4nR39oFiw4dO5VmvRp/qKvOACYwHwYDVR0j
BBgwFoAUDUNxreE9qOlrl6+gzz3zCUqrDbAwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC85LzBENDM3
MUFERTEzREE4RTk2Qjk3QUZBMENGM0RGMzA5NEFBQjBEQjAuY3JsMGUGCCsGAQUF
BwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC8x
NC8wRDQzNzFBREUxM0RBOEU5NkI5N0FGQTBDRjNERjMwOTRBQUIwREIwLmNlcjBu
BggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJzeW5jOi8vcnBraS5jby9yZXBv
L0F1Z3VzdC85LzMyNjEzMTMzM2E2MzMwMzAzMjNhM2EyZjMzMzEyZDMzMzEyMDNk
M2UyMDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF
BQcBBwEB/wQRMA8wDQQCAAIwBwMFASoTwAIwDQYJKoZIhvcNAQELBQADggEBAJCO
3qiiqsXUWQAsHTo9AN8VV63GB/a9koAc2QbQxP1272vGkChO0xHjfO3KjIB0tPTx
raIgir3wwdr4lAiaj+WdYBujs3OmaPmiV02cxS/9Vh4AYI1MZHT/V3xCgWKV5D0+
JYvAFJpdJipPrpL/feOu39PddygO5sIl5SsZyYkqh7P7neAKoexHq7zX+EdEeTxf
RG8mZQc8VGyPo/bNeF574/BIqQKyECuCpcNOuZtmqhobjgg7Z3mocsfkg0uWUuhT
yFoMw41GWH6Ln4Jbo5zEzAjvBx3qNs9rmR9p1Lx5mj/PJDRVFp4WhZB2bkzaft3/
clT7SNxApBHBBoxN3WY=
-----END CERTIFICATE-----