Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa
File:                     326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa (raw, json)
Hash identifier:          +OATq4u7bCLEhUZq7+TeZCV0hz+j5ateNpqh8ZH1idc=
Subject key identifier:   AA:5C:85:66:62:85:92:58:14:41:57:37:21:0B:53:5B:58:D0:46:D4
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       488EE0E0E1D11D72C19642E8E6203410940A5115
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa
Signing time:             Sat 08 Apr 2023 09:22:03 +0000
ROA not before:           Sat 08 Apr 2023 09:17:03 +0000
ROA not after:            Sat 06 Apr 2024 09:22:03 +0000
asID:                     49867
IP address blocks:        2a13:c007:8000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8e:e0:e0:e1:d1:1d:72:c1:96:42:e8:e6:20:34:10:94:0a:51:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:03 2023 GMT
            Not After : Apr  6 09:22:03 2024 GMT
        Subject: CN=AA5C85666285925814415737210B535B58D046D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ee:c8:85:27:b3:60:23:db:39:76:f5:d8:14:
                    3b:6c:2d:d2:3c:2e:bf:c1:76:bc:62:cf:c0:c8:8e:
                    2a:ca:fe:6a:81:86:b3:41:c4:4e:c0:de:e6:5c:93:
                    0c:e3:af:28:99:58:bb:d4:6a:4d:b9:3d:63:11:18:
                    0b:b3:55:18:8b:cf:b3:71:77:04:cd:3b:aa:a6:85:
                    a6:04:b2:64:77:bb:8c:3a:5b:42:b7:b6:75:af:65:
                    53:23:fb:02:08:53:55:4f:ee:e6:43:6e:95:1c:47:
                    a7:3e:b0:d4:11:1f:95:e5:5a:36:25:b3:ec:ed:28:
                    32:73:a5:c3:e0:54:e5:10:c3:8e:cc:66:d9:9e:ed:
                    c6:d4:bf:99:76:58:90:00:99:d0:42:2e:d2:e8:eb:
                    cf:2a:4d:63:3d:c1:c4:e3:5c:64:aa:d0:fa:b0:42:
                    31:0c:43:a8:bc:c1:87:d7:80:5c:be:e3:8c:a2:7f:
                    a6:a6:48:32:b3:81:44:44:9c:cc:80:83:f4:43:6b:
                    ea:25:28:33:1f:83:b9:c6:0f:cb:a7:e6:b5:73:bb:
                    f8:59:22:86:f2:41:62:57:cc:92:fb:43:78:d0:93:
                    c7:ca:e8:f7:83:9b:35:23:08:ac:c1:41:53:d4:5a:
                    b5:49:dd:01:3c:b5:d4:b9:5c:42:79:1b:f1:2d:9b:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5C:85:66:62:85:92:58:14:41:57:37:21:0B:53:5B:58:D0:46:D4
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:26:f1:1b:60:ab:41:c7:c5:b5:22:40:de:ce:ff:b2:f9:54:
         a7:83:eb:64:a0:e6:8e:36:f7:8a:26:8f:e7:9d:0a:aa:ee:c3:
         5b:dc:86:97:0d:0d:0b:22:ab:24:21:94:53:61:0c:65:e7:60:
         11:2b:7d:fb:82:b1:31:7c:f6:9f:ca:2e:69:ee:e6:21:40:5d:
         eb:fb:6a:82:3c:c3:58:e2:4e:d5:f2:f6:a5:61:b2:ea:10:06:
         08:24:6f:f4:2f:b8:6f:28:57:4c:e0:49:3f:28:71:10:46:7b:
         17:a0:17:d1:50:cf:21:8e:f7:f4:ea:3a:2f:28:c4:69:8a:ed:
         ec:6f:94:d6:db:4a:ef:2b:3f:72:24:52:d0:49:e7:2e:e9:d1:
         cb:fa:2b:c9:60:85:30:9e:77:44:31:2b:6f:92:bf:4d:3a:49:
         c1:42:0d:18:7f:77:3a:cf:a9:13:28:f5:80:85:25:52:89:f8:
         c5:63:7f:c9:55:f7:3e:38:1c:a6:26:78:6e:43:2a:73:dd:ee:
         c8:22:c9:a6:d4:af:96:32:97:3f:29:4f:56:b0:9c:80:6d:83:
         99:e7:7a:1f:58:1c:71:fe:80:2a:8e:b6:19:ad:df:8b:7b:f6:
         f9:23:53:cb:c9:46:7c:28:e7:74:27:95:fa:a4:31:2a:38:73:
         cd:08:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----