Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa
File:                     326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa (raw, json)
Hash identifier:          A0oVAVuXm9LG54mNOMsOPaXD2R4sN0MBIH/d4T8zXhM=
Subject key identifier:   62:C9:AF:CF:1D:26:E6:95:EE:C8:EE:89:30:00:25:E6:C5:4A:16:53
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       260616EA8ADCD1D75CD9CC93FA647CFFD487106D
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa
Signing time:             Sat 08 Apr 2023 09:22:02 +0000
ROA not before:           Sat 08 Apr 2023 09:17:02 +0000
ROA not after:            Sat 06 Apr 2024 09:22:02 +0000
asID:                     61368
IP address blocks:        2a13:c007:8010::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:06:16:ea:8a:dc:d1:d7:5c:d9:cc:93:fa:64:7c:ff:d4:87:10:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:02 2023 GMT
            Not After : Apr  6 09:22:02 2024 GMT
        Subject: CN=62C9AFCF1D26E695EEC8EE89300025E6C54A1653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:34:07:7d:01:ec:76:79:68:2f:63:5f:33:
                    0f:ef:4b:8d:77:65:d0:a8:05:54:e6:90:2f:5e:9f:
                    bc:c6:61:39:38:22:f9:52:40:af:00:33:ef:3e:3e:
                    02:e4:50:0e:04:ef:c2:2b:d3:e5:ff:e2:da:bc:f9:
                    00:90:65:4d:5d:d5:12:da:ae:de:e6:6f:b2:c8:28:
                    7e:cd:25:7e:75:74:78:a8:0d:4e:a8:c3:de:4b:06:
                    d5:b1:aa:d9:86:5b:71:5d:82:33:7a:82:47:f1:95:
                    82:5d:d5:cf:ca:cb:f4:ad:6a:d7:e0:00:88:09:2b:
                    23:9d:2f:35:6d:af:ff:46:d6:0e:50:10:f4:7c:97:
                    f4:b2:de:e4:ec:11:b2:2a:42:63:58:f1:d8:49:6a:
                    bc:b3:7b:1f:6f:af:4a:22:42:7f:0d:56:6a:3a:2e:
                    4e:a8:b0:b5:81:63:c3:8d:24:48:94:4c:2e:8f:d3:
                    11:af:d2:1c:f5:35:a4:6d:90:d4:68:95:85:6b:7d:
                    78:6d:4e:9b:b5:73:c7:71:19:73:25:15:14:3e:f3:
                    ab:7f:8b:e2:03:a9:72:86:cd:f1:de:9b:7d:a5:15:
                    e6:12:6b:b6:19:9a:8f:78:09:ac:82:e8:62:d9:ec:
                    d1:c5:45:63:1f:bd:70:54:b8:fe:e0:31:6e:08:c7:
                    a9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C9:AF:CF:1D:26:E6:95:EE:C8:EE:89:30:00:25:E6:C5:4A:16:53
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8010::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:f4:16:5b:b2:7a:e2:a9:21:e3:a9:81:64:84:df:d0:5c:3a:
         bd:ab:ab:91:d1:69:07:15:ce:aa:c2:15:f6:e8:ba:bc:ba:ee:
         fc:c2:ee:84:a4:95:31:af:aa:0a:01:b2:75:fa:aa:5f:16:d0:
         7a:6a:b9:4a:83:39:2c:ad:17:4e:89:4b:4c:d5:c9:97:03:45:
         65:95:af:60:21:da:15:a6:07:21:38:ec:8a:f4:40:7b:f2:19:
         43:7e:f5:ae:77:c8:96:52:bc:d6:f2:58:8b:b7:11:05:c0:65:
         c4:22:ab:ea:d5:c5:52:fd:2e:ae:57:5c:79:2b:1b:3d:8a:57:
         c1:30:be:7d:bd:3c:90:4f:07:0b:67:bc:da:23:83:14:f8:21:
         77:6f:c2:61:98:90:83:87:dd:83:01:a0:db:11:16:02:1c:b0:
         d0:4f:5e:38:1a:68:92:98:56:fe:ff:bf:ea:09:f7:49:8e:3d:
         b8:29:e3:a9:52:9a:b6:a2:7c:28:d5:63:3e:11:3d:00:ac:65:
         c9:3e:65:25:99:51:7d:db:9e:bd:b9:ee:8c:15:03:bf:26:bd:
         fd:02:5e:33:52:79:61:e7:ec:3c:80:fe:e8:20:a8:03:c2:4b:
         36:20:b5:0f:8b:34:1a:be:0d:6a:cf:31:b0:73:2a:9b:b6:c3:
         0e:76:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----