Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa
File:                     326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa (raw, json)
Hash identifier:          ghedsmcFLLJtk5D7yqNhjaWuXlIcydJ+d4NG8d7IJ3A=
Subject key identifier:   04:FE:C3:96:41:8D:65:4B:58:98:77:54:69:D2:76:10:C8:F5:A8:BD
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       57766CD4A954B09F79AFE74541E98F25C39AD347
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa
Signing time:             Sat 08 Apr 2023 09:22:03 +0000
ROA not before:           Sat 08 Apr 2023 09:17:03 +0000
ROA not after:            Sat 06 Apr 2024 09:22:03 +0000
asID:                     199471
IP address blocks:        2a13:c007:8012::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:76:6c:d4:a9:54:b0:9f:79:af:e7:45:41:e9:8f:25:c3:9a:d3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:03 2023 GMT
            Not After : Apr  6 09:22:03 2024 GMT
        Subject: CN=04FEC396418D654B5898775469D27610C8F5A8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:bb:77:af:0c:d9:a9:d3:82:f3:de:54:d0:
                    fe:12:f1:82:ea:8a:91:a1:fd:8e:07:92:27:08:32:
                    80:0d:a4:f0:e1:4c:f7:bb:23:e6:e4:d2:8e:12:30:
                    ad:3d:fe:9c:4a:02:5e:7e:7c:30:41:24:02:4c:ec:
                    29:60:94:ae:ca:c1:15:c5:98:d5:10:c1:14:e8:2d:
                    9c:da:bb:5c:f3:7c:de:0e:73:84:64:5a:86:0e:2a:
                    b7:96:66:85:d1:02:da:44:a1:88:b1:2d:80:70:a0:
                    ab:01:2d:aa:69:70:ac:08:4a:8c:6f:44:a3:16:95:
                    53:66:00:37:95:4b:8d:12:cb:40:20:9c:92:d3:9b:
                    fa:6d:a5:c8:c0:d1:de:63:f2:5f:35:85:db:e1:f7:
                    62:28:1a:b4:a8:d6:63:e8:74:76:97:4c:c4:a0:dc:
                    32:f0:aa:a4:1d:65:c7:e9:01:1e:e6:07:24:4e:1d:
                    ca:68:62:8c:4e:bc:29:cf:9b:0c:bd:1e:fd:19:af:
                    17:47:cf:78:df:5a:13:40:b2:09:fb:57:19:0c:a8:
                    cc:b3:9a:d5:5b:ec:9d:e1:43:b4:08:10:ad:94:f6:
                    c9:64:1e:71:82:06:a6:3d:fe:e8:9e:47:b7:72:01:
                    03:fd:b0:84:5c:28:69:22:15:b7:5e:3d:82:12:09:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:C3:96:41:8D:65:4B:58:98:77:54:69:D2:76:10:C8:F5:A8:BD
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383031323a3a2f34382d3438203d3e20313939343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8012::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:05:ad:88:b7:88:20:db:84:55:c2:2d:1c:0b:cb:a4:56:c6:
         e5:b2:26:ac:d2:bb:e5:f3:78:d2:05:bc:59:76:6a:ca:cc:63:
         dc:65:ed:aa:07:ad:03:9a:d2:f1:dd:2a:32:36:91:fe:60:15:
         3e:32:70:b8:f6:41:c4:05:0a:cd:a3:dc:61:58:32:e9:35:8f:
         23:7e:eb:dd:a9:be:d8:27:55:91:3c:1c:1f:aa:d4:e1:7a:8b:
         42:c0:20:9a:37:b7:d7:d0:8e:c2:b3:c8:4c:ac:7b:e2:ab:3c:
         57:8d:b6:21:96:52:83:fc:6c:c5:39:63:b3:3b:84:e8:be:b9:
         44:13:14:98:c9:ac:39:c7:bc:99:58:2d:2f:72:65:a1:1c:ca:
         0b:84:23:29:f4:0b:a1:6e:79:92:c8:df:41:9f:ba:f6:b8:7b:
         78:d2:a3:99:d8:4f:1e:81:99:63:8c:a0:14:a5:0d:a2:50:f2:
         8f:91:11:0d:9a:c7:83:f8:9b:d7:ec:3a:24:95:ab:89:d3:24:
         7f:80:7d:da:ca:cd:da:11:5d:d9:90:cb:10:4c:87:e6:ad:38:
         7f:1f:98:a9:c7:a7:6f:dc:0c:3e:14:ed:fc:9e:a0:d7:3b:96:
         95:72:61:40:9c:14:3a:90:c6:5e:58:0f:7f:ab:8a:27:aa:0c:
         ef:bf:65:d4
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgIUV3Zs1KlUsJ95r+dFQemPJcOa00cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0MzcxQURFMTNEQThFOTZCOTdBRkEwQ0YzREYzMDk0
QUFCMERCMDAeFw0yMzA0MDgwOTE3MDNaFw0yNDA0MDYwOTIyMDNaMDMxMTAvBgNV
BAMTKDA0RkVDMzk2NDE4RDY1NEI1ODk4Nzc1NDY5RDI3NjEwQzhGNUE4QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XLt3rwzZqdOC895U0P4S8YLq
ipGh/Y4HkicIMoANpPDhTPe7I+bk0o4SMK09/pxKAl5+fDBBJAJM7ClglK7KwRXF
mNUQwRToLZzau1zzfN4Oc4RkWoYOKreWZoXRAtpEoYixLYBwoKsBLappcKwISoxv
RKMWlVNmADeVS40Sy0AgnJLTm/ptpcjA0d5j8l81hdvh92IoGrSo1mPodHaXTMSg
3DLwqqQdZcfpAR7mByROHcpoYoxOvCnPmwy9Hv0ZrxdHz3jfWhNAsgn7VxkMqMyz
mtVb7J3hQ7QIEK2U9slkHnGCBqY9/uieR7dyAQP9sIRcKGkiFbdePYISCZkHAgMB
AAGjggHWMIIB0jAdBgNVHQ4EFgQUBP7DlkGNZUtYmHdUadJ2EMj1qL0wHwYDVR0j
BBgwFoAUDUNxreE9qOlrl6+gzz3zCUqrDbAwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC85LzBENDM3
MUFERTEzREE4RTk2Qjk3QUZBMENGM0RGMzA5NEFBQjBEQjAuY3JsMGUGCCsGAQUF
BwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC8x
NC8wRDQzNzFBREUxM0RBOEU5NkI5N0FGQTBDRjNERjMwOTRBQUIwREIwLmNlcjB+
BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5jby9yZXBv
L0F1Z3VzdC85LzMyNjEzMTMzM2E2MzMwMzAzNzNhMzgzMDMxMzIzYTNhMmYzNDM4
MmQzNDM4MjAzZDNlMjAzMTM5MzkzNDM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE8AHgBIwDQYJ
KoZIhvcNAQELBQADggEBAFIFrYi3iCDbhFXCLRwLy6RWxuWyJqzSu+XzeNIFvFl2
asrMY9xl7aoHrQOa0vHdKjI2kf5gFT4ycLj2QcQFCs2j3GFYMuk1jyN+692pvtgn
VZE8HB+q1OF6i0LAIJo3t9fQjsKzyEyse+KrPFeNtiGWUoP8bMU5Y7M7hOi+uUQT
FJjJrDnHvJlYLS9yZaEcyguEIyn0C6FueZLI30Gfuva4e3jSo5nYTx6BmWOMoBSl
DaJQ8o+REQ2ax4P4m9fsOiSVq4nTJH+AfdrKzdoRXdmQyxBMh+atOH8fmKnHp2/c
DD4U7fyeoNc7lpVyYUCcFDqQxl5YD3+riieqDO+/ZdQ=
-----END CERTIFICATE-----