Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa
File:                     326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa (raw, json)
Hash identifier:          DSRB3UZVgs4TM8T7JWRzWjxdS9WL/kl4ThAz/c0x3yA=
Subject key identifier:   79:B5:E8:FE:DD:B9:E3:61:53:3E:D6:47:47:5A:62:B0:C3:83:35:46
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       064B2E514E985D99E1E5E5F99E71E1ED72ED882A
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa
Signing time:             Sat 08 Apr 2023 09:22:04 +0000
ROA not before:           Sat 08 Apr 2023 09:17:04 +0000
ROA not after:            Sat 06 Apr 2024 09:22:04 +0000
asID:                     199331
IP address blocks:        2a13:c007:8013::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4b:2e:51:4e:98:5d:99:e1:e5:e5:f9:9e:71:e1:ed:72:ed:88:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:04 2023 GMT
            Not After : Apr  6 09:22:04 2024 GMT
        Subject: CN=79B5E8FEDDB9E361533ED647475A62B0C3833546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:8b:05:6c:f7:c6:1e:e9:22:b9:5e:df:0d:
                    28:65:2a:09:97:7f:96:3b:2b:92:3e:23:f6:71:54:
                    8b:8b:ea:00:a8:e3:09:7b:71:de:b6:51:33:ec:ef:
                    67:5c:b9:0b:9a:84:4b:39:6d:92:d0:17:27:7b:0f:
                    41:b2:97:1b:44:c3:46:a5:84:ab:c7:46:0b:ab:ca:
                    38:76:49:c0:ff:4c:7a:24:57:7f:45:5b:ad:56:a6:
                    11:86:d5:bf:45:4d:8f:b7:37:45:de:22:65:21:d8:
                    0c:dc:d0:d3:fe:1b:22:3a:de:d4:5f:92:72:1f:af:
                    c6:27:b1:67:9b:58:f2:c4:51:ac:61:26:9d:a2:d5:
                    b0:5a:bd:d1:21:56:4d:ee:17:6d:93:e9:e9:dc:d3:
                    e8:bb:89:dd:f0:64:0a:18:6b:19:9d:56:7c:5e:99:
                    92:3f:8c:80:2c:1a:ba:83:0d:19:84:35:f5:cf:32:
                    83:43:b0:65:4b:5d:35:5a:0b:88:0b:a0:61:35:3c:
                    97:9d:4a:03:2c:3b:b4:0b:56:d7:95:63:96:84:ca:
                    26:ba:c1:45:10:a7:0f:60:d7:d2:95:9d:d9:ba:c6:
                    29:ba:31:69:c7:c5:fd:62:68:d5:b9:92:3a:f9:a5:
                    fe:0b:11:fc:32:23:e3:1e:53:22:e3:60:a8:c3:e3:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:E8:FE:DD:B9:E3:61:53:3E:D6:47:47:5A:62:B0:C3:83:35:46
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8013::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:60:18:88:7c:a5:11:7f:a8:44:dd:b3:b7:0b:dc:ee:be:06:
         f1:5f:3f:d5:65:bc:58:af:61:76:8c:8c:29:0f:3a:60:00:9b:
         e6:19:a4:80:5c:18:3a:c0:30:b8:d5:45:5d:aa:ce:d2:bf:09:
         cc:67:90:60:f1:fa:76:09:86:80:84:11:2e:74:df:b2:a3:72:
         39:c7:e1:d7:4a:2c:1c:c7:07:2e:e1:23:3f:7d:a0:ee:68:82:
         ea:63:b0:e6:81:f5:c5:b4:6b:13:52:9f:a5:4f:6c:c1:ea:88:
         ba:61:02:bf:96:90:80:14:ce:35:ae:b9:e6:d1:a3:e9:74:26:
         4f:77:ba:9c:04:32:44:8b:6e:3b:31:89:5e:aa:66:98:4a:01:
         75:5c:d3:41:4f:32:94:72:07:3b:37:c1:2b:e6:e4:6b:82:cc:
         9b:62:7b:6d:d0:aa:39:dd:07:f1:b5:46:9e:30:a1:eb:84:af:
         b4:c0:b8:25:3b:a0:d7:6d:9a:4d:23:24:0d:f0:cb:62:c8:a0:
         7c:b7:4a:bd:c6:75:5f:68:84:15:bc:5d:b1:1b:51:29:47:8f:
         c3:55:b2:ed:d2:d6:06:92:dd:83:76:f5:da:54:c1:ec:af:c1:
         bd:c4:97:6c:b4:24:62:ed:05:c5:b5:f4:48:d6:bf:23:f1:a5:
         e9:4c:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----