Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa
File:                     326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa (raw, json)
Hash identifier:          zqQ5Vr5Q3uUtH1UL/6lPDeZNpipgxaVqrZHroej+O4I=
Subject key identifier:   93:10:CE:E3:D2:D4:99:E8:2B:97:B6:9F:09:37:4D:4A:F1:4B:20:97
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       40070ED3ECB02666C2149B0686041323C02E72ED
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa
Signing time:             Sat 08 Apr 2023 09:22:04 +0000
ROA not before:           Sat 08 Apr 2023 09:17:04 +0000
ROA not after:            Sat 06 Apr 2024 09:22:04 +0000
asID:                     202151
IP address blocks:        2a13:c007:8015::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:07:0e:d3:ec:b0:26:66:c2:14:9b:06:86:04:13:23:c0:2e:72:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:04 2023 GMT
            Not After : Apr  6 09:22:04 2024 GMT
        Subject: CN=9310CEE3D2D499E82B97B69F09374D4AF14B2097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:af:12:8d:d2:11:7e:63:ee:49:68:73:1b:
                    3d:aa:b0:de:5a:ca:5a:ec:a6:ef:6a:2e:ac:f9:47:
                    56:da:1c:f8:e2:8b:d7:09:3a:9c:56:0a:9b:f3:57:
                    15:b9:a7:5f:79:1a:93:f4:dc:74:30:e0:15:37:31:
                    6d:27:0a:3b:c4:a4:80:ed:05:14:42:be:ab:bc:6f:
                    b6:de:38:91:83:40:69:aa:f2:5c:06:57:04:b9:35:
                    94:cd:a2:fd:a6:b0:86:91:61:f6:63:cd:49:c8:b9:
                    97:7b:68:ee:2f:85:ab:62:bf:e9:31:90:78:1a:d2:
                    cd:d5:fa:94:6c:73:af:ec:c2:e6:d3:6c:a1:92:a9:
                    47:51:c2:e5:5f:fd:1f:f1:8a:c2:ea:9b:04:55:c4:
                    4d:c1:4f:c2:2d:f1:a2:a6:6b:b5:1c:5e:b4:0b:27:
                    e8:ca:42:b3:c9:34:4b:72:ff:c1:44:db:a8:9a:8e:
                    ec:97:8a:ca:d6:5b:f9:71:78:d3:cf:b3:cd:df:be:
                    7a:de:be:db:14:b4:c8:c3:9a:3a:39:84:38:f5:30:
                    4a:97:a2:85:62:2d:8e:c0:87:6e:1e:7c:c3:ce:da:
                    af:ee:60:4a:28:83:18:1e:72:86:18:bc:33:7a:53:
                    f2:a9:9d:c3:d5:f4:81:16:74:81:92:07:d7:7c:03:
                    52:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:CE:E3:D2:D4:99:E8:2B:97:B6:9F:09:37:4D:4A:F1:4B:20:97
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8015::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:71:cb:6d:fa:c6:c9:74:f0:89:1c:00:4e:e9:f6:88:44:
         30:a9:a3:d4:85:5a:71:fc:ab:3b:c7:72:87:c2:e9:c9:b2:80:
         73:17:98:8f:ba:13:97:c7:91:af:1b:e9:cc:55:a8:27:66:62:
         f2:55:a2:b6:f6:b5:96:1a:af:81:c1:9b:7c:71:d6:d8:1d:91:
         b9:e7:0a:3d:b4:95:23:cc:f9:31:1c:3f:cf:98:eb:68:81:f6:
         34:25:63:ad:b7:af:c2:b7:0d:1f:fc:fb:b2:d0:23:25:b5:52:
         c6:8d:b4:37:9b:5e:8a:e0:ff:16:d7:17:84:d2:b0:39:ba:af:
         9d:2c:68:0f:3d:90:0e:a3:d8:cc:fc:48:47:cd:a7:94:03:c2:
         f3:53:c2:c6:1b:1b:b5:14:ef:52:15:a2:3e:94:85:7d:76:35:
         bf:ea:f9:5b:85:79:bb:25:10:b9:92:05:29:89:aa:1e:a5:54:
         a0:ab:e2:65:07:38:37:ea:17:56:f3:0a:45:9a:cd:17:36:b5:
         4a:5e:2f:c8:7e:cf:72:6a:80:ef:59:4e:da:20:bc:78:22:15:
         67:a8:c7:bc:07:99:fe:2e:63:30:91:50:3d:a0:2b:b8:9a:84:
         8e:e5:eb:72:50:65:7b:fb:5c:ed:92:fb:cc:b6:31:b6:38:c2:
         53:74:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----