Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa
File:                     326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa (raw, json)
Hash identifier:          qXgGkA4wiE6q2wCXKtdt//5eVtskNFW9RFmnp6SNhuc=
Subject key identifier:   D7:EE:42:74:06:8A:82:D4:77:3F:61:EF:5D:68:38:DF:51:5A:B0:00
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       48D72004D57E51905F0BEC6FD466822174C2212D
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa
Signing time:             Sat 08 Apr 2023 09:22:03 +0000
ROA not before:           Sat 08 Apr 2023 09:17:03 +0000
ROA not after:            Sat 06 Apr 2024 09:22:03 +0000
asID:                     209658
IP address blocks:        2a13:c007:8016::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d7:20:04:d5:7e:51:90:5f:0b:ec:6f:d4:66:82:21:74:c2:21:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:03 2023 GMT
            Not After : Apr  6 09:22:03 2024 GMT
        Subject: CN=D7EE4274068A82D4773F61EF5D6838DF515AB000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:34:ae:52:11:fc:24:c7:39:e0:eb:fc:c4:
                    fa:06:c7:be:2d:25:47:8d:ef:91:34:b1:8f:e5:41:
                    ec:92:68:fd:76:14:c8:a2:26:35:17:15:fb:42:37:
                    7f:aa:e1:f5:89:f7:c2:28:cf:f7:d7:cb:bf:65:dc:
                    c2:c6:a0:57:e1:07:d6:06:78:fc:d2:1f:af:6b:6f:
                    38:97:af:13:15:cb:21:8e:b9:3a:88:52:e7:fe:b8:
                    d3:5d:94:66:33:42:f2:72:b3:de:d0:d9:9c:6d:08:
                    52:cb:81:1b:93:59:cf:d2:5f:9f:5a:64:57:e7:f5:
                    98:16:a8:ec:e0:f6:59:73:6a:21:7c:55:e2:58:ec:
                    c9:0f:fe:1e:bf:95:b2:16:0c:d3:2f:51:8c:ac:c6:
                    ba:a0:d9:74:e3:5e:c5:c3:4a:db:d5:9d:9e:17:d3:
                    b6:30:fd:8c:c4:6f:05:99:af:fd:74:1f:77:60:ac:
                    63:4d:2b:68:c8:1c:02:5f:20:8e:bf:60:44:df:06:
                    f9:ff:6b:52:ed:d7:e6:f9:fb:30:c2:0f:ea:b0:8d:
                    04:ac:98:ae:f8:5a:d4:89:ba:eb:e6:16:4c:12:20:
                    7d:89:1f:97:73:fe:0b:8b:d8:9c:05:1a:e8:5b:cb:
                    0f:71:dd:38:3e:16:fe:19:63:ac:66:86:1f:0c:b0:
                    d9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EE:42:74:06:8A:82:D4:77:3F:61:EF:5D:68:38:DF:51:5A:B0:00
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8016::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:87:9c:40:a6:c0:7e:9e:59:2e:e4:23:26:61:ef:31:e0:71:
         64:fe:e7:06:9a:43:b0:84:df:de:07:7b:6d:b2:bb:29:e1:63:
         3b:69:17:8b:35:93:68:0a:b4:92:69:a8:cb:48:b0:c3:b5:28:
         56:34:92:4b:4f:0f:d3:73:a7:63:b7:18:9d:bd:fb:b1:4a:19:
         86:74:bd:44:81:c8:52:97:20:83:fa:94:9f:99:0d:af:44:d9:
         ba:8f:10:49:68:65:10:12:5f:4d:0a:dc:4c:05:a9:0f:e6:16:
         27:39:aa:93:25:71:ac:42:41:71:c2:47:04:8d:b1:88:40:18:
         20:0d:77:f6:8e:69:61:cf:c5:72:24:ee:9f:31:59:c3:30:51:
         f3:f0:68:0f:1d:df:e7:3b:52:05:8c:59:f2:3a:e9:18:61:3b:
         74:fc:be:a4:45:c4:0a:7c:82:d8:7d:95:df:f5:94:c1:b8:56:
         fe:27:d4:8d:66:20:52:f1:66:de:ad:1b:8c:1f:eb:d3:51:81:
         c8:02:08:c9:d1:d8:fc:ed:cd:ee:f7:43:0f:a8:c9:fd:d4:b0:
         74:c7:31:79:ba:41:91:ea:ab:cf:09:c6:d3:d5:a5:9a:d9:96:
         0a:c7:11:28:24:64:51:b3:f3:2a:56:09:f4:39:64:ca:35:1b:
         1a:00:4f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----