Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa
File:                     326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa (raw, json)
Hash identifier:          qWcjipU5VeqWzMdbk3TIPSD9rivhnJQU+lo8wucuD0U=
Subject key identifier:   55:51:E5:54:47:23:39:C7:7E:87:62:11:42:4E:EA:DD:7B:79:70:D6
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       7B8AAB8BD48027174D8ACB9942F18C2710EA84FE
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa
Signing time:             Sat 08 Apr 2023 09:22:03 +0000
ROA not before:           Sat 08 Apr 2023 09:17:03 +0000
ROA not after:            Sat 06 Apr 2024 09:22:03 +0000
asID:                     199037
IP address blocks:        2a13:c007:8019::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8a:ab:8b:d4:80:27:17:4d:8a:cb:99:42:f1:8c:27:10:ea:84:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:03 2023 GMT
            Not After : Apr  6 09:22:03 2024 GMT
        Subject: CN=5551E554472339C77E876211424EEADD7B7970D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:ba:94:ef:84:74:e3:f3:69:95:52:f1:1f:
                    62:ce:68:e2:7f:b1:0d:a2:9b:f5:da:64:92:e8:86:
                    d9:d9:dc:68:6b:35:89:9c:c2:f8:e8:f9:5b:1b:f7:
                    cf:1d:65:d1:f0:65:bc:95:e6:a6:67:90:0f:7a:68:
                    2b:d0:00:4f:da:40:5f:57:a4:d2:87:09:3a:8c:0d:
                    05:36:05:b6:d8:d1:52:a0:07:50:bd:d9:13:42:69:
                    6c:92:cc:13:57:c9:48:5d:c8:5c:ab:ba:c6:b7:da:
                    fd:ab:73:6d:6c:91:b9:f1:15:64:48:3a:97:0f:17:
                    0f:f0:0d:83:95:4c:29:5f:61:4d:1a:c0:1d:58:78:
                    8f:ef:77:52:69:93:00:e3:cf:28:5e:bc:e8:ed:c0:
                    b7:c3:d6:98:ef:04:ce:c0:41:80:0f:cf:76:9e:c2:
                    65:e6:82:08:34:1a:4e:54:16:98:0f:04:78:fe:47:
                    00:8f:0a:7b:9a:dc:2a:bd:55:3e:5b:5d:65:95:52:
                    54:b0:c6:3e:f3:6a:0e:43:c1:28:bd:be:e4:4a:00:
                    1a:35:83:bf:89:40:bd:13:17:0a:05:ce:4a:5e:b8:
                    7d:c5:55:08:a0:70:c1:3d:d2:ba:b4:a8:fc:2e:1b:
                    f1:37:a5:2e:44:7d:b4:5e:d3:33:ba:f5:5b:cb:96:
                    1f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:51:E5:54:47:23:39:C7:7E:87:62:11:42:4E:EA:DD:7B:79:70:D6
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383031393a3a2f34382d3438203d3e20313939303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8019::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:c2:7a:be:e7:71:ed:d2:4b:2e:42:f8:f8:fa:23:f3:21:14:
         92:a8:7c:6a:82:b8:f1:e3:60:a1:14:89:0c:6f:73:cf:30:2b:
         07:3e:94:47:94:fb:4e:fb:ce:42:c2:ed:33:da:d5:a0:eb:aa:
         83:6b:b2:23:33:93:8a:46:e6:34:39:fc:a9:14:79:c3:13:4a:
         33:09:cb:9f:64:6b:5e:69:7e:82:78:67:7b:ad:fe:c6:c5:7e:
         73:56:83:73:cb:82:d6:f8:4b:2c:12:b2:61:26:0e:9b:2b:a6:
         62:8b:d2:0c:a3:51:7f:e7:10:f4:24:f5:bf:f0:20:3e:28:4f:
         f6:e9:6e:88:5d:d9:1a:c3:2b:3a:13:de:cd:2d:2d:c8:4e:5c:
         2c:85:32:43:85:5e:de:20:3b:2b:d5:aa:db:6d:32:75:e5:7d:
         61:82:73:37:c4:83:a2:4f:6c:2b:5f:44:af:0a:f0:07:54:ff:
         79:64:8f:3a:05:f5:43:b6:92:71:72:62:0e:37:44:71:27:db:
         3e:17:4c:b1:81:77:ea:31:11:85:31:f2:17:55:d0:43:6f:a7:
         d1:db:f7:64:3d:b8:89:d8:99:4c:4c:23:13:1e:8f:a2:e8:02:
         35:99:d1:88:3d:b8:87:90:b1:f3:4b:b6:b0:15:9c:29:27:89:
         3f:d3:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----