Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa
File:                     326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa (raw, json)
Hash identifier:          768sNJaGuAWiFkeOhzR1+SJ1Dz2FjlvqrwEfobi+Ifw=
Subject key identifier:   87:AC:1E:EE:C6:D5:44:85:71:CF:D8:47:C4:90:1B:22:8A:70:2C:35
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       1ED66AE6D24C641DB24B6611F5A612B8D94F0B91
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa
Signing time:             Sat 08 Apr 2023 09:22:02 +0000
ROA not before:           Sat 08 Apr 2023 09:17:02 +0000
ROA not after:            Sat 06 Apr 2024 09:22:02 +0000
asID:                     199108
IP address blocks:        2a13:c007:801b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d6:6a:e6:d2:4c:64:1d:b2:4b:66:11:f5:a6:12:b8:d9:4f:0b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:02 2023 GMT
            Not After : Apr  6 09:22:02 2024 GMT
        Subject: CN=87AC1EEEC6D5448571CFD847C4901B228A702C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:de:b5:a3:78:be:c8:fe:56:b6:7c:28:23:
                    7e:81:73:98:0c:a6:2a:28:03:b8:5f:7d:1b:c6:c1:
                    04:0c:57:b2:4f:9f:ca:08:dc:75:75:18:70:e8:5f:
                    ea:9b:77:9c:f9:7c:3c:90:2d:c9:e3:13:9b:fe:fc:
                    98:16:ac:e8:6f:d3:b9:c3:8a:9e:ff:85:e9:ae:e8:
                    a0:03:6c:c4:97:99:92:3e:37:42:1f:04:cf:cd:bf:
                    8c:74:a8:2e:11:2e:b4:cc:76:82:07:46:8d:78:65:
                    ed:46:2e:78:82:95:b9:d5:d2:39:8e:e8:36:33:1b:
                    a6:9a:92:5e:94:e3:4b:17:1f:56:e7:52:73:60:50:
                    d8:a9:cc:32:1d:9f:5f:36:35:d7:78:cd:b3:25:a7:
                    1e:0b:68:1f:dc:c0:27:0b:0d:8b:c2:3e:d4:ed:2a:
                    1a:7c:fd:a0:73:8e:3e:50:64:76:94:c1:33:76:3d:
                    fc:db:b9:71:ae:4c:b7:15:52:4a:df:69:db:53:3e:
                    39:08:25:bf:be:5b:22:21:05:93:48:06:50:a9:cd:
                    5b:26:33:36:22:71:48:d7:8b:76:33:3d:d2:65:37:
                    36:eb:69:40:0a:98:45:a7:32:a7:c4:48:86:b2:86:
                    ef:c3:69:8f:e9:1e:8f:8a:0c:4b:fd:7f:ab:fd:98:
                    78:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AC:1E:EE:C6:D5:44:85:71:CF:D8:47:C4:90:1B:22:8A:70:2C:35
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:801b::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:73:1f:7c:35:e0:dd:54:ab:fa:40:e2:5f:c7:88:6b:cd:03:
         65:63:92:12:ed:5d:28:25:21:75:69:e5:45:a8:b6:61:59:ef:
         f9:a8:6a:8e:b1:46:7c:78:ea:cb:45:61:7c:3f:2c:1a:90:9c:
         34:a6:32:ae:a8:f4:9a:64:89:e8:11:45:3e:c5:cb:86:54:1c:
         b1:cd:d9:f1:ae:f3:64:b2:69:6a:73:5a:6d:e9:8e:99:7b:62:
         40:c2:e3:e6:ec:fd:d8:08:c5:e0:17:56:f9:c4:7f:39:16:03:
         33:17:9b:59:7c:8c:85:7b:93:c9:1a:f4:19:c7:85:07:83:fe:
         a5:e0:f1:de:da:f2:0d:31:c6:f4:84:5f:68:1e:df:cc:8d:25:
         9f:f1:70:78:e7:29:11:29:f6:48:66:d6:c6:f3:5f:5e:f6:0d:
         7e:93:10:86:93:e5:a8:92:a1:fa:0f:59:5c:42:62:a3:a9:57:
         bd:2b:32:03:64:38:62:74:2a:46:83:34:97:b4:e1:1a:e5:f6:
         51:8a:ca:07:c9:ef:d3:df:8d:0f:c5:c5:bb:dd:c7:4c:8b:8c:
         8f:51:80:67:a3:61:36:42:1b:b3:ff:e3:29:c8:8f:d1:23:7c:
         a4:fe:94:1d:d7:d0:24:29:6b:74:7d:98:4f:9a:88:15:48:5c:
         73:6f:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----