Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383032303a3a2f34342d3434203d3e20313939323033.roa
File:                     326131333a633030373a383032303a3a2f34342d3434203d3e20313939323033.roa (raw, json)
Hash identifier:          29tbevBH/qicf1ibiEQSmOzAPEpV5kTrg2hwes/TfVo=
Subject key identifier:   59:31:8C:80:86:A5:26:90:A8:44:95:8F:91:B1:0E:E3:39:7E:A7:E1
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       37EDF7B5F41715CF1B046E1128A52070689756DB
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383032303a3a2f34342d3434203d3e20313939323033.roa
Signing time:             Sat 08 Apr 2023 09:22:04 +0000
ROA not before:           Sat 08 Apr 2023 09:17:04 +0000
ROA not after:            Sat 06 Apr 2024 09:22:04 +0000
asID:                     199203
IP address blocks:        2a13:c007:8020::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ed:f7:b5:f4:17:15:cf:1b:04:6e:11:28:a5:20:70:68:97:56:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:04 2023 GMT
            Not After : Apr  6 09:22:04 2024 GMT
        Subject: CN=59318C8086A52690A844958F91B10EE3397EA7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:ab:b3:b8:82:fb:03:85:9d:46:4b:8f:b6:
                    0a:f9:65:4d:ce:81:2c:04:0e:24:fe:50:e4:ba:57:
                    67:9b:b2:1b:8b:c2:3c:69:0f:e2:d3:13:4c:5a:18:
                    02:1f:9e:5c:be:58:52:1d:87:6b:61:89:18:1e:94:
                    6e:55:2b:63:d8:c2:84:57:5e:57:74:08:b1:24:93:
                    e6:b1:35:48:4a:dc:0f:3f:a5:4a:a3:a0:34:18:62:
                    d1:23:74:16:6b:ee:37:1e:fe:06:5f:4d:c8:cb:da:
                    5f:8d:81:b9:e8:17:3a:e4:7d:e4:ee:a0:46:5f:75:
                    2c:d0:7d:33:d5:80:a9:94:ca:ab:2b:82:fb:cd:ae:
                    40:03:db:2d:97:68:f4:30:db:e9:fd:99:6a:76:3d:
                    57:5b:af:af:23:19:09:85:f9:91:80:d6:cb:31:51:
                    b4:29:8c:37:97:c4:cb:aa:81:55:bc:54:61:2f:3b:
                    74:4c:c6:f3:0e:35:83:f3:2d:30:39:1f:d1:ee:f3:
                    f3:48:66:3c:46:9d:ce:17:02:f1:c9:e2:77:f7:98:
                    1e:c8:ed:66:72:d5:41:0e:a6:3c:a5:f2:7b:7a:48:
                    e6:8c:e2:39:44:f8:b7:d7:33:b0:fc:20:ba:cf:76:
                    ce:5a:ad:23:ee:ef:a9:93:d6:d1:2c:89:61:d0:e7:
                    c9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:31:8C:80:86:A5:26:90:A8:44:95:8F:91:B1:0E:E3:39:7E:A7:E1
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383032303a3a2f34342d3434203d3e20313939323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8020::/44

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:7c:06:bf:4d:eb:7d:c4:82:5c:6a:a4:4e:b7:bf:39:ed:
         b2:6e:0f:e6:f2:75:84:b8:ea:60:d9:ca:7b:ba:bb:6b:3d:07:
         9e:9d:7c:73:8b:26:d2:50:1b:0b:42:53:4e:31:31:4a:02:f6:
         f9:9a:48:a1:4f:d0:3e:07:65:66:ad:9c:e3:e7:55:d5:d4:5c:
         0c:77:01:a7:90:63:23:50:76:b5:d6:96:db:97:3f:c1:1f:b3:
         16:7b:34:04:79:c9:e2:b6:32:41:93:ba:50:ae:ed:aa:8e:46:
         68:a1:3f:5c:65:53:bf:93:42:67:5f:dd:ac:cf:85:27:ec:55:
         ed:69:ec:65:d5:25:69:32:ef:ff:0c:82:db:36:3e:17:17:fb:
         11:fb:aa:14:9c:22:e6:34:30:48:03:fb:b7:f3:e6:e1:6f:af:
         1e:31:70:53:a1:ba:5a:1f:29:22:c2:25:78:4d:5d:85:aa:e3:
         eb:ea:9f:c6:71:c9:15:e8:57:1d:b3:4f:40:e2:8b:6a:74:40:
         4f:2b:62:86:75:fb:31:12:56:99:c1:ea:23:3e:8d:25:03:fc:
         46:75:82:45:1d:d6:4b:ea:c3:d2:4b:13:6a:38:c1:df:ba:bb:
         a4:85:82:0a:15:e3:f6:6e:fa:6f:07:93:cf:7a:bb:32:05:b2:
         26:4a:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----