Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa
File:                     326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa (raw, json)
Hash identifier:          dkaie3IuxQfovmOFGkkWHCpb18qQSKO64OB7VPEHxVQ=
Subject key identifier:   23:E1:11:87:E1:87:C2:16:7F:8F:E6:D4:10:05:B9:95:D2:8C:B6:F3
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       755E7AD11066D42667396FF63AFF90DF54C69A3E
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa
Signing time:             Sat 08 Apr 2023 09:22:03 +0000
ROA not before:           Sat 08 Apr 2023 09:17:03 +0000
ROA not after:            Sat 06 Apr 2024 09:22:03 +0000
asID:                     199327
IP address blocks:        2a13:c007:8050::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5e:7a:d1:10:66:d4:26:67:39:6f:f6:3a:ff:90:df:54:c6:9a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:03 2023 GMT
            Not After : Apr  6 09:22:03 2024 GMT
        Subject: CN=23E11187E187C2167F8FE6D41005B995D28CB6F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:3d:7b:c8:36:35:8d:bd:48:5d:e0:21:b0:
                    d5:55:30:f0:50:71:44:be:17:fb:99:14:ed:0d:80:
                    fc:c6:18:4a:07:5d:5e:ad:f5:05:8e:08:52:1c:da:
                    d4:06:b2:ab:38:92:af:fd:b8:46:ca:25:12:f8:12:
                    74:3c:e2:dc:05:03:c4:55:eb:d4:4a:ca:27:73:fa:
                    6c:80:dd:31:14:6b:9c:62:6c:9b:3d:ee:07:f3:78:
                    80:13:17:e3:92:30:79:34:65:94:4c:66:8b:b9:97:
                    51:66:b8:35:c3:e9:ef:e9:dc:df:96:06:10:d5:16:
                    6d:40:5f:6b:e3:f2:37:59:32:35:78:52:fd:1e:24:
                    a7:f3:2d:64:f8:b9:8b:2e:22:f4:eb:9b:e6:d2:95:
                    36:4a:fc:56:e5:69:8f:40:b4:d6:8d:1b:b3:b5:29:
                    03:3d:2e:48:a1:a2:b8:1d:7c:81:58:ac:16:53:aa:
                    9a:d7:8a:ab:ca:85:ff:e0:09:f1:f0:20:be:19:15:
                    75:ca:85:0c:d5:c6:4c:ea:0a:f6:e3:e9:f5:65:c8:
                    e1:e7:ff:d7:4e:07:67:db:58:f7:5e:34:ef:a6:8d:
                    79:3d:6e:e5:4f:ed:63:b0:ad:8f:67:6f:3a:e3:f6:
                    56:cf:43:a4:43:63:6c:93:0c:28:7a:c3:b7:5d:9a:
                    d7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E1:11:87:E1:87:C2:16:7F:8F:E6:D4:10:05:B9:95:D2:8C:B6:F3
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383035303a3a2f34342d3438203d3e20313939333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8050::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:c5:19:f8:c1:ab:11:eb:0d:25:93:31:c2:e5:86:60:c3:77:
         e7:ce:bf:78:37:d2:98:52:9d:8c:5b:52:68:a2:0a:44:3c:b2:
         50:87:62:8f:30:84:9e:30:ca:55:c3:ae:89:7b:ff:2e:cb:41:
         ae:67:e9:ce:d5:c3:ac:51:94:b3:b1:38:8b:a7:11:bf:fe:93:
         2d:04:ba:76:a7:ed:b0:b1:32:11:b5:da:9e:77:8a:31:b4:24:
         a8:4d:d5:08:34:06:bc:f0:d6:40:7a:7d:14:03:c4:05:9f:8d:
         cb:08:de:34:a4:2b:32:04:2f:97:9e:b7:78:08:dd:bd:6b:f9:
         c0:a3:9e:29:6a:31:b5:ec:69:d4:54:90:7e:e1:8e:44:2b:5d:
         0b:81:9f:cf:69:ae:2c:7f:92:ce:bc:81:1a:c5:d5:d3:65:f9:
         2d:8b:6f:31:94:60:b8:74:c1:7a:37:e0:05:2d:ba:22:e8:b1:
         23:a9:ac:16:8c:ec:31:63:44:66:e6:9c:15:ba:0e:30:17:41:
         9b:9f:d1:7c:b2:3d:11:83:e9:92:96:95:54:1f:47:59:df:e5:
         39:4b:5a:93:a7:a3:62:7f:b4:d2:2f:f0:4d:cf:88:57:b2:7c:
         12:8d:01:24:70:55:9b:cc:66:c2:04:77:ff:d9:7d:bc:73:75:
         18:19:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----