Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383039303a3a2f34342d3438203d3e20313939323237.roa
File:                     326131333a633030373a383039303a3a2f34342d3438203d3e20313939323237.roa (raw, json)
Hash identifier:          JpNEF0SS1CVawHdq8wTOYGvq7gxDP30pWQXSUITMLU8=
Subject key identifier:   EF:64:61:E8:4A:DB:41:F5:90:14:73:D8:5E:4F:5A:AB:26:19:D0:78
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       02688799F40BAC67452EC84C493B1F00EB9051DE
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383039303a3a2f34342d3438203d3e20313939323237.roa
Signing time:             Sat 08 Apr 2023 09:22:06 +0000
ROA not before:           Sat 08 Apr 2023 09:17:06 +0000
ROA not after:            Sat 06 Apr 2024 09:22:06 +0000
asID:                     199227
IP address blocks:        2a13:c007:8090::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:68:87:99:f4:0b:ac:67:45:2e:c8:4c:49:3b:1f:00:eb:90:51:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:06 2023 GMT
            Not After : Apr  6 09:22:06 2024 GMT
        Subject: CN=EF6461E84ADB41F5901473D85E4F5AAB2619D078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:93:ae:96:23:eb:84:70:07:d1:a8:b0:4e:
                    f6:2b:08:43:0e:6f:89:ef:d2:3f:12:fd:9b:6c:9a:
                    59:e9:ba:62:ec:a1:46:f3:9c:f8:21:66:36:51:1f:
                    5f:26:05:2a:18:82:ea:97:84:67:00:8d:7c:24:63:
                    17:d5:19:10:92:4b:b2:66:dd:1a:4e:4b:b3:f4:9b:
                    26:fd:70:56:d4:bd:46:4f:ca:65:be:f9:9c:14:2c:
                    62:36:50:a1:2c:0a:0a:7f:f6:52:df:e8:7f:7d:84:
                    5b:0b:54:6b:69:38:9b:31:ed:41:40:bb:84:ba:08:
                    d4:c6:f9:2c:06:d7:01:84:19:cd:2b:0a:ca:fe:6b:
                    38:5b:12:b5:02:26:b3:f4:fc:a3:49:a6:2e:71:cc:
                    4f:93:3e:5e:c2:d4:e6:09:9a:65:45:cf:39:15:90:
                    c3:8a:8a:c8:60:34:04:b5:a4:18:65:be:9b:b7:ca:
                    77:cb:ed:b0:89:9a:cd:70:8c:6b:3c:44:f6:7c:ed:
                    2c:a6:0e:52:e9:31:b2:24:9f:1e:59:32:4d:58:09:
                    35:43:54:2e:a8:a7:d4:2b:84:8c:bf:77:a3:bf:cc:
                    1d:8b:3e:d6:b1:55:cb:ff:0a:d1:5c:d0:80:0e:e7:
                    81:64:d3:34:d4:51:3a:c4:a7:5f:85:56:b4:73:4d:
                    bb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:61:E8:4A:DB:41:F5:90:14:73:D8:5E:4F:5A:AB:26:19:D0:78
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383039303a3a2f34342d3438203d3e20313939323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8090::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:45:a1:02:c4:48:d1:f1:b7:7c:6c:bc:86:41:02:8a:9e:a1:
         e2:c2:18:d5:a7:cc:d3:fb:71:d3:26:ea:e7:f4:12:c1:e7:04:
         98:0a:30:33:d0:5b:39:c5:c3:c9:0a:b0:39:93:bb:89:10:3e:
         50:f6:78:8e:ba:b4:53:be:15:dd:2e:62:4d:2b:f3:99:57:3e:
         3d:df:b3:2a:4b:2c:bd:84:c9:d9:9b:82:a3:60:2c:80:45:87:
         17:dd:e1:d5:b2:36:e6:83:e9:99:b5:61:d7:f5:98:b3:cb:d9:
         75:25:81:77:4b:51:30:e4:b1:de:9c:ca:f6:b6:52:99:29:7c:
         0c:74:db:29:f7:e0:e6:ce:9a:53:93:39:0a:f7:1a:e1:7d:1e:
         30:52:f3:3f:cd:ec:36:ec:a3:55:ab:b4:2d:ed:d3:8e:4e:52:
         cd:dd:9c:37:36:a1:5b:7c:37:81:31:5b:55:97:fc:58:87:f1:
         63:38:11:be:e4:3d:d8:45:a4:06:87:70:46:b7:b3:00:1f:33:
         0b:e6:02:0c:aa:3e:9c:9c:e8:e4:f1:3a:2c:86:38:7a:09:b5:
         58:07:4e:e5:9b:c0:57:28:be:61:0b:26:d5:a5:a7:af:46:76:
         11:cb:59:30:25:4b:cd:9e:3c:a6:c9:b0:c9:14:7e:69:9e:94:
         b2:56:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----