Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383230303a3a2f34302d3438203d3e20313939303434.roa
File:                     326131333a633030373a383230303a3a2f34302d3438203d3e20313939303434.roa (raw, json)
Hash identifier:          YHR4MQxexKrbdKbx8/QXnO7U3IblHzFQHq6P6t82sak=
Subject key identifier:   92:BD:40:FC:9F:F3:F7:C2:D2:09:30:CD:5C:67:C3:01:CC:F3:26:3E
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       1013168F66D4429098F1B0DB8F0F309C4056EF58
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383230303a3a2f34302d3438203d3e20313939303434.roa
Signing time:             Sat 08 Apr 2023 09:22:03 +0000
ROA not before:           Sat 08 Apr 2023 09:17:03 +0000
ROA not after:            Sat 06 Apr 2024 09:22:03 +0000
asID:                     199044
IP address blocks:        2a13:c007:8200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:13:16:8f:66:d4:42:90:98:f1:b0:db:8f:0f:30:9c:40:56:ef:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:03 2023 GMT
            Not After : Apr  6 09:22:03 2024 GMT
        Subject: CN=92BD40FC9FF3F7C2D20930CD5C67C301CCF3263E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:97:3a:31:07:51:98:a3:76:65:3e:e9:5c:
                    33:bd:93:06:2b:82:69:c5:10:6e:4b:a5:50:53:0b:
                    a6:b1:f1:12:7c:f9:d0:f4:ee:d3:99:9d:c4:ae:69:
                    63:c4:32:a7:45:65:16:b3:ce:36:db:1f:c3:df:17:
                    5b:d7:d2:62:8d:27:8a:e5:b1:22:bb:58:4d:1e:31:
                    ff:15:8d:61:68:d0:fe:a1:de:73:bb:45:1d:43:f1:
                    51:43:d9:91:83:dc:5f:9e:c8:3d:98:7d:74:a4:a0:
                    95:1d:3a:c1:19:a8:ed:02:ee:42:b6:e0:96:b7:4f:
                    b5:ef:b4:81:9a:59:56:72:ac:68:ec:47:a8:6d:10:
                    cb:73:0f:8b:09:ca:62:94:e5:a9:19:fa:35:44:9b:
                    eb:2f:3e:1c:cb:4d:3e:79:99:c7:93:c6:32:5f:01:
                    42:c9:01:1e:5f:af:b2:9a:51:e2:b1:ba:e3:77:1f:
                    a0:fa:cc:19:8f:d8:3f:9d:ee:aa:e6:65:78:3e:2b:
                    13:15:50:d6:dc:d5:59:69:c4:0e:bb:48:e6:c3:bb:
                    8b:3a:c7:b3:c4:47:0a:93:25:ae:93:e6:d4:eb:6e:
                    dd:6c:79:d6:67:c8:ab:85:ce:96:33:a3:13:67:a7:
                    96:a6:cc:79:a0:21:75:82:18:3e:59:0a:31:ad:c3:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BD:40:FC:9F:F3:F7:C2:D2:09:30:CD:5C:67:C3:01:CC:F3:26:3E
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383230303a3a2f34302d3438203d3e20313939303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:a2:93:21:54:7a:fa:1a:e6:57:9c:0f:3d:10:9e:b4:db:9f:
         84:fe:80:6c:8f:a2:cd:60:d2:2b:f6:80:5e:a5:66:b5:54:22:
         d5:d8:81:b6:01:1f:f8:b5:ae:89:de:05:f7:32:73:9b:cb:df:
         26:be:95:a2:1f:5b:0e:1e:d5:31:b5:bf:ac:e0:94:68:d3:f0:
         5a:c8:80:31:3f:48:84:d6:94:d2:d6:6c:71:1f:c8:4b:a8:eb:
         20:72:b2:8d:89:44:f8:4e:68:17:2e:41:e2:dd:2f:1c:62:d0:
         fc:ab:a8:74:50:7d:d0:fd:fa:32:f8:fe:11:9f:31:d9:1a:db:
         9d:b4:ab:f0:74:5e:e9:e0:c4:2a:20:6f:fa:c1:92:de:04:51:
         cd:88:70:00:aa:33:21:05:f5:04:92:6c:76:71:df:10:a1:bd:
         ca:94:fc:62:5f:05:0a:10:11:03:c5:0a:22:ed:ee:a7:44:41:
         8f:e9:70:9f:ef:dc:6d:15:b9:2e:ec:ef:3b:bd:f9:bf:ce:c2:
         81:d1:b0:88:05:ba:19:02:d6:d3:72:20:d6:47:a8:40:67:8d:
         bb:47:a6:a7:0d:d2:52:49:c5:ce:23:75:cd:35:f9:6f:ca:1b:
         18:cb:0b:63:2c:15:a2:fe:83:6b:a4:87:3c:39:28:8c:dc:77:
         28:65:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----