Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383330303a3a2f34302d3438203d3e20313939313737.roa
File:                     326131333a633030373a383330303a3a2f34302d3438203d3e20313939313737.roa (raw, json)
Hash identifier:          ABEIVf5ktOo4x7ekxL7OibpHPPC/CVfTX2u9/pCevHI=
Subject key identifier:   D3:A9:E1:FE:57:47:8E:20:6D:4F:26:91:27:7A:A6:36:EB:80:18:9E
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       03A8B71B27A97A41054B81029E1F995246078F67
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383330303a3a2f34302d3438203d3e20313939313737.roa
Signing time:             Sat 08 Apr 2023 09:22:04 +0000
ROA not before:           Sat 08 Apr 2023 09:17:04 +0000
ROA not after:            Sat 06 Apr 2024 09:22:04 +0000
asID:                     199177
IP address blocks:        2a13:c007:8300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a8:b7:1b:27:a9:7a:41:05:4b:81:02:9e:1f:99:52:46:07:8f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:04 2023 GMT
            Not After : Apr  6 09:22:04 2024 GMT
        Subject: CN=D3A9E1FE57478E206D4F2691277AA636EB80189E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:8d:70:f7:cc:9b:c6:74:e0:ea:98:2c:cf:
                    7a:6f:ef:c7:f6:81:25:c4:70:b2:88:b9:53:47:23:
                    df:14:8f:ac:a7:c6:c5:5c:ec:0c:21:97:49:65:51:
                    5f:c5:44:65:33:78:c8:66:55:f9:77:d8:d4:01:cf:
                    a3:57:32:28:69:eb:c5:19:08:89:d0:13:05:9a:fe:
                    9e:7d:3e:c9:cc:8b:23:a0:25:2e:56:55:b1:87:3f:
                    2f:6f:6c:18:de:8a:c8:51:39:f2:00:64:28:ed:4f:
                    97:9c:c9:01:c4:40:2a:d4:19:89:81:5a:8a:9c:c9:
                    17:3a:30:9d:09:30:67:68:6d:43:f2:9f:95:5b:e2:
                    f5:97:e4:f9:9b:27:c1:f0:73:91:15:4c:e2:43:c4:
                    5e:44:42:ea:b8:2b:b5:6a:b1:b6:15:bc:76:1d:24:
                    65:e7:94:16:13:17:4b:e8:a7:32:1a:1c:99:d9:a3:
                    3c:5d:4e:a0:9f:b8:7c:a4:5f:c2:2b:7e:8f:1e:cd:
                    27:28:db:6a:b3:a1:36:68:7f:ee:6a:5a:11:58:3f:
                    37:30:4f:d7:01:de:1d:e9:04:4c:0c:42:94:48:a5:
                    8e:20:80:ab:48:97:64:8a:09:14:bd:e3:96:78:50:
                    be:32:a4:85:f7:bd:79:ed:42:89:04:ab:9d:9c:c7:
                    8e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A9:E1:FE:57:47:8E:20:6D:4F:26:91:27:7A:A6:36:EB:80:18:9E
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383330303a3a2f34302d3438203d3e20313939313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:2f:87:5e:37:c6:3b:71:4e:d2:c7:3a:e4:01:d0:ff:3f:40:
         9c:9a:0e:aa:3f:90:b7:a5:dd:4c:0c:46:24:2e:77:63:96:c5:
         b4:04:06:43:81:ab:ee:f8:bb:91:7f:09:a0:0e:50:b8:d1:a5:
         fa:be:04:3d:74:28:7c:0a:31:79:5c:cd:cd:95:0a:d5:b0:c1:
         80:ec:3a:42:d0:8e:1b:3d:69:82:7b:1d:0b:e8:2f:ac:cf:3b:
         b3:30:8d:50:2c:3f:1e:a8:e4:6a:8b:4f:64:b7:94:73:25:a8:
         94:e8:4b:a0:a5:38:e1:fd:51:82:b6:7e:f6:e6:cc:af:15:48:
         21:25:f1:7e:8b:c9:e2:fb:2c:8a:79:4e:90:2c:9f:c6:34:6b:
         d8:62:13:f9:41:82:c0:3e:be:d6:e3:6c:53:c2:c3:6c:b3:39:
         ed:a2:aa:18:b9:a4:df:32:13:14:d3:c9:39:5b:bc:f8:d0:cc:
         42:67:ba:f1:0d:9b:8e:01:42:82:0e:9f:b8:9d:df:be:e3:78:
         b7:c3:03:06:b6:9c:0d:77:a4:8d:5b:cd:99:43:5c:16:78:d1:
         59:68:64:64:f4:98:c6:fe:8d:04:7c:b2:78:37:6c:3c:63:0e:
         b0:5b:a0:38:21:50:17:ca:b7:5e:4e:68:b6:80:1a:15:2a:01:
         ab:f3:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----