Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa
File:                     326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa (raw, json)
Hash identifier:          fPWrwCqTvkqsIzyz13Rn+ehK/mDIsXbJfln5ypqvnNM=
Subject key identifier:   A4:F2:5A:1B:3D:83:73:DD:D5:48:35:AF:77:05:BB:D5:A1:39:BB:2B
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       3D2A4053567530C3414AB9423FB648714B0C3DFA
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa
Signing time:             Sat 08 Apr 2023 09:22:05 +0000
ROA not before:           Sat 08 Apr 2023 09:17:05 +0000
ROA not after:            Sat 06 Apr 2024 09:22:05 +0000
asID:                     199186
IP address blocks:        2a13:c007:8500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2a:40:53:56:75:30:c3:41:4a:b9:42:3f:b6:48:71:4b:0c:3d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:05 2023 GMT
            Not After : Apr  6 09:22:05 2024 GMT
        Subject: CN=A4F25A1B3D8373DDD54835AF7705BBD5A139BB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:44:a0:ef:27:01:72:1a:74:ac:cc:ba:cf:
                    59:44:c3:41:7c:fc:ed:48:72:04:88:92:e2:40:16:
                    95:d1:2e:83:f2:68:66:f7:0c:07:22:83:83:aa:d0:
                    78:4e:40:b7:d1:55:c7:b8:6c:ff:64:ea:af:c8:fa:
                    a5:5e:d8:43:eb:16:99:29:aa:bc:5a:ba:9b:a9:f2:
                    e6:b5:40:39:80:d7:1d:ae:93:4c:1a:b5:22:83:f7:
                    d2:f5:d8:75:a4:57:17:77:fa:4f:76:7e:91:70:c4:
                    31:39:4f:f1:be:cc:dc:4a:43:a0:8b:9f:5a:ef:4d:
                    1b:93:09:36:45:df:19:d2:f4:46:8e:5f:ef:dd:f3:
                    c2:be:1c:d8:48:7e:3e:e9:fa:bf:fe:76:5e:1a:c0:
                    1d:99:84:0c:c2:09:34:e9:e6:9f:a4:67:82:55:22:
                    f4:d8:ac:2b:eb:fb:72:14:98:8c:4b:76:de:0e:2a:
                    5c:9c:0d:f1:29:8d:3e:b6:ae:3c:38:d5:50:34:e2:
                    65:57:61:88:03:1a:3f:db:a4:4f:75:34:a9:05:18:
                    ff:8d:12:6e:e3:25:5a:3f:69:b6:2d:65:18:ac:81:
                    05:b0:fe:e7:4e:98:8c:59:77:27:5e:00:63:d7:26:
                    29:36:e0:3a:1f:f2:61:dc:b3:d2:fe:b0:c1:28:a7:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:5A:1B:3D:83:73:DD:D5:48:35:AF:77:05:BB:D5:A1:39:BB:2B
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:55:96:db:e7:f0:79:2f:b7:8e:24:38:81:4c:cb:85:97:39:
         a3:71:cd:6f:a8:e2:4a:51:71:1e:8e:a6:56:f7:53:04:d2:27:
         74:3b:72:21:51:dc:5a:9a:ff:a9:58:6e:7a:1f:67:1e:4a:d1:
         8e:2e:56:8c:20:13:0d:53:57:7d:26:4d:ec:93:7b:30:73:a9:
         6d:c1:8e:34:54:bb:65:3f:1a:92:dc:f0:a1:af:ec:02:b6:8f:
         e5:14:0b:8f:32:e2:55:5c:36:6c:b9:ee:7f:11:3d:3b:fd:a3:
         34:ed:37:f2:23:f2:72:ab:7d:56:e2:32:6f:e3:5b:04:1b:72:
         9a:9d:7b:24:9f:0b:90:32:ea:a7:14:51:ba:1c:ee:ec:dd:93:
         00:67:8c:69:a8:bb:ce:c4:f9:56:6b:14:8a:4b:1e:12:d0:29:
         d8:77:f7:70:d0:37:8a:dd:7a:fb:69:e2:bb:1d:71:5a:82:d0:
         af:82:7e:8b:8d:9e:ec:05:ca:3a:d6:4f:82:73:6c:01:01:04:
         24:12:91:5e:4b:ca:3f:a9:a3:b6:09:10:aa:99:09:94:2d:05:
         19:7b:ef:fc:4a:67:61:27:42:02:0b:e1:8c:98:d1:cb:d5:8e:
         c4:fc:a8:ab:65:98:89:9f:c1:00:73:33:5a:44:6c:b0:03:2b:
         10:21:af:3b
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUPSpAU1Z1MMNBSrlCP7ZIcUsMPfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0MzcxQURFMTNEQThFOTZCOTdBRkEwQ0YzREYzMDk0
QUFCMERCMDAeFw0yMzA0MDgwOTE3MDVaFw0yNDA0MDYwOTIyMDVaMDMxMTAvBgNV
BAMTKEE0RjI1QTFCM0Q4MzczRERENTQ4MzVBRjc3MDVCQkQ1QTEzOUJCMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+0Sg7ycBchp0rMy6z1lEw0F8
/O1IcgSIkuJAFpXRLoPyaGb3DAcig4Oq0HhOQLfRVce4bP9k6q/I+qVe2EPrFpkp
qrxaupup8ua1QDmA1x2uk0watSKD99L12HWkVxd3+k92fpFwxDE5T/G+zNxKQ6CL
n1rvTRuTCTZF3xnS9EaOX+/d88K+HNhIfj7p+r/+dl4awB2ZhAzCCTTp5p+kZ4JV
IvTYrCvr+3IUmIxLdt4OKlycDfEpjT62rjw41VA04mVXYYgDGj/bpE91NKkFGP+N
Em7jJVo/abYtZRisgQWw/udOmIxZdydeAGPXJik24Dof8mHcs9L+sMEopy8bAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQUpPJaGz2Dc93VSDWvdwW71aE5uyswHwYDVR0j
BBgwFoAUDUNxreE9qOlrl6+gzz3zCUqrDbAwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC85LzBENDM3
MUFERTEzREE4RTk2Qjk3QUZBMENGM0RGMzA5NEFBQjBEQjAuY3JsMGUGCCsGAQUF
BwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC8x
NC8wRDQzNzFBREUxM0RBOEU5NkI5N0FGQTBDRjNERjMwOTRBQUIwREIwLmNlcjB+
BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5jby9yZXBv
L0F1Z3VzdC85LzMyNjEzMTMzM2E2MzMwMzAzNzNhMzgzNTMwMzAzYTNhMmYzNDMw
MmQzNDM4MjAzZDNlMjAzMTM5MzkzMTM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqE8AHhTANBgkq
hkiG9w0BAQsFAAOCAQEAkVWW2+fweS+3jiQ4gUzLhZc5o3HNb6jiSlFxHo6mVvdT
BNIndDtyIVHcWpr/qVhueh9nHkrRji5WjCATDVNXfSZN7JN7MHOpbcGONFS7ZT8a
ktzwoa/sAraP5RQLjzLiVVw2bLnufxE9O/2jNO038iPycqt9VuIyb+NbBBtymp17
JJ8LkDLqpxRRuhzu7N2TAGeMaai7zsT5VmsUikseEtAp2Hf3cNA3it16+2niux1x
WoLQr4J+i42e7AXKOtZPgnNsAQEEJBKRXkvKP6mjtgkQqpkJlC0FGXvv/EpnYSdC
AgvhjJjRy9WOxPyoq2WYiZ/BAHMzWkRssAMrECGvOw==
-----END CERTIFICATE-----