Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/9/326131333a633030373a383930303a3a2f34302d3430203d3e20313939313732.roa
File:                     326131333a633030373a383930303a3a2f34302d3430203d3e20313939313732.roa (raw, json)
Hash identifier:          o6Q/duN0qKaVhRgJ0lmpSsRwy2tJJj1X9Esec7zAHJU=
Subject key identifier:   E3:AC:00:EA:27:9A:62:1E:43:11:79:5D:69:96:E4:50:52:76:DF:94
Certificate issuer:       /CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
Certificate serial:       46B93A36999A844E65249FC74A1AD7C4D4F2F7F3
Authority key identifier: 0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0
Authority info access:    rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer
Subject info access:      rsync://rpki.co/repo/August/9/326131333a633030373a383930303a3a2f34302d3430203d3e20313939313732.roa
Signing time:             Sat 08 Apr 2023 09:22:04 +0000
ROA not before:           Sat 08 Apr 2023 09:17:04 +0000
ROA not after:            Sat 06 Apr 2024 09:22:04 +0000
asID:                     199172
IP address blocks:        2a13:c007:8900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b9:3a:36:99:9a:84:4e:65:24:9f:c7:4a:1a:d7:c4:d4:f2:f7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0
        Validity
            Not Before: Apr  8 09:17:04 2023 GMT
            Not After : Apr  6 09:22:04 2024 GMT
        Subject: CN=E3AC00EA279A621E4311795D6996E4505276DF94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:b8:64:5b:17:c1:de:80:e5:46:52:05:eb:
                    b4:8e:67:7c:9b:7a:6b:91:35:7a:58:06:73:91:bb:
                    8b:57:31:fd:9c:a7:56:01:1d:b6:08:59:c0:6d:a2:
                    99:96:23:c8:60:10:84:ce:7a:a9:d1:4b:ac:0f:8b:
                    39:2b:44:30:88:62:c5:0c:1a:69:01:ed:14:d7:ea:
                    df:c4:e9:55:88:f4:d9:ea:2e:1b:5a:ec:3f:af:2b:
                    1d:09:17:2d:71:ff:30:aa:e1:21:f3:c9:8b:25:0b:
                    93:af:9f:4a:9b:7f:b7:82:52:d2:c0:f8:f5:23:f6:
                    9e:de:62:5a:ba:d2:ec:42:51:2d:9c:15:41:5a:55:
                    a0:33:8c:96:75:0e:e4:02:12:2b:7f:80:24:b2:6a:
                    f9:20:b7:f8:77:1b:49:11:2c:93:6c:e7:97:a0:ec:
                    de:0a:60:78:f2:31:a8:c8:52:4c:55:45:2e:90:5b:
                    10:94:63:d5:09:27:a8:56:41:65:ac:6d:73:2d:8f:
                    94:45:a3:45:27:6a:c7:9a:b2:11:84:9e:54:be:ee:
                    be:9c:a2:a8:ab:0b:36:82:e2:32:f4:bc:eb:b4:eb:
                    ac:ca:ee:b1:11:38:4c:17:b7:6d:94:48:d0:67:48:
                    c1:87:42:0b:7a:1b:42:b5:7b:61:fe:40:db:d5:7c:
                    08:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AC:00:EA:27:9A:62:1E:43:11:79:5D:69:96:E4:50:52:76:DF:94
            X509v3 Authority Key Identifier:
                keyid:0D:43:71:AD:E1:3D:A8:E9:6B:97:AF:A0:CF:3D:F3:09:4A:AB:0D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/9/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/14/0D4371ADE13DA8E96B97AFA0CF3DF3094AAB0DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/9/326131333a633030373a383930303a3a2f34302d3430203d3e20313939313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:80:b7:59:1e:31:d5:21:52:26:7a:b6:2c:5a:d7:b9:9a:d8:
         4d:48:9d:7b:53:60:c1:71:82:bb:8a:b8:a8:6c:a9:ad:f5:0d:
         a7:78:2f:a4:3f:96:69:a6:fc:b4:48:89:85:fb:82:85:5a:99:
         ad:72:22:1d:c7:da:32:c6:59:cd:21:1a:63:ec:dc:03:05:24:
         53:e4:d7:f1:fe:50:55:7d:8f:c4:33:11:b4:48:e4:00:34:36:
         f0:44:91:41:41:aa:ad:eb:ab:67:95:76:88:4a:f7:5d:44:38:
         b4:56:e0:8f:4d:2f:cb:a1:90:3e:ac:7f:c0:2b:d9:ce:c5:57:
         b4:61:61:b1:8d:87:0d:b3:d6:09:85:c2:35:21:af:1a:e9:95:
         c5:8c:73:7d:79:22:c4:1b:30:8c:61:f3:59:8f:03:08:9d:45:
         c4:0d:5f:aa:2b:f9:c8:8a:94:fe:fc:88:6a:6c:e4:62:d4:dd:
         57:d1:42:ee:64:2e:75:6a:c0:88:ec:97:33:57:e0:5c:f7:80:
         cc:3a:0e:76:f1:35:22:e5:b8:c2:a3:af:6a:75:71:df:0b:db:
         d8:3a:61:c2:d8:79:4b:90:6f:2d:8c:b5:65:c3:03:a5:8f:ba:
         b5:4d:dd:b8:d4:01:c9:5f:04:35:22:a7:cd:60:bf:1a:bc:c1:
         18:4d:cd:22
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIURrk6NpmahE5lJJ/HShrXxNTy9/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0MzcxQURFMTNEQThFOTZCOTdBRkEwQ0YzREYzMDk0
QUFCMERCMDAeFw0yMzA0MDgwOTE3MDRaFw0yNDA0MDYwOTIyMDRaMDMxMTAvBgNV
BAMTKEUzQUMwMEVBMjc5QTYyMUU0MzExNzk1RDY5OTZFNDUwNTI3NkRGOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BbhkWxfB3oDlRlIF67SOZ3yb
emuRNXpYBnORu4tXMf2cp1YBHbYIWcBtopmWI8hgEITOeqnRS6wPizkrRDCIYsUM
GmkB7RTX6t/E6VWI9NnqLhta7D+vKx0JFy1x/zCq4SHzyYslC5Ovn0qbf7eCUtLA
+PUj9p7eYlq60uxCUS2cFUFaVaAzjJZ1DuQCEit/gCSyavkgt/h3G0kRLJNs55eg
7N4KYHjyMajIUkxVRS6QWxCUY9UJJ6hWQWWsbXMtj5RFo0UnaseashGEnlS+7r6c
oqirCzaC4jL0vOu066zK7rEROEwXt22USNBnSMGHQgt6G0K1e2H+QNvVfAhlAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQU46wA6ieaYh5DEXldaZbkUFJ235QwHwYDVR0j
BBgwFoAUDUNxreE9qOlrl6+gzz3zCUqrDbAwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC85LzBENDM3
MUFERTEzREE4RTk2Qjk3QUZBMENGM0RGMzA5NEFBQjBEQjAuY3JsMGUGCCsGAQUF
BwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC8x
NC8wRDQzNzFBREUxM0RBOEU5NkI5N0FGQTBDRjNERjMwOTRBQUIwREIwLmNlcjB+
BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5jby9yZXBv
L0F1Z3VzdC85LzMyNjEzMTMzM2E2MzMwMzAzNzNhMzgzOTMwMzAzYTNhMmYzNDMw
MmQzNDMwMjAzZDNlMjAzMTM5MzkzMTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqE8AHiTANBgkq
hkiG9w0BAQsFAAOCAQEASYC3WR4x1SFSJnq2LFrXuZrYTUide1NgwXGCu4q4qGyp
rfUNp3gvpD+Waab8tEiJhfuChVqZrXIiHcfaMsZZzSEaY+zcAwUkU+TX8f5QVX2P
xDMRtEjkADQ28ESRQUGqreurZ5V2iEr3XUQ4tFbgj00vy6GQPqx/wCvZzsVXtGFh
sY2HDbPWCYXCNSGvGumVxYxzfXkixBswjGHzWY8DCJ1FxA1fqiv5yIqU/vyIamzk
YtTdV9FC7mQudWrAiOyXM1fgXPeAzDoOdvE1IuW4wqOvanVx3wvb2Dphwth5S5Bv
LYy1ZcMDpY+6tU3duNQByV8ENSKnzWC/GrzBGE3NIg==
-----END CERTIFICATE-----