Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Bee/1/326131323a646434373a646136393a3a2f34382d3438203d3e20313939363933.roa
File:                     326131323a646434373a646136393a3a2f34382d3438203d3e20313939363933.roa (raw, json)
Hash identifier:          DyOYqyhNGg6PqVMEqk99DbqJ3Cfu5czlKhz+2NyWV6A=
Subject key identifier:   0F:97:1B:BC:90:93:F3:59:00:E4:E3:F5:EE:4A:72:F6:2D:FE:5E:D2
Certificate issuer:       /CN=7E33A908D6350A322FA03630A59582A284A95C5D
Certificate serial:       31D922F1EA82FA823C95BEDFF33CE382D3A2E8B8
Authority key identifier: 7E:33:A9:08:D6:35:0A:32:2F:A0:36:30:A5:95:82:A2:84:A9:5C:5D
Authority info access:    rsync://rpki.co/repo/AS945/1/7E33A908D6350A322FA03630A59582A284A95C5D.cer
Subject info access:      rsync://rpki.co/repo/Bee/1/326131323a646434373a646136393a3a2f34382d3438203d3e20313939363933.roa
Signing time:             Thu 13 Apr 2023 10:01:25 +0000
ROA not before:           Thu 13 Apr 2023 09:56:25 +0000
ROA not after:            Thu 11 Apr 2024 10:01:25 +0000
asID:                     199693
IP address blocks:        2a12:dd47:da69::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d9:22:f1:ea:82:fa:82:3c:95:be:df:f3:3c:e3:82:d3:a2:e8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E33A908D6350A322FA03630A59582A284A95C5D
        Validity
            Not Before: Apr 13 09:56:25 2023 GMT
            Not After : Apr 11 10:01:25 2024 GMT
        Subject: CN=0F971BBC9093F35900E4E3F5EE4A72F62DFE5ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:d8:ec:ec:ba:d4:45:cf:d0:9e:44:46:b7:
                    36:c7:65:28:12:9c:08:e5:e5:f8:b8:f7:78:83:1b:
                    d9:10:c1:53:b6:e2:4a:5b:a9:2a:6b:c8:19:97:ea:
                    a3:2c:81:d5:98:d5:90:f0:c0:49:2e:06:8d:73:f0:
                    60:69:c7:cd:df:3f:2b:17:fd:65:cc:5e:c2:89:81:
                    4e:28:31:12:cf:70:8d:46:8e:ed:4f:12:3a:e8:17:
                    53:c4:d5:d6:7a:f6:ae:ba:ca:09:4b:f6:b1:bd:63:
                    df:8c:98:64:68:9d:56:ce:e4:ec:c9:7a:40:c0:de:
                    88:26:28:a0:74:ac:9c:b6:9f:70:89:c7:a0:ae:9e:
                    52:fb:a2:95:61:e4:53:e9:39:4d:cd:2e:3f:43:f6:
                    8c:c7:4b:0d:37:ca:de:03:cd:ce:fb:86:96:81:d9:
                    02:f4:bb:72:82:22:c3:14:c8:0f:a5:57:15:c0:e8:
                    54:06:53:78:54:94:46:aa:ad:70:29:a9:18:3d:58:
                    f3:49:a6:1d:89:23:d4:06:c1:6c:4a:9b:5d:5d:91:
                    22:ec:4e:f5:b0:81:37:65:1e:5c:03:67:e9:c1:e7:
                    7c:e5:d3:07:6b:ac:21:ee:7d:69:98:95:af:e4:2e:
                    1c:85:fd:ba:d3:3a:39:44:59:e4:44:ff:12:ea:5d:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:97:1B:BC:90:93:F3:59:00:E4:E3:F5:EE:4A:72:F6:2D:FE:5E:D2
            X509v3 Authority Key Identifier:
                keyid:7E:33:A9:08:D6:35:0A:32:2F:A0:36:30:A5:95:82:A2:84:A9:5C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Bee/1/7E33A908D6350A322FA03630A59582A284A95C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/7E33A908D6350A322FA03630A59582A284A95C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Bee/1/326131323a646434373a646136393a3a2f34382d3438203d3e20313939363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:da69::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:f3:13:3b:b1:5f:c4:a9:c7:d6:de:ed:5f:88:92:b3:c3:6b:
         4c:d0:c9:b1:bf:c9:51:d1:ba:62:57:5c:d0:71:7d:45:19:12:
         35:b0:37:36:43:82:82:c4:6c:5b:1d:a0:f2:cd:9f:72:da:33:
         9a:d7:48:89:c8:5c:b1:c6:d4:2c:db:de:8b:e8:64:78:9d:eb:
         a4:3f:bb:c1:65:e8:33:68:2f:d7:5f:fb:a2:0a:57:f7:4b:27:
         02:a3:a5:19:92:5c:14:3e:e0:fe:34:4a:76:ca:31:f4:bb:99:
         7c:f9:17:24:05:b6:d8:32:7b:af:25:44:a8:04:65:b2:5e:9d:
         e3:c6:e2:79:9b:f2:a4:77:0f:36:59:c8:65:cd:9f:01:c3:cc:
         25:80:01:63:d7:02:4a:cd:00:6b:7e:77:0f:2f:f9:a2:91:d9:
         1a:42:ab:19:78:f3:04:b5:8b:01:50:97:8d:f9:6c:22:d5:51:
         b3:50:85:c4:23:a5:eb:e9:05:0f:e0:1d:df:d9:c6:3c:29:ee:
         5b:a5:8b:4f:6c:6e:0c:11:5a:8d:ad:c8:de:48:83:8f:85:35:
         5f:6f:5d:2f:b7:14:e6:b7:12:7d:5b:76:0e:e0:c9:04:0e:ed:
         bd:ba:26:e1:aa:fd:2b:e0:b0:fb:1f:7c:ee:29:5c:b5:fb:5f:
         e6:d4:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----