Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa
File:                     326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa (raw, json)
Hash identifier:          ihJqDsaDrOI1dLKbzLtfAlMNNzn+wuYkzh0b1qMRvj8=
Subject key identifier:   C7:07:EA:50:C4:27:DC:C7:1D:8E:47:F8:5C:40:D7:1F:6A:CD:90:BD
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       1871B533A54450DE084A40BE1668E4C4E74AF812
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa
Signing time:             Sat 08 Apr 2023 03:25:52 +0000
ROA not before:           Sat 08 Apr 2023 03:20:52 +0000
ROA not after:            Sat 06 Apr 2024 03:25:52 +0000
asID:                     7719
IP address blocks:        2a13:c000:2000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:71:b5:33:a5:44:50:de:08:4a:40:be:16:68:e4:c4:e7:4a:f8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:52 2023 GMT
            Not After : Apr  6 03:25:52 2024 GMT
        Subject: CN=C707EA50C427DCC71D8E47F85C40D71F6ACD90BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:22:9e:49:ea:93:1a:f7:83:aa:b7:2d:fb:
                    99:a5:e4:3d:2d:41:17:10:73:9a:f0:52:5a:dd:1d:
                    e8:1c:d3:e7:05:38:a1:06:8d:08:bd:8d:93:2f:61:
                    36:cb:5a:97:67:96:ef:39:9e:e8:ac:b2:8f:e9:92:
                    8a:53:29:31:12:4a:66:19:75:66:db:96:a3:a8:80:
                    73:64:ee:64:6f:16:5e:c1:e4:79:db:e7:cf:8b:ba:
                    44:3b:a2:59:c5:b0:f4:a6:d2:1e:58:e7:2a:47:ab:
                    a6:05:96:ad:c0:46:7a:25:f2:98:ac:db:d9:11:e5:
                    bb:53:79:66:9a:72:d1:36:03:29:48:5a:a3:67:94:
                    46:4c:3d:09:22:39:3e:74:1b:2e:4c:2e:57:43:b8:
                    df:af:2f:4f:6b:0d:21:91:38:c4:04:96:79:36:99:
                    29:dd:6b:2d:f4:1a:ba:34:e8:c3:bd:ff:9c:bc:28:
                    c5:cf:29:ba:e3:0e:d4:1e:24:d6:45:f0:c8:1a:c5:
                    14:ea:be:1d:1f:ec:f6:ed:0c:9b:77:41:d2:36:8a:
                    ac:54:80:e9:57:5e:57:58:21:13:0e:a6:f8:f0:62:
                    97:71:9d:35:13:56:a5:28:6c:d4:2f:b3:d5:ac:1f:
                    b7:a6:c4:56:43:45:87:fb:15:16:ab:9a:82:3b:8f:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:07:EA:50:C4:27:DC:C7:1D:8E:47:F8:5C:40:D7:1F:6A:CD:90:BD
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030303a323030303a3a2f34302d3430203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:5d:7b:a5:2b:c1:2c:1b:ab:d1:1b:57:bc:4f:33:0a:15:7d:
         29:f0:4d:2f:74:2e:09:d4:ed:26:b8:e3:2d:27:76:05:ca:5c:
         3f:5b:6f:76:a3:11:13:3b:9e:d3:ea:4e:bf:ba:9c:63:59:61:
         bf:f4:86:00:b1:18:96:9e:b5:c8:90:32:d9:02:7e:a8:e1:e4:
         f1:3c:08:7e:74:0b:d4:b6:ad:6d:46:87:11:c9:06:06:f5:ef:
         df:59:d4:6e:aa:28:d7:f6:0a:22:78:06:c7:c4:3f:33:b7:70:
         e0:74:24:87:36:65:1b:55:5b:91:58:03:7a:6a:3a:5b:64:28:
         a1:54:db:f9:87:2a:d3:76:63:33:cb:ca:0b:24:b8:33:1e:d4:
         34:88:c6:95:f8:63:57:72:2b:a9:e4:32:b8:0a:10:c3:07:90:
         93:c8:2c:14:fc:0b:fc:53:24:8c:68:cd:fb:95:64:e6:48:75:
         cc:16:fa:71:8b:b5:fc:05:06:8c:82:b0:bb:73:5a:fd:07:31:
         90:30:7e:92:3e:e5:2f:70:9a:12:b2:cc:6a:a3:b8:6c:ce:f6:
         2b:b0:42:b2:4c:5c:59:8a:81:52:5a:10:d5:7d:7b:5b:da:e8:
         52:f7:25:61:ee:c0:04:e4:29:5d:2e:72:ca:76:0b:c0:b3:1b:
         39:9e:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----