Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030303a3a2f32392d3239203d3e203530303538.roa
File:                     326131333a633030303a3a2f32392d3239203d3e203530303538.roa (raw, json)
Hash identifier:          tvroUrok8TVWMb5pJhqvt/Id2Fw3kscfZwbj56pzdCg=
Subject key identifier:   12:B2:5D:88:E1:FC:16:4F:98:FF:BF:1D:12:63:64:22:AA:59:F5:1E
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       344F80D67D967FDA1F88CFCF64E2F81821F562F2
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030303a3a2f32392d3239203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:25:51 +0000
ROA not before:           Sat 08 Apr 2023 03:20:51 +0000
ROA not after:            Sat 06 Apr 2024 03:25:51 +0000
asID:                     50058
IP address blocks:        2a13:c000::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4f:80:d6:7d:96:7f:da:1f:88:cf:cf:64:e2:f8:18:21:f5:62:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:51 2023 GMT
            Not After : Apr  6 03:25:51 2024 GMT
        Subject: CN=12B25D88E1FC164F98FFBF1D12636422AA59F51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:81:d4:66:fc:9c:c4:3d:84:54:0f:1e:f9:
                    ee:b1:3a:a3:c6:61:1f:13:e9:64:96:e0:77:4e:72:
                    99:ed:41:0e:0d:28:ee:fb:d7:c8:95:a5:35:e0:67:
                    77:df:f6:7b:f3:4e:03:6f:7f:7f:52:a9:a7:49:51:
                    dd:81:97:27:63:a6:0d:37:90:1b:03:05:e3:96:e5:
                    7f:67:b3:b1:b7:7f:c1:b9:2a:56:9e:8f:49:59:d4:
                    63:c3:af:6e:7f:b9:77:12:71:80:4e:e3:6d:93:7c:
                    cb:bb:c4:e3:34:58:ec:03:95:77:4d:25:8b:b8:72:
                    56:c9:a9:80:5c:f8:15:b3:17:9d:a6:eb:ce:03:62:
                    70:10:55:c9:7e:c7:e2:da:1c:18:8b:d9:00:59:30:
                    b8:d8:da:b8:85:67:f5:04:09:3f:b2:fb:65:d9:95:
                    46:6b:fe:9c:fc:9b:a5:a6:3c:86:3c:83:da:06:ea:
                    0e:89:56:ba:44:8b:9d:01:4b:f3:ad:d1:3a:ea:7d:
                    64:d8:7d:53:da:11:ba:41:9f:03:8a:eb:8d:53:cc:
                    b3:d5:f3:b8:f0:ed:cd:70:80:c4:ca:a3:fd:57:b1:
                    f5:4f:20:b1:a7:f4:e8:13:a8:88:03:e2:dc:80:fa:
                    c1:42:4e:f4:5c:b7:24:d5:93:5a:dc:6c:b6:b4:84:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B2:5D:88:E1:FC:16:4F:98:FF:BF:1D:12:63:64:22:AA:59:F5:1E
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030303a3a2f32392d3239203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000::/29

    Signature Algorithm: sha256WithRSAEncryption
         2e:17:85:b4:12:f0:16:f6:54:cb:b9:aa:3d:a1:e2:f6:70:4c:
         c5:13:d8:fe:be:de:1f:e1:90:ac:9f:ba:66:c6:67:dd:71:2c:
         a6:b3:f6:0c:5b:b2:de:61:3e:e9:fd:11:0f:ea:91:5d:74:6e:
         fa:c3:60:d5:db:b1:b3:99:2c:b1:82:67:20:61:8c:f6:c9:e0:
         1c:cf:9b:76:e8:66:93:8c:38:57:50:8e:3c:a0:b2:b9:85:93:
         9e:19:1f:c4:7b:a8:c5:3e:a8:e4:5d:e6:78:e4:d8:b5:56:fc:
         e8:35:30:78:e8:e8:5b:17:7b:aa:3c:61:1a:6f:d6:4f:82:5f:
         9a:89:14:82:9f:9f:97:59:f2:75:7c:67:9d:29:8f:bb:4e:4b:
         99:73:c2:b0:22:61:83:91:a9:ad:e2:6b:94:11:5d:c7:55:ad:
         62:a4:0a:44:db:56:5e:09:33:b5:e5:68:31:16:9b:3f:2c:e6:
         ff:3c:45:9e:25:44:7d:14:af:83:3d:6e:42:f6:d1:c2:2f:ca:
         c3:aa:a3:7d:13:fc:a7:93:f6:c8:a4:1b:02:36:91:36:4e:25:
         8e:e5:50:c7:09:85:7f:ad:82:ce:e9:8f:ba:7c:ab:6f:2a:36:
         44:90:33:8d:52:98:06:37:3b:a5:37:ae:91:54:4a:49:b3:a6:
         6c:cb:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----