Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa
File:                     326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa (raw, json)
Hash identifier:          1xzntpF/zKCHDun55DlJByl+cttn0ouhooGhpoPo2Ew=
Subject key identifier:   19:D0:A4:2A:E2:81:F6:E0:43:DC:B7:60:79:D7:FE:BC:5D:65:F4:4C
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       5304773A750E0D68002DFDD3912127A969BF6AF9
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa
Signing time:             Sat 08 Apr 2023 03:25:53 +0000
ROA not before:           Sat 08 Apr 2023 03:20:53 +0000
ROA not after:            Sat 06 Apr 2024 03:25:53 +0000
asID:                     49867
IP address blocks:        2a13:c007:8000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:04:77:3a:75:0e:0d:68:00:2d:fd:d3:91:21:27:a9:69:bf:6a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:53 2023 GMT
            Not After : Apr  6 03:25:53 2024 GMT
        Subject: CN=19D0A42AE281F6E043DCB76079D7FEBC5D65F44C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:54:6e:e3:2f:ba:ad:14:b4:1e:52:74:da:
                    8a:c7:66:0c:de:74:d7:78:e3:0f:38:84:94:e7:42:
                    fc:66:23:3e:5e:1a:53:94:54:fc:b7:60:71:6d:2a:
                    92:9b:6a:48:21:e3:e7:6a:a8:16:a6:ff:dc:7d:f8:
                    37:17:66:90:e9:84:0a:9a:8d:45:9a:44:80:08:7c:
                    12:56:27:87:d4:cb:26:0e:ce:8c:39:00:90:31:8b:
                    5b:32:fe:f1:ad:94:01:7b:c8:bf:fe:7e:5b:78:8f:
                    6c:c0:24:80:63:23:71:aa:91:3d:8d:05:72:06:81:
                    de:b8:73:3e:c9:1f:32:e1:04:60:d2:b2:88:51:58:
                    40:b9:b9:88:57:43:3e:cd:6c:d5:9f:25:27:9f:32:
                    e5:78:02:a8:6f:47:5f:18:da:26:14:a2:1b:44:b7:
                    f7:e1:69:f7:e4:45:d4:05:2e:66:98:8a:c4:ea:87:
                    74:85:30:2d:f2:bf:66:d5:d1:6d:59:35:14:df:b9:
                    65:7f:83:1a:98:63:df:0f:5e:f4:dd:17:cd:6a:05:
                    6c:26:0f:45:e1:d3:03:5b:a8:5a:42:21:6f:ec:4a:
                    02:b6:49:b4:0f:d7:fa:74:96:43:93:6e:ce:0b:ff:
                    d8:17:02:8d:37:79:1f:75:fd:34:d1:00:35:95:3f:
                    53:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D0:A4:2A:E2:81:F6:E0:43:DC:B7:60:79:D7:FE:BC:5D:65:F4:4C
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383030303a3a2f34342d3434203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:c7:3e:d5:45:2d:64:78:ea:fa:71:60:67:31:7a:77:cf:
         16:b6:0a:31:51:58:69:e4:98:96:e5:d0:f2:2c:ee:cf:50:75:
         3c:79:f7:50:90:90:b9:01:b9:09:d0:90:3a:db:f3:2c:ac:d3:
         0d:48:d4:9a:e1:91:6a:9b:82:db:57:40:6b:e5:68:ba:6f:e6:
         bf:28:93:c8:49:f0:a5:73:d8:13:8e:e9:24:18:d6:be:e6:b8:
         59:46:65:de:f7:7b:d9:bb:a3:9e:83:8b:6a:94:8c:d9:a4:1c:
         e0:19:17:57:79:65:40:75:3e:b8:09:b0:1d:72:fb:3d:cb:03:
         44:8a:a7:14:fe:b3:e8:9b:87:40:c5:3f:2c:44:9f:68:90:07:
         1e:bd:9b:8f:68:bf:c8:95:f6:24:8d:5d:f5:90:ce:12:15:2f:
         a3:96:73:21:65:79:7e:4e:ab:b3:94:4a:1f:9d:a2:ed:1d:ec:
         7c:76:49:ce:a0:04:ab:c8:ec:1c:a4:0c:ec:db:3e:ad:e3:d0:
         77:d5:8b:37:f6:02:5b:b9:b9:a1:ba:b7:3b:79:ef:9d:ab:41:
         b6:1c:48:8a:1c:fe:67:1b:f9:51:1a:9a:56:42:09:45:e6:bb:
         e3:f8:f6:6f:ca:7e:50:ae:ab:ed:e8:cc:89:c5:69:61:b4:27:
         ed:2d:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----