Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa
File:                     326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa (raw, json)
Hash identifier:          J04wtMpclt3H3CNwix5KLAy2evnZLxYqlhBeeIMvikk=
Subject key identifier:   DB:95:36:13:90:FC:DC:21:ED:14:A8:48:7F:6E:3A:1B:32:6C:2F:5E
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       71CC6318EA4BFF143704EEA2F1229070EFFC1A4D
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa
Signing time:             Sat 08 Apr 2023 03:25:51 +0000
ROA not before:           Sat 08 Apr 2023 03:20:51 +0000
ROA not after:            Sat 06 Apr 2024 03:25:51 +0000
asID:                     199331
IP address blocks:        2a13:c007:8013::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cc:63:18:ea:4b:ff:14:37:04:ee:a2:f1:22:90:70:ef:fc:1a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:51 2023 GMT
            Not After : Apr  6 03:25:51 2024 GMT
        Subject: CN=DB95361390FCDC21ED14A8487F6E3A1B326C2F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:be:5b:4c:ac:d3:0e:95:f6:66:d5:46:97:
                    b3:01:90:0d:c7:12:43:d9:f5:8b:19:c5:11:35:95:
                    8e:0f:45:35:06:96:e5:dd:4c:8d:8c:5d:d2:85:c7:
                    2b:16:48:79:d2:0d:99:64:6d:e9:88:ca:43:ee:e8:
                    72:7e:c8:21:6f:18:c1:64:4a:64:4e:ad:0a:12:e1:
                    ca:ac:86:ad:4b:91:57:00:45:cd:a8:5d:17:7b:a3:
                    6c:4b:8a:65:b5:64:d4:f6:58:b2:56:a9:f0:58:d2:
                    d2:05:de:37:ff:1d:3b:6d:d9:a8:aa:ca:bc:9e:e4:
                    64:61:8e:ca:4a:1e:f4:cf:46:7b:42:47:80:bc:89:
                    41:1a:e3:42:45:f6:05:9c:8f:cd:51:60:0d:11:a9:
                    8f:60:d0:4d:b8:50:8a:6f:aa:9b:6a:ce:b5:f9:e9:
                    b0:86:f9:bc:f0:8f:0d:59:c9:7f:47:db:a4:54:b1:
                    22:c8:e8:e3:17:35:a6:27:c0:70:b0:85:b3:26:7e:
                    b5:6d:5c:9d:5b:d9:00:af:69:56:15:33:9e:65:d2:
                    62:2e:b9:7a:60:77:f2:97:27:4e:09:8b:35:36:e4:
                    15:5f:d7:3b:3f:85:61:f9:fa:ca:ec:b8:ab:80:aa:
                    f5:4b:ad:fd:9a:7a:b6:e1:9b:be:1d:86:6f:52:a1:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:95:36:13:90:FC:DC:21:ED:14:A8:48:7F:6E:3A:1B:32:6C:2F:5E
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031333a3a2f34382d3438203d3e20313939333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8013::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:ee:9a:82:e9:3b:6a:92:07:2a:6e:db:2d:da:08:7b:4f:ce:
         9f:68:0e:cd:50:24:95:d4:71:0f:e7:72:64:82:74:4d:a9:6c:
         2d:c8:23:f6:58:08:2e:09:ab:35:fa:61:50:6d:4d:17:f6:41:
         a1:fa:5d:b1:b9:07:a7:79:ed:7a:43:df:c2:49:d1:57:5c:98:
         f5:2d:80:16:b1:cb:cd:f6:8a:ce:65:61:6d:c9:8b:dc:b6:22:
         53:51:21:99:b1:18:bf:5f:f6:a2:c6:23:04:28:5c:7a:a2:1e:
         d0:41:f7:f6:b3:14:5f:78:92:1d:81:0e:80:06:b6:f3:ff:08:
         e6:6f:50:09:16:27:89:13:8e:04:f5:a6:ee:e4:6a:e8:22:65:
         59:03:f9:ae:84:c4:69:b9:25:5a:24:f0:72:66:6f:61:88:c7:
         c0:8e:8e:83:06:15:af:87:c3:68:bc:fe:f2:04:03:19:e5:84:
         6e:57:6a:dc:12:7d:af:00:26:ab:aa:50:b7:7c:5e:9f:5d:43:
         c1:8e:86:d9:e4:15:79:b7:11:7c:59:a6:84:fc:e5:0f:74:d1:
         d2:2c:b8:36:93:01:8f:f2:0b:e0:69:78:c2:8d:f6:a5:e5:9c:
         bf:3a:ee:74:eb:3d:46:de:8c:90:f5:58:3b:37:32:30:0a:72:
         c9:91:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----