Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa
File:                     326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa (raw, json)
Hash identifier:          gj06NVMQYWCTtipqhd3sq5TurJiwQQakleANr20RYEI=
Subject key identifier:   02:C3:33:15:0B:B1:63:B0:A9:7F:B0:D0:45:D4:1C:85:28:12:82:97
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       31217979230C137E732A16B988041D74C061A3DA
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa
Signing time:             Sat 08 Apr 2023 03:25:51 +0000
ROA not before:           Sat 08 Apr 2023 03:20:51 +0000
ROA not after:            Sat 06 Apr 2024 03:25:51 +0000
asID:                     199266
IP address blocks:        2a13:c007:8014::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:21:79:79:23:0c:13:7e:73:2a:16:b9:88:04:1d:74:c0:61:a3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:51 2023 GMT
            Not After : Apr  6 03:25:51 2024 GMT
        Subject: CN=02C333150BB163B0A97FB0D045D41C8528128297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:73:08:34:c7:35:43:27:08:96:9a:3f:0c:
                    cf:6e:02:52:57:c8:16:e8:98:83:88:cd:39:c5:45:
                    6f:2f:a1:ed:f7:8e:46:f1:2e:37:41:d2:99:14:3a:
                    74:3a:3e:d4:06:64:e4:0b:d1:80:42:29:5f:9c:d4:
                    28:30:01:4f:e2:03:3f:8b:b1:aa:0b:35:88:2f:2a:
                    d7:4e:1c:2f:c4:3a:75:b2:78:b8:8b:01:68:af:41:
                    76:3d:f1:56:14:f1:64:5f:8d:33:ca:6d:a7:14:00:
                    65:3e:af:5b:54:5c:2e:0b:82:2f:2d:ea:ef:76:b3:
                    e9:1e:9b:2e:a3:08:a1:0b:d4:de:3f:11:20:4d:10:
                    e0:3c:49:27:4d:be:9a:a2:bf:b8:bf:08:57:28:5f:
                    9d:df:be:47:c7:d0:e2:ae:77:c1:31:a7:f3:bd:15:
                    e3:2f:e7:48:6d:76:bd:74:5f:be:ae:58:7d:02:03:
                    15:1d:df:fa:03:f9:e5:e2:db:72:ca:70:0b:53:54:
                    48:c4:34:aa:7a:0c:e7:1a:d6:be:98:5b:69:99:f1:
                    c7:35:70:b7:6e:87:bb:6b:db:90:3f:a9:9d:4e:d9:
                    45:66:cb:88:db:0f:1f:22:dd:6d:b9:c0:33:8b:c7:
                    00:bf:c8:22:e3:e3:dd:37:94:84:1f:0f:2f:ac:ee:
                    2b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C3:33:15:0B:B1:63:B0:A9:7F:B0:D0:45:D4:1C:85:28:12:82:97
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8014::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:6e:bb:0a:1e:a0:e7:ba:a1:d9:8c:7f:bc:b3:66:f6:d8:40:
         b2:6b:85:54:02:97:dd:95:33:94:5c:84:61:7a:39:31:72:db:
         56:c5:65:49:b2:b1:81:0e:25:c9:8b:78:9f:d9:5d:4c:dd:a3:
         c8:89:dd:c1:57:88:b8:b7:9d:6a:07:fa:89:14:39:70:56:12:
         2a:8e:99:66:fb:ff:55:e7:ad:cd:99:cd:51:96:90:56:23:06:
         5d:a8:5b:9d:8c:5d:05:3f:0e:00:94:1f:ef:25:12:33:12:83:
         a5:04:cb:52:79:7a:80:4e:6c:b3:a0:16:b5:6a:8f:23:97:d9:
         3d:46:39:51:de:53:3e:97:c8:fb:45:19:d3:f7:5b:f5:e9:c4:
         7f:81:30:7e:4c:42:0b:18:f1:50:bd:87:97:0f:a8:ee:ac:20:
         43:4e:0c:11:0c:d4:ed:7d:a4:d2:6f:41:59:92:b8:9f:b0:5f:
         16:bd:12:dd:ca:46:24:33:e2:1b:21:33:eb:76:1d:81:a9:b3:
         60:16:20:19:df:12:59:9c:8a:5c:d9:f1:82:b9:85:57:31:6d:
         ca:7e:39:a4:b2:1c:c9:35:88:fb:91:c6:f0:76:a3:3f:4c:ae:
         5f:3f:bc:cc:70:2a:b9:f3:d1:21:4e:7a:cd:92:76:46:4d:9b:
         01:ae:e4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----