Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa
File:                     326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa (raw, json)
Hash identifier:          o49xUG7Pf8ggZEb2Ur0W+4rYXpia5BOJ0dRNhVtd/oo=
Subject key identifier:   4C:64:FD:68:AA:A2:4E:A7:BE:7D:68:F5:B1:5F:DC:89:6B:14:56:E9
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       1B5A4080B43250D1E041D0D2F993B2175A65CE36
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa
Signing time:             Sat 08 Apr 2023 03:25:53 +0000
ROA not before:           Sat 08 Apr 2023 03:20:53 +0000
ROA not after:            Sat 06 Apr 2024 03:25:53 +0000
asID:                     202151
IP address blocks:        2a13:c007:8015::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5a:40:80:b4:32:50:d1:e0:41:d0:d2:f9:93:b2:17:5a:65:ce:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:53 2023 GMT
            Not After : Apr  6 03:25:53 2024 GMT
        Subject: CN=4C64FD68AAA24EA7BE7D68F5B15FDC896B1456E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9e:fb:68:1f:ca:43:8e:9a:12:ab:7c:6b:a4:
                    5e:b2:b6:38:6a:4f:e1:35:2a:ce:a7:94:84:80:b3:
                    4e:bb:1e:32:d4:e5:fe:d5:0e:7c:47:b6:fb:28:af:
                    fb:a7:57:62:8c:2b:a3:e6:72:51:ff:fb:a6:f9:71:
                    2c:ec:4c:2d:10:4f:be:0b:37:13:2d:d1:55:4c:50:
                    48:c6:d4:10:2d:88:0d:4e:e8:08:6d:ae:de:ca:b0:
                    db:0f:4e:e9:d8:56:bb:42:24:46:ef:1e:22:33:b9:
                    e0:d1:06:c3:83:b6:ef:85:62:dc:43:39:47:22:48:
                    7a:28:ab:1d:88:e4:72:82:3d:ea:03:ec:75:d7:85:
                    d6:93:af:43:e7:24:55:2e:f5:62:fa:45:c4:33:98:
                    d6:08:b7:6c:4c:ab:00:41:e2:5f:4c:10:ca:13:a9:
                    74:ed:d7:d8:a4:55:6b:d0:91:85:2b:15:51:a8:1a:
                    3c:bf:66:5b:e0:54:68:fc:cc:d4:d1:d2:8b:83:9e:
                    96:b7:42:db:b0:d6:02:92:07:5b:02:c4:89:6d:3f:
                    51:9a:09:70:2e:de:c3:b1:b8:dc:aa:85:3f:b1:58:
                    9a:18:55:a5:43:7a:dd:9a:3e:4d:a2:2b:44:95:b9:
                    59:82:28:fa:79:5b:26:44:ef:de:5e:bd:8e:da:10:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:64:FD:68:AA:A2:4E:A7:BE:7D:68:F5:B1:5F:DC:89:6B:14:56:E9
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8015::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:0b:ca:8f:33:10:66:de:81:45:48:08:0e:68:d6:e3:02:ba:
         ed:5f:7c:b0:b7:28:79:9b:09:aa:7c:bf:90:1e:fc:db:9f:96:
         68:ef:b2:00:9a:37:5b:46:1c:7c:57:bb:38:f6:e1:7e:a4:76:
         d7:9f:81:31:61:3d:cc:fa:d2:55:bf:5a:c3:fd:4c:3e:15:93:
         41:fd:c7:78:3f:86:2f:68:ea:46:5e:83:d8:a0:ae:18:b1:8c:
         5c:be:5c:f2:6b:e8:90:a2:28:05:55:3d:a1:3c:70:c1:2a:18:
         78:5f:9f:a8:bb:94:e7:59:3c:59:02:8d:00:eb:a6:ad:2c:11:
         2c:b9:b1:56:77:8c:56:66:e4:54:0c:4a:b6:10:df:6d:b9:91:
         10:4b:c9:04:fb:68:74:2c:49:d3:1b:26:06:3f:7c:6a:93:23:
         43:7d:cd:96:89:bf:be:26:f1:4b:94:62:56:af:f1:5a:ed:ad:
         36:f8:2b:2d:82:f8:6a:5f:b6:46:dc:4e:f3:ce:e3:c0:7c:e3:
         b9:84:cb:95:81:5f:70:a6:47:c7:28:f1:dd:3d:fc:ad:bf:d6:
         01:09:cc:b6:98:97:89:c0:9e:30:19:9c:0c:77:ef:e9:d4:66:
         67:0e:33:77:e2:3e:56:f5:12:ff:fe:d2:a9:73:30:eb:9e:86:
         7d:a7:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----