Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa
File:                     326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa (raw, json)
Hash identifier:          HbxBr6dULDU1Pl5tJYADt33U3BPS67GU6d5WAxOT+YI=
Subject key identifier:   A6:1A:3A:78:DC:57:06:D2:FE:9A:72:92:E2:79:10:8D:A8:0B:07:8A
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       4E1654B93EB85AEB2C011CE46DB48FC89586D7FC
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa
Signing time:             Sat 08 Apr 2023 03:25:50 +0000
ROA not before:           Sat 08 Apr 2023 03:20:50 +0000
ROA not after:            Sat 06 Apr 2024 03:25:50 +0000
asID:                     209658
IP address blocks:        2a13:c007:8016::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:16:54:b9:3e:b8:5a:eb:2c:01:1c:e4:6d:b4:8f:c8:95:86:d7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:50 2023 GMT
            Not After : Apr  6 03:25:50 2024 GMT
        Subject: CN=A61A3A78DC5706D2FE9A7292E279108DA80B078A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:2e:87:9f:af:24:08:0e:90:57:3a:b9:87:
                    4f:48:b7:5a:9f:d1:e8:7a:05:86:84:da:3a:22:69:
                    f2:0b:3d:be:ae:ed:2f:76:b7:b1:c9:82:22:fd:07:
                    fd:4e:91:41:2f:a4:d9:b5:2d:44:f1:bc:a5:ff:1f:
                    48:3b:2e:4f:87:2f:32:39:71:cd:4d:8e:38:e2:1a:
                    f0:ec:48:91:eb:18:8a:6a:18:e7:c7:89:fb:76:07:
                    95:3f:3e:fe:b9:bc:ab:b6:98:e7:43:5e:22:37:99:
                    e2:84:bf:05:a1:ad:5b:c9:80:69:52:c0:8a:7b:d4:
                    ca:0b:24:0b:4c:67:96:5e:be:ca:44:51:f3:f8:b9:
                    36:ce:d0:d0:f9:f6:48:e5:4f:7b:48:04:b2:ff:db:
                    db:de:9b:1f:03:69:df:66:c2:e5:a0:be:ec:29:1b:
                    ee:11:70:34:e8:7e:d6:11:6a:03:9f:97:1f:21:cd:
                    6d:63:2e:a0:d4:53:fb:8a:02:61:58:7b:6c:35:32:
                    08:0f:c4:36:d2:a4:88:d3:24:a6:be:d0:62:5f:c2:
                    28:96:5c:de:65:df:bf:93:5b:56:1a:7b:95:f2:22:
                    8d:64:da:1f:e9:93:dd:46:ac:cb:45:a3:ab:90:bc:
                    84:27:74:e9:56:1a:72:32:11:8f:f8:0f:f5:c7:49:
                    18:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1A:3A:78:DC:57:06:D2:FE:9A:72:92:E2:79:10:8D:A8:0B:07:8A
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8016::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:80:8e:dd:ff:84:e3:c3:41:21:c5:44:7c:89:d7:0c:d6:68:
         bc:f5:03:3c:4b:21:0b:99:ef:46:c8:63:36:c5:c1:ac:ca:95:
         f2:8c:6e:3b:1d:f7:8e:9b:9f:46:d3:8a:a0:c0:6a:f6:88:62:
         ac:e6:4e:18:35:e9:f0:81:40:32:10:12:32:9f:c3:50:91:c4:
         52:7b:10:6b:c1:7e:2f:dc:ca:1a:dc:d3:b2:23:15:b7:26:13:
         54:52:5a:b5:51:7a:e5:18:77:62:50:fd:46:eb:02:d9:15:02:
         77:84:c2:0c:cd:ab:90:49:4c:72:fd:23:3c:bd:07:13:8e:e8:
         50:98:cd:98:7e:1b:a8:5c:c4:78:90:17:d9:b2:c5:54:e2:bd:
         7e:3d:8a:5c:a3:cc:f3:bc:ca:33:86:80:3c:da:df:5a:e5:98:
         3c:e3:5d:bf:a6:15:d2:84:3c:3c:f3:61:97:43:c7:a8:37:bb:
         e1:55:1c:14:e2:01:d4:11:f4:d9:f3:f2:e5:74:ee:81:7d:fd:
         6f:9b:02:d3:9a:b6:19:a1:ec:ce:60:de:7f:45:cd:77:d0:2a:
         44:4e:9e:08:de:d2:7c:73:74:44:fa:eb:28:ab:70:80:3e:df:
         db:0f:09:73:3b:55:bb:db:5d:eb:00:b6:0b:33:5a:65:12:eb:
         2b:67:bd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----