Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383130303a3a2f34302d3438203d3e20313939323431.roa
File:                     326131333a633030373a383130303a3a2f34302d3438203d3e20313939323431.roa (raw, json)
Hash identifier:          3cckAd0To13RdjFxhvzKZ3jqJDqT7vPU5LMhbx+Zu4k=
Subject key identifier:   0A:8B:DF:35:A4:54:67:58:33:AD:33:91:56:85:5E:DE:68:F8:91:0F
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       38F561373D987B5E314A34ED5861469EC1487A37
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383130303a3a2f34302d3438203d3e20313939323431.roa
Signing time:             Sat 08 Apr 2023 03:25:51 +0000
ROA not before:           Sat 08 Apr 2023 03:20:51 +0000
ROA not after:            Sat 06 Apr 2024 03:25:51 +0000
asID:                     199241
IP address blocks:        2a13:c007:8100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f5:61:37:3d:98:7b:5e:31:4a:34:ed:58:61:46:9e:c1:48:7a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:51 2023 GMT
            Not After : Apr  6 03:25:51 2024 GMT
        Subject: CN=0A8BDF35A454675833AD339156855EDE68F8910F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:74:2e:67:ad:13:d3:f7:20:58:a9:9f:0e:52:
                    1b:73:64:57:77:5f:bc:44:9c:16:27:f0:91:47:36:
                    0a:7d:f1:0a:ba:bc:f1:3e:d7:a8:a4:6f:04:77:d2:
                    a2:a5:c9:05:54:90:5c:c3:01:f1:5c:68:b2:29:39:
                    04:55:3f:d9:a3:2f:9b:57:e2:0d:94:de:9b:24:63:
                    db:9e:45:b7:88:ed:fb:a3:8e:10:09:86:2b:43:f1:
                    25:e1:c4:ab:aa:65:c3:d5:54:68:ef:78:fd:b0:60:
                    d3:da:41:6d:24:7c:bc:d8:ba:8f:d8:31:b2:a4:c7:
                    fb:73:c1:c5:83:80:0f:15:fb:77:2a:13:92:18:c9:
                    8b:6d:b4:8a:1f:89:8f:e7:e9:a9:e4:6e:3b:ad:bd:
                    37:73:5b:4b:6c:70:bf:93:4f:f2:d4:19:9b:11:01:
                    76:29:a7:63:19:6f:db:00:be:52:ea:da:b6:e8:e4:
                    10:c4:2b:65:64:46:8a:43:11:52:1c:5b:b0:53:f4:
                    a2:e6:45:f3:3e:f9:cc:d5:7e:3f:76:55:b9:53:ff:
                    47:5d:40:da:fd:9b:31:9e:d2:30:36:b6:ed:36:19:
                    85:12:af:9d:8e:bd:13:c7:ca:e3:05:08:11:eb:12:
                    6c:e1:20:18:32:d9:81:8e:8d:0e:9d:3d:f8:83:e0:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8B:DF:35:A4:54:67:58:33:AD:33:91:56:85:5E:DE:68:F8:91:0F
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383130303a3a2f34302d3438203d3e20313939323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:52:a1:b1:ed:06:0e:91:76:fe:f7:bd:80:24:cf:1c:b1:84:
         79:6d:5b:79:fa:c1:d1:33:e5:aa:ff:a3:15:7b:e4:8d:69:08:
         b2:78:2e:d3:15:39:3e:62:38:1c:e1:ea:0a:55:0c:81:17:06:
         87:de:cf:e9:1c:a7:28:c8:fe:e6:9d:8f:90:ee:f9:c9:be:c1:
         45:c2:97:7f:0a:7e:3c:98:d1:53:49:ce:16:22:9c:ac:b5:4d:
         b7:39:74:7b:b5:64:9c:3e:15:95:ad:59:f8:11:d4:af:a0:d4:
         a1:6e:46:c3:95:72:2f:af:69:b0:7b:5b:52:54:a9:7e:b5:71:
         8a:50:ec:06:05:0b:ab:2b:12:9f:1c:54:4d:12:66:19:bf:68:
         f1:a6:6e:d0:07:b0:ac:bc:94:99:4e:02:f8:55:ef:12:90:db:
         87:3d:79:dc:db:34:3b:99:8c:b5:a8:f3:9f:a5:b3:e1:fe:e0:
         4b:39:d2:b9:f3:60:2d:a4:f8:5a:5f:d4:25:33:7c:ce:71:ea:
         40:fb:c2:d6:e4:ca:1e:1b:01:a4:d4:1c:9d:2e:af:08:7b:28:
         a8:11:a0:cb:48:cb:ce:a8:c7:95:10:2b:4c:9e:08:91:ed:96:
         a9:78:12:21:23:84:f1:05:23:ae:b1:79:0d:e8:2f:05:70:3a:
         6f:8e:00:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----