Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/4/326131323a386430353a3a2f33322d3332203d3e20393137.roa
File:                     326131323a386430353a3a2f33322d3332203d3e20393137.roa (raw, json)
Hash identifier:          THwKrG8pxHDu1dm1mhnoCuHdGK2jdNI4zqFNne0tXe8=
Subject key identifier:   52:8E:EF:9B:12:F4:24:98:B2:C4:8B:AF:04:B1:9B:AB:6E:AD:78:3C
Certificate issuer:       /CN=0e0b932d515fbad19dda69a1cea95d07985c4962
Certificate serial:       2B64041A45D441D7C02547F9CA0129391B0AD849
Authority key identifier: 0E:0B:93:2D:51:5F:BA:D1:9D:DA:69:A1:CE:A9:5D:07:98:5C:49:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DguTLVFfutGd2mmhzqldB5hcSWI.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/4/326131323a386430353a3a2f33322d3332203d3e20393137.roa
Signing time:             Thu 16 Jun 2022 13:25:18 +0000
ROA not before:           Thu 16 Jun 2022 13:20:18 +0000
ROA not after:            Thu 15 Jun 2023 13:25:18 +0000
asID:                     917
IP address blocks:        2a12:8d05::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:64:04:1a:45:d4:41:d7:c0:25:47:f9:ca:01:29:39:1b:0a:d8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b932d515fbad19dda69a1cea95d07985c4962
        Validity
            Not Before: Jun 16 13:20:18 2022 GMT
            Not After : Jun 15 13:25:18 2023 GMT
        Subject: CN=528EEF9B12F42498B2C48BAF04B19BAB6EAD783C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:3d:a3:ad:60:1b:2b:be:f7:50:73:f3:b9:
                    20:56:58:35:90:fb:da:66:f2:26:52:83:39:3f:94:
                    b6:c7:bc:93:bb:24:03:93:e6:36:9d:33:ee:0b:c4:
                    a1:c2:cd:c1:e8:b1:27:71:b9:91:16:7c:2f:03:7c:
                    98:72:c2:77:a7:9e:a7:98:a5:b9:b9:ea:15:28:6e:
                    1a:c0:9d:43:ff:a1:d2:a5:2b:4c:aa:7a:03:f4:02:
                    75:36:2c:f6:24:a7:d0:09:d6:89:eb:ba:5e:f6:e3:
                    ae:ed:9f:78:6d:89:e5:11:28:18:db:a7:41:5b:66:
                    8b:98:40:11:a8:a8:41:bc:dd:41:3a:cf:c7:21:13:
                    f5:72:51:51:27:a3:d2:f1:40:3a:3d:f6:c4:2e:86:
                    ab:01:fa:b8:d3:29:51:ae:33:b2:e5:f0:24:ea:00:
                    f1:a1:21:96:81:e0:7c:38:57:42:a5:86:a1:b5:fc:
                    47:1b:07:f7:d8:9a:04:66:59:20:b5:41:6d:b3:d7:
                    30:77:4d:5d:2e:ba:c2:40:39:11:e9:7d:e8:65:37:
                    96:44:ea:02:e6:cb:e8:e9:57:10:f0:b0:b5:8e:fc:
                    63:1b:39:56:c8:4e:6d:b0:89:e3:43:cd:76:a4:db:
                    23:b0:7f:f7:d7:3b:de:e8:98:bd:5b:65:59:ea:8d:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8E:EF:9B:12:F4:24:98:B2:C4:8B:AF:04:B1:9B:AB:6E:AD:78:3C
            X509v3 Authority Key Identifier:
                keyid:0E:0B:93:2D:51:5F:BA:D1:9D:DA:69:A1:CE:A9:5D:07:98:5C:49:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/4/0E0B932D515FBAD19DDA69A1CEA95D07985C4962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DguTLVFfutGd2mmhzqldB5hcSWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/4/326131323a386430353a3a2f33322d3332203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8d05::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:85:0d:32:3a:69:31:de:ee:64:6a:84:9f:76:51:05:ba:60:
         8f:f5:d8:4f:6e:fb:12:d3:11:be:bc:eb:f8:58:25:32:90:d9:
         68:84:c3:ce:1b:d9:b2:48:cc:d0:50:af:f8:65:d0:0c:bc:c7:
         a5:0b:65:fc:58:ec:59:b0:0c:ec:60:67:cb:06:13:32:6a:5b:
         bb:62:22:91:41:63:41:73:02:99:28:85:b7:c5:74:61:c1:cc:
         1e:02:2f:12:05:56:1d:c6:50:9a:d3:2e:3d:c7:95:e7:e8:2c:
         81:69:20:ab:f1:15:bd:fa:f0:58:5f:c1:e0:e9:1d:21:66:77:
         a8:e4:63:0b:3e:2f:d3:64:18:24:3d:c2:62:50:69:10:f4:be:
         f1:45:68:db:64:f1:b0:40:0c:b8:d7:b4:ee:db:d0:12:58:92:
         54:1c:6e:7e:81:04:e6:ed:0e:50:d0:87:77:1b:20:a0:f0:fe:
         25:b0:6c:d6:6a:9b:98:d8:69:c1:4c:00:5e:f4:6d:2c:cd:ae:
         ab:ce:b0:78:a3:cb:c6:25:54:23:ad:74:21:43:1d:3a:50:b8:
         43:b9:a7:6c:bc:70:0d:fb:fc:ec:6e:64:07:d2:26:92:e3:58:
         ac:1f:9e:a9:40:fa:dd:29:18:94:9c:5a:3f:7a:36:7b:8b:f0:
         44:d9:d2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----