Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS200566/2/326131323a646434373a643330303a3a2f34302d3438203d3e20313530323439.roa
File:                     326131323a646434373a643330303a3a2f34302d3438203d3e20313530323439.roa (raw, json)
Hash identifier:          uxCQpvRKowYCNXvjoO99YWRA382FC1jdMilO/eXpAcs=
Subject key identifier:   95:15:EC:E7:E4:F7:E6:B6:8A:E3:0A:F1:DD:E8:81:80:EA:70:78:5D
Certificate issuer:       /CN=58F8DA0D99B41E19A9B5E94FF00725C7628168AB
Certificate serial:       7B1B764DF3359D5B1FAE0F087B90DE3CEFB320E4
Authority key identifier: 58:F8:DA:0D:99:B4:1E:19:A9:B5:E9:4F:F0:07:25:C7:62:81:68:AB
Authority info access:    rsync://rpki.co/repo/AS945/1/58F8DA0D99B41E19A9B5E94FF00725C7628168AB.cer
Subject info access:      rsync://rpki.co/repo/AS200566/2/326131323a646434373a643330303a3a2f34302d3438203d3e20313530323439.roa
Signing time:             Fri 11 Aug 2023 04:36:42 +0000
ROA not before:           Fri 11 Aug 2023 04:31:42 +0000
ROA not after:            Fri 09 Aug 2024 04:36:42 +0000
asID:                     150249
IP address blocks:        2a12:dd47:d300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1b:76:4d:f3:35:9d:5b:1f:ae:0f:08:7b:90:de:3c:ef:b3:20:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58F8DA0D99B41E19A9B5E94FF00725C7628168AB
        Validity
            Not Before: Aug 11 04:31:42 2023 GMT
            Not After : Aug  9 04:36:42 2024 GMT
        Subject: CN=9515ECE7E4F7E6B68AE30AF1DDE88180EA70785D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:45:a6:00:87:85:14:4f:ec:cc:2c:fc:eb:
                    be:55:db:1d:25:c0:0b:64:ae:2e:a0:1c:c7:24:4c:
                    f2:24:c4:89:1f:3d:66:da:7f:9a:25:da:aa:cc:40:
                    8f:d9:a3:b6:62:f0:6e:d3:af:6b:dc:d6:36:38:a1:
                    89:06:ff:41:a9:42:4f:b4:5a:a8:53:f7:7d:6f:85:
                    e2:ef:a0:73:3e:8b:3b:8f:51:20:d2:3b:0a:f6:29:
                    01:4b:0b:54:5f:05:1f:e4:21:32:5d:23:32:79:bd:
                    82:d4:e0:1b:54:b7:34:6e:58:78:0a:77:ee:00:36:
                    f0:c2:e9:5e:3e:ee:f9:c6:32:82:4f:af:7b:7d:63:
                    fa:c1:a6:76:f6:07:bf:78:8b:a6:c9:a2:0f:26:f9:
                    82:c9:e7:91:2a:ba:29:c4:81:ae:1c:8a:bf:5a:e7:
                    d9:80:73:b8:71:57:b9:10:83:98:4a:74:17:ca:9e:
                    ff:67:4a:7b:d4:b4:71:4e:47:a1:82:34:9f:c2:25:
                    b6:8d:46:10:d5:1e:4c:5b:de:db:77:7d:74:85:d7:
                    b1:7c:32:81:d1:ea:95:5b:09:86:c0:e0:1a:fb:81:
                    eb:73:d0:70:8c:bf:d6:0c:5e:bb:10:48:e3:f2:5e:
                    93:3a:d9:b6:b3:64:f8:a0:4c:f8:b9:cf:13:c9:0e:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:15:EC:E7:E4:F7:E6:B6:8A:E3:0A:F1:DD:E8:81:80:EA:70:78:5D
            X509v3 Authority Key Identifier:
                keyid:58:F8:DA:0D:99:B4:1E:19:A9:B5:E9:4F:F0:07:25:C7:62:81:68:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS200566/2/58F8DA0D99B41E19A9B5E94FF00725C7628168AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/58F8DA0D99B41E19A9B5E94FF00725C7628168AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS200566/2/326131323a646434373a643330303a3a2f34302d3438203d3e20313530323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d300::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:81:2e:8a:e8:81:4c:54:8b:fd:58:fb:bf:d9:55:a4:62:6f:
         5c:63:c5:b3:03:bd:f5:8b:b5:28:ce:5a:03:38:c7:da:ab:10:
         f9:0c:0b:0c:08:26:b7:47:ae:11:c9:13:57:6c:b5:e2:75:62:
         ed:89:6c:d7:5b:00:a1:e7:f2:aa:fd:77:bb:0d:99:17:ec:fc:
         b9:2b:6b:d0:86:99:d4:ed:07:ff:bf:00:29:1e:eb:e7:01:8f:
         a2:94:72:2f:ea:84:e9:5b:49:f7:5c:47:b5:55:3f:89:f2:0d:
         02:b5:32:5f:22:15:0a:33:3f:5c:a0:5a:bd:ef:c6:34:ad:31:
         98:91:aa:b0:81:47:a2:df:0c:f2:b0:ec:f9:e1:f0:98:ed:bc:
         7c:70:f1:b9:9c:07:53:73:a2:02:9d:c1:e1:1f:2f:05:0a:7d:
         5f:4f:5b:19:d3:b0:c4:5c:79:a8:b7:9f:06:90:e7:62:1f:a8:
         25:45:18:64:2d:4f:db:51:2a:14:d2:27:41:89:10:96:23:b4:
         5a:ff:8b:d5:b3:69:87:a8:83:74:24:36:d4:7f:12:bd:96:f9:
         34:e2:27:f5:2c:2c:31:2c:35:d2:fc:42:70:af:27:4e:b3:2c:
         b5:5d:72:90:53:15:92:38:9f:9c:8f:82:40:95:59:8d:39:2f:
         c1:fd:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----