Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3438203d3e20393435.roa
File:                     323630323a3233343a3a2f33322d3438203d3e20393435.roa (raw, json)
Hash identifier:          Ed6SNRMNOuI21/4qsBhjiHZOGCfOcWWjc7qHStmgiDM=
Subject key identifier:   4E:43:B9:D7:5E:11:3C:3E:0F:6C:A1:17:32:C9:62:0C:8E:A7:84:B9
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       36EDDE5B798A66E3B65C48EBB20F1DFC31F2E3F7
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3438203d3e20393435.roa
Signing time:             Mon 25 Sep 2023 08:13:25 +0000
ROA not before:           Mon 25 Sep 2023 08:08:25 +0000
ROA not after:            Mon 23 Sep 2024 08:13:25 +0000
asID:                     945
IP address blocks:        2602:234::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ed:de:5b:79:8a:66:e3:b6:5c:48:eb:b2:0f:1d:fc:31:f2:e3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Sep 25 08:08:25 2023 GMT
            Not After : Sep 23 08:13:25 2024 GMT
        Subject: CN=4E43B9D75E113C3E0F6CA11732C9620C8EA784B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:ab:7c:e7:6b:6c:dc:6f:76:2a:7d:cf:09:
                    c6:6e:a0:1d:87:65:b7:59:95:7f:f8:32:16:dd:ae:
                    3d:32:74:c7:70:33:79:85:8d:7d:65:fd:7f:01:c3:
                    e7:48:40:49:34:a6:19:b5:5e:da:48:36:d3:5c:c8:
                    f7:e0:34:e5:38:41:57:c8:48:22:60:fe:78:b2:01:
                    f4:db:70:d3:79:dd:17:c8:0f:a4:36:6c:81:17:86:
                    ed:3b:a8:34:92:e8:5a:aa:db:49:05:7f:79:72:a3:
                    14:61:77:0d:fe:1a:e6:d5:b4:ab:6f:de:67:06:f4:
                    9d:91:28:83:84:a7:b2:83:a2:de:3f:6a:d0:97:82:
                    e5:92:3a:a3:4b:94:10:4b:a5:32:f9:f8:d4:85:ba:
                    6e:10:51:cc:2e:b9:21:7c:65:1e:fd:05:b1:a9:9c:
                    ab:1c:13:e0:ad:3d:e0:1f:38:44:96:5b:52:17:c2:
                    da:ae:9a:a9:b0:5f:89:55:8d:07:38:b2:ad:e7:82:
                    ad:f0:ca:d1:04:7a:34:0c:11:fd:9b:3e:a3:66:06:
                    54:64:9c:61:d8:7e:f3:e6:39:64:35:6a:5f:38:c4:
                    56:ea:6a:c2:37:99:79:46:67:3b:1a:b6:86:18:f6:
                    a1:d8:6c:6b:50:18:ef:72:c3:fa:7c:f3:6c:b5:fd:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:43:B9:D7:5E:11:3C:3E:0F:6C:A1:17:32:C9:62:0C:8E:A7:84:B9
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:68:62:36:aa:1d:fd:1b:ef:94:7e:55:16:2f:53:ac:f7:ea:
         19:64:83:24:39:f5:e5:10:ef:e2:9e:23:a2:9e:83:f6:27:97:
         dd:bd:7b:0f:6c:e2:3e:37:4f:de:37:53:05:87:39:c7:43:1c:
         77:77:3f:81:a2:c1:01:e0:fd:6c:61:9c:b9:fb:9e:1c:d8:65:
         42:ac:de:81:c5:3e:41:dc:59:2b:91:2f:e6:75:f3:8f:4b:45:
         ec:3c:68:ad:ee:bf:0a:df:c8:1c:67:e2:38:83:b0:e6:a1:f1:
         f0:ab:6c:37:20:3d:45:9c:8e:4e:9c:66:08:53:40:6c:89:67:
         bf:e5:19:8c:37:c5:54:9b:1c:f5:a9:ac:c6:67:73:1e:27:0e:
         74:05:56:ba:2c:3f:97:9f:e8:bc:9f:c1:d2:13:e5:cb:f0:ae:
         26:bb:68:e0:1f:50:fc:a9:a6:71:c4:1c:82:08:2c:46:bf:ec:
         a1:86:ea:8b:7c:8a:b2:0c:f6:db:12:0f:80:2d:2c:73:6d:a1:
         ab:51:89:e3:38:b0:40:0a:cb:2f:59:53:19:a7:62:f0:ee:ed:
         f5:36:a3:00:0d:38:c6:74:a7:f8:f1:e6:c8:df:45:d6:c1:80:
         94:e7:69:89:9d:ee:b9:e2:5a:58:8a:f4:26:60:7f:b8:b7:28:
         aa:77:a7:33
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNu3eW3mKZuO2XEjrsg8d/DHy4/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1
NUVCNEUzQTAeFw0yMzA5MjUwODA4MjVaFw0yNDA5MjMwODEzMjVaMDMxMTAvBgNV
BAMTKDRFNDNCOUQ3NUUxMTNDM0UwRjZDQTExNzMyQzk2MjBDOEVBNzg0QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IKt852ts3G92Kn3PCcZuoB2H
ZbdZlX/4Mhbdrj0ydMdwM3mFjX1l/X8Bw+dIQEk0phm1XtpINtNcyPfgNOU4QVfI
SCJg/niyAfTbcNN53RfID6Q2bIEXhu07qDSS6Fqq20kFf3lyoxRhdw3+GubVtKtv
3mcG9J2RKIOEp7KDot4/atCXguWSOqNLlBBLpTL5+NSFum4QUcwuuSF8ZR79BbGp
nKscE+CtPeAfOESWW1IXwtqumqmwX4lVjQc4sq3ngq3wytEEejQMEf2bPqNmBlRk
nGHYfvPmOWQ1al84xFbqasI3mXlGZzsatoYY9qHYbGtQGO9yw/p882y1/VqHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTkO5114RPD4PbKEXMsliDI6nhLkwHwYDVR0j
BBgwFoAUmla2AMRGbhfUaz24AwZlilXrTjowDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEwLzlBNTZC
NjAwQzQ0NjZFMTdENDZCM0RCODAzMDY2NThBNTVFQjRFM0EuY3JsMGYGCCsGAQUF
BwEBBFowWDBWBggrBgEFBQcwAoZKcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0
LzYvOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1NUVCNEUzQS5jZXIw
bAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3luYzovL3Jwa2kuY28vcmVw
by9BUzk0NS8xMC8zMjM2MzAzMjNhMzIzMzM0M2EzYTJmMzMzMjJkMzQzODIwM2Qz
ZTIwMzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJgICNDANBgkqhkiG9w0BAQsFAAOCAQEAv2hi
Nqod/RvvlH5VFi9TrPfqGWSDJDn15RDv4p4jop6D9ieX3b17D2ziPjdP3jdTBYc5
x0Mcd3c/gaLBAeD9bGGcufueHNhlQqzegcU+QdxZK5Ev5nXzj0tF7Dxore6/Ct/I
HGfiOIOw5qHx8KtsNyA9RZyOTpxmCFNAbIlnv+UZjDfFVJsc9amsxmdzHicOdAVW
uiw/l5/ovJ/B0hPly/CuJrto4B9Q/KmmccQcgggsRr/soYbqi3yKsgz22xIPgC0s
c22hq1GJ4ziwQArLL1lTGadi8O7t9TajAA04xnSn+PHmyN9F1sGAlOdpiZ3uueJa
WIr0JmB/uLcoqnenMw==
-----END CERTIFICATE-----