Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/323630323a3233343a66653a3a2f34382d3438203d3e203438313033.roa
File:                     323630323a3233343a66653a3a2f34382d3438203d3e203438313033.roa (raw, json)
Hash identifier:          eP5JgW1ESg6zD3CItJKYYki9jDe0FhlIX2V7R9SMl30=
Subject key identifier:   43:73:28:9E:4F:ED:09:27:BC:C8:18:AE:88:07:F6:1D:30:F5:B2:43
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       55877FCC784AECED2BAB5EEB42EBF023172C7BC0
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/323630323a3233343a66653a3a2f34382d3438203d3e203438313033.roa
Signing time:             Wed 04 Oct 2023 17:53:03 +0000
ROA not before:           Wed 04 Oct 2023 17:48:03 +0000
ROA not after:            Wed 02 Oct 2024 17:53:03 +0000
asID:                     48103
IP address blocks:        2602:234:fe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:87:7f:cc:78:4a:ec:ed:2b:ab:5e:eb:42:eb:f0:23:17:2c:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Oct  4 17:48:03 2023 GMT
            Not After : Oct  2 17:53:03 2024 GMT
        Subject: CN=4373289E4FED0927BCC818AE8807F61D30F5B243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:de:ed:26:bc:c4:a3:59:95:6c:ca:a1:77:
                    5b:27:33:5c:a9:55:eb:12:51:4d:79:8f:87:f9:3f:
                    cc:d6:db:cc:1b:e5:d4:66:0e:76:5a:5e:a8:7b:86:
                    91:50:b6:0e:e3:70:e6:c6:a2:34:07:03:0e:12:e8:
                    34:f0:57:df:66:4b:ec:e7:d7:81:37:fc:86:61:d0:
                    6a:b6:53:e6:de:43:eb:99:48:78:34:0f:4a:51:55:
                    99:85:16:6b:14:d9:01:e6:5b:29:4d:46:3b:7f:93:
                    cf:99:aa:6b:25:dd:49:71:18:98:18:7f:ff:2b:7a:
                    b0:03:e3:17:c5:eb:0e:f2:d9:cb:68:d2:b9:e4:22:
                    3d:cf:11:1c:5c:dd:01:05:ec:2f:45:f7:af:bf:8e:
                    18:00:69:a1:f2:d7:a5:c9:ec:2b:59:8c:ed:d4:88:
                    37:3d:a7:8d:6d:a8:c2:ee:0d:2b:f9:d2:bc:11:63:
                    8e:6a:99:3a:b0:0c:4d:1b:8b:c7:25:6e:fd:58:3e:
                    cc:5d:95:ee:71:8d:33:eb:ce:d1:8a:ab:c7:e1:37:
                    e5:70:ee:44:7d:a7:23:b9:df:f5:33:a0:9e:f1:44:
                    33:c3:dd:3a:58:a5:28:1d:52:87:da:93:e4:e0:7a:
                    9e:fc:13:5b:5c:b7:f4:b0:09:2a:20:37:28:fc:d2:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:73:28:9E:4F:ED:09:27:BC:C8:18:AE:88:07:F6:1D:30:F5:B2:43
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/323630323a3233343a66653a3a2f34382d3438203d3e203438313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234:fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:80:33:0a:4d:2f:6d:3b:38:d6:10:ba:08:17:d7:bf:b3:ae:
         e6:8d:e9:f3:58:39:6d:3f:9c:aa:d7:a8:e5:2a:4d:8d:83:9c:
         ea:95:2d:28:6b:d6:c7:f0:5e:22:fe:9c:a3:42:58:1c:8b:c9:
         42:33:8e:ee:bb:84:ef:e4:c1:85:c1:33:68:c7:14:7d:a8:98:
         74:67:fd:f7:50:a0:96:64:e9:41:99:50:9f:17:53:09:37:f8:
         68:3c:b5:96:73:c8:99:c3:81:fe:92:05:dc:59:5d:2d:e2:ce:
         31:70:63:0b:dc:b9:d0:40:d6:ea:97:d1:80:d0:a0:af:2b:cc:
         0e:a7:d5:ce:18:be:90:18:a4:51:b3:7e:42:3d:58:20:a2:9c:
         48:ae:93:03:86:97:86:d0:55:70:fc:96:6b:b3:24:e2:b1:0b:
         89:ca:c9:60:65:e2:74:59:d4:17:c7:a8:c0:8a:27:36:f3:a8:
         cc:3a:d8:c0:e9:8c:a9:1b:c0:19:d0:ad:9c:b4:45:f8:e3:df:
         5a:6a:68:8f:e5:5a:47:b9:55:7f:73:9b:39:3f:f3:5f:c3:80:
         1b:a6:39:a3:5a:b5:c4:14:db:71:83:c5:94:bb:2c:bb:0e:22:
         29:83:45:4e:2b:63:c1:82:90:8c:44:20:be:b1:7d:8e:b4:b3:
         b6:7b:8d:8f
-----BEGIN CERTIFICATE-----
MIIExTCCA62gAwIBAgIUVYd/zHhK7O0rq17rQuvwIxcse8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1
NUVCNEUzQTAeFw0yMzEwMDQxNzQ4MDNaFw0yNDEwMDIxNzUzMDNaMDMxMTAvBgNV
BAMTKDQzNzMyODlFNEZFRDA5MjdCQ0M4MThBRTg4MDdGNjFEMzBGNUIyNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Et7tJrzEo1mVbMqhd1snM1yp
VesSUU15j4f5P8zW28wb5dRmDnZaXqh7hpFQtg7jcObGojQHAw4S6DTwV99mS+zn
14E3/IZh0Gq2U+beQ+uZSHg0D0pRVZmFFmsU2QHmWylNRjt/k8+Zqmsl3UlxGJgY
f/8rerAD4xfF6w7y2cto0rnkIj3PERxc3QEF7C9F96+/jhgAaaHy16XJ7CtZjO3U
iDc9p41tqMLuDSv50rwRY45qmTqwDE0bi8clbv1YPsxdle5xjTPrztGKq8fhN+Vw
7kR9pyO53/UzoJ7xRDPD3TpYpSgdUofak+Tgep78E1tct/SwCSogNyj80qadAgMB
AAGjggHPMIIByzAdBgNVHQ4EFgQUQ3Monk/tCSe8yBiuiAf2HTD1skMwHwYDVR0j
BBgwFoAUmla2AMRGbhfUaz24AwZlilXrTjowDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEwLzlBNTZC
NjAwQzQ0NjZFMTdENDZCM0RCODAzMDY2NThBNTVFQjRFM0EuY3JsMGYGCCsGAQUF
BwEBBFowWDBWBggrBgEFBQcwAoZKcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0
LzYvOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1NUVCNEUzQS5jZXIw
dgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kuY28vcmVw
by9BUzk0NS8xMC8zMjM2MzAzMjNhMzIzMzM0M2E2NjY1M2EzYTJmMzQzODJkMzQz
ODIwM2QzZTIwMzQzODMxMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYCAjQA/jANBgkqhkiG9w0B
AQsFAAOCAQEAdYAzCk0vbTs41hC6CBfXv7Ou5o3p81g5bT+cqteo5SpNjYOc6pUt
KGvWx/BeIv6co0JYHIvJQjOO7ruE7+TBhcEzaMcUfaiYdGf991CglmTpQZlQnxdT
CTf4aDy1lnPImcOB/pIF3FldLeLOMXBjC9y50EDW6pfRgNCgryvMDqfVzhi+kBik
UbN+Qj1YIKKcSK6TA4aXhtBVcPyWa7Mk4rELicrJYGXidFnUF8eowIonNvOozDrY
wOmMqRvAGdCtnLRF+OPfWmpoj+VaR7lVf3ObOT/zX8OAG6Y5o1q1xBTbcYPFlLss
uw4iKYNFTitjwYKQjEQgvrF9jrSztnuNjw==
-----END CERTIFICATE-----