Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3232203d3e20393435.roa
File:                     3139392e3138392e3135362e302f32322d3232203d3e20393435.roa (raw, json)
Hash identifier:          +WNdjWSdyF+y7ssQZ1G3+HDqLFeNU8kUrkHUH8GcvYE=
Subject key identifier:   61:A8:08:27:E7:AA:B4:2E:06:66:62:6E:8D:B0:3F:07:F9:16:E7:A3
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       711F0C94A70E5519A6A4D64B4982DA5072D296B9
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3232203d3e20393435.roa
Signing time:             Fri 29 Sep 2023 22:56:39 +0000
ROA not before:           Fri 29 Sep 2023 22:51:39 +0000
ROA not after:            Fri 27 Sep 2024 22:56:39 +0000
asID:                     945
IP address blocks:        199.189.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1f:0c:94:a7:0e:55:19:a6:a4:d6:4b:49:82:da:50:72:d2:96:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Sep 29 22:51:39 2023 GMT
            Not After : Sep 27 22:56:39 2024 GMT
        Subject: CN=61A80827E7AAB42E0666626E8DB03F07F916E7A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:2c:55:90:89:41:d3:d6:cd:66:8f:f9:08:
                    2d:07:c3:7d:9e:9e:16:74:fb:2a:fe:95:dc:91:01:
                    a9:cd:57:68:f7:69:a9:85:19:36:4c:d4:69:6c:21:
                    d7:14:09:dd:48:b5:10:e2:0b:ba:0a:e8:01:17:53:
                    f2:5d:b9:32:18:1a:2e:b5:46:af:0f:a6:9e:b8:4b:
                    c7:43:a2:8c:b3:d7:1d:cb:96:09:ff:38:8b:8a:35:
                    88:08:cc:8a:f3:dc:2a:a4:ab:37:5f:f4:e8:17:68:
                    ca:51:1e:81:0b:70:48:09:21:69:1d:23:58:72:0f:
                    5e:32:dc:4b:29:a2:0a:7f:6b:9e:38:4c:8d:1a:3c:
                    e9:f9:48:bb:01:91:fc:73:b4:64:43:95:f3:f8:eb:
                    79:b5:62:d6:0d:59:97:99:b8:34:66:3f:13:2f:97:
                    01:fa:ce:45:ab:33:cb:20:0d:66:d8:ba:7b:9c:5b:
                    78:ac:b5:26:e4:60:16:b1:03:34:ee:92:78:f5:17:
                    fc:cc:44:f8:ed:18:2f:b4:a8:a4:85:84:a4:ba:9b:
                    13:da:cb:be:51:85:26:72:c7:aa:9e:1b:d3:81:da:
                    3b:49:55:1b:f6:20:f4:54:9a:e9:9f:ae:a8:77:b7:
                    57:90:87:e3:cb:be:31:4e:de:da:48:ea:81:e7:d0:
                    1a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A8:08:27:E7:AA:B4:2E:06:66:62:6E:8D:B0:3F:07:F9:16:E7:A3
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3232203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:f3:68:d3:3e:09:5b:56:26:d3:a7:6e:b2:0e:13:af:a2:bc:
         85:d7:cf:5d:72:0a:17:0d:8d:b2:1c:d8:da:4f:7a:ce:23:76:
         f0:e3:5d:26:ad:6b:bd:d6:14:b4:df:37:43:c9:96:b4:9e:10:
         b4:73:cb:96:e3:2c:00:29:26:bc:08:06:a8:09:50:9e:e9:57:
         b7:66:fa:4b:04:bf:7a:31:bf:80:23:67:6a:73:10:9d:12:a4:
         1e:3e:f2:b4:75:39:9d:af:b9:eb:50:4e:a6:ad:e7:2a:9e:d9:
         57:34:9d:d0:1f:6a:4c:46:a4:3a:10:a7:6e:75:55:2f:0d:f1:
         7c:8d:47:3c:10:ee:d4:93:96:25:d8:da:4b:50:29:86:1e:01:
         d2:2d:3b:ce:26:6c:e7:85:f5:05:b2:ca:87:d3:8b:9e:7b:d7:
         75:31:81:cb:1b:e9:83:1c:9e:ee:a6:69:2d:fb:e6:fc:f9:14:
         4a:c9:09:cc:4f:29:28:a8:15:8c:36:94:0b:fc:5a:e3:e8:e6:
         c6:c2:3a:10:44:ee:e2:8c:8d:c7:57:5d:44:ca:a1:ce:be:ff:
         91:2c:ad:18:ae:5b:99:aa:b9:96:fa:cf:cd:c1:f0:26:68:45:
         b4:7d:3c:e8:8e:cb:bb:89:cc:bd:93:78:6f:c9:94:72:09:6f:
         df:d1:5a:17
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUcR8MlKcOVRmmpNZLSYLaUHLSlrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1
NUVCNEUzQTAeFw0yMzA5MjkyMjUxMzlaFw0yNDA5MjcyMjU2MzlaMDMxMTAvBgNV
BAMTKDYxQTgwODI3RTdBQUI0MkUwNjY2NjI2RThEQjAzRjA3RjkxNkU3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9SxVkIlB09bNZo/5CC0Hw32e
nhZ0+yr+ldyRAanNV2j3aamFGTZM1GlsIdcUCd1ItRDiC7oK6AEXU/JduTIYGi61
Rq8Ppp64S8dDooyz1x3Llgn/OIuKNYgIzIrz3Cqkqzdf9OgXaMpRHoELcEgJIWkd
I1hyD14y3Espogp/a544TI0aPOn5SLsBkfxztGRDlfP463m1YtYNWZeZuDRmPxMv
lwH6zkWrM8sgDWbYunucW3istSbkYBaxAzTuknj1F/zMRPjtGC+0qKSFhKS6mxPa
y75RhSZyx6qeG9OB2jtJVRv2IPRUmumfrqh3t1eQh+PLvjFO3tpI6oHn0BrrAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUYagIJ+eqtC4GZmJujbA/B/kW56MwHwYDVR0j
BBgwFoAUmla2AMRGbhfUaz24AwZlilXrTjowDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEwLzlBNTZC
NjAwQzQ0NjZFMTdENDZCM0RCODAzMDY2NThBNTVFQjRFM0EuY3JsMGYGCCsGAQUF
BwEBBFowWDBWBggrBgEFBQcwAoZKcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0
LzYvOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1NUVCNEUzQS5jZXIw
cgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL3Jwa2kuY28vcmVw
by9BUzk0NS8xMC8zMTM5MzkyZTMxMzgzOTJlMzEzNTM2MmUzMDJmMzIzMjJkMzIz
MjIwM2QzZTIwMzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx72cMA0GCSqGSIb3DQEBCwUAA4IB
AQCA82jTPglbVibTp26yDhOvoryF189dcgoXDY2yHNjaT3rOI3bw410mrWu91hS0
3zdDyZa0nhC0c8uW4ywAKSa8CAaoCVCe6Ve3ZvpLBL96Mb+AI2dqcxCdEqQePvK0
dTmdr7nrUE6mrecqntlXNJ3QH2pMRqQ6EKdudVUvDfF8jUc8EO7Uk5Yl2NpLUCmG
HgHSLTvOJmznhfUFssqH04uee9d1MYHLG+mDHJ7upmkt++b8+RRKyQnMTykoqBWM
NpQL/Frj6ObGwjoQRO7ijI3HV11EyqHOvv+RLK0YrluZqrmW+s/NwfAmaEW0fTzo
jsu7icy9k3hvyZRyCW/f0VoX
-----END CERTIFICATE-----