Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3332203d3e203530303538.roa
File:                     323630323a3233343a3a2f33322d3332203d3e203530303538.roa (raw, json)
Hash identifier:          oI7/GFliqHqRQDy8EPoH2J6DEhteNdTUJ0QLLqdBlkY=
Subject key identifier:   04:15:E1:B9:2D:8B:9A:9A:4A:96:18:0E:7F:B0:5F:EC:85:82:8A:1C
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       121DB24455992EB0716C5FEE0F3353AC6EAF6859
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3332203d3e203530303538.roa
Signing time:             Thu 21 Sep 2023 14:23:23 +0000
ROA not before:           Thu 21 Sep 2023 14:18:23 +0000
ROA not after:            Thu 19 Sep 2024 14:23:23 +0000
asID:                     50058
IP address blocks:        2602:234::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1d:b2:44:55:99:2e:b0:71:6c:5f:ee:0f:33:53:ac:6e:af:68:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Sep 21 14:18:23 2023 GMT
            Not After : Sep 19 14:23:23 2024 GMT
        Subject: CN=0415E1B92D8B9A9A4A96180E7FB05FEC85828A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:71:e5:a2:c8:d3:5c:d4:0a:65:3e:28:c8:c7:
                    e5:cc:eb:08:ff:4f:08:b4:a3:d1:a9:26:ab:f4:81:
                    46:6c:e0:4c:d7:d0:9a:e4:10:19:a5:73:b6:e7:5a:
                    2d:d3:3e:91:b4:2c:6c:3f:3e:48:f6:60:9e:70:c5:
                    2a:2b:0d:58:1b:cf:1f:b4:be:6a:f5:18:74:ec:35:
                    00:13:a4:8f:18:e7:ca:e6:0f:66:ac:36:f3:b2:9f:
                    4c:b8:fa:ba:08:5c:02:bb:04:7f:ac:38:aa:44:9d:
                    c4:f0:80:bd:5e:14:86:de:11:9a:93:b4:29:11:3f:
                    1d:45:55:59:73:20:1a:77:25:68:2e:71:37:47:6f:
                    b1:48:4b:e4:c8:bc:1b:a8:ff:f4:6d:ca:d2:d8:67:
                    46:9a:a1:3e:d9:72:8d:46:36:a8:bb:93:05:d8:6c:
                    52:10:ce:f2:57:8e:d0:98:42:45:82:7e:a6:69:25:
                    f3:16:fe:08:36:76:a4:1f:a0:0d:ad:5f:f2:a1:4a:
                    75:04:0a:cb:5f:a0:3a:9a:9d:a2:f8:31:e0:fc:96:
                    20:91:fe:d3:8e:8c:8b:68:2e:4b:22:6c:15:36:c0:
                    43:d8:a8:8c:84:57:0c:8c:bf:91:df:1c:ce:8b:a2:
                    be:60:33:d9:c5:fe:12:2b:60:ca:08:1b:0b:ea:db:
                    1f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:15:E1:B9:2D:8B:9A:9A:4A:96:18:0E:7F:B0:5F:EC:85:82:8A:1C
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3332203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:4e:1d:9f:6d:7f:72:11:cb:88:4e:d3:54:b7:54:4d:86:
         d7:37:0f:fe:3a:b6:ca:ab:1b:f8:46:ba:b1:21:f4:a2:8a:31:
         65:03:f9:14:d0:fa:d1:4f:a7:35:31:b4:a5:9f:ea:47:ca:c3:
         27:1c:a9:c5:24:c5:ba:f7:26:f8:c8:04:35:db:fe:98:b1:09:
         e8:34:26:73:0a:94:94:f2:34:aa:53:a6:32:21:14:aa:d7:8e:
         bb:b5:01:19:0b:98:3a:0d:26:12:c7:38:df:04:ba:84:44:76:
         63:e4:3d:cf:3e:04:f8:2a:76:ea:3a:a2:54:91:30:1a:2d:d2:
         fa:28:c7:19:51:a4:bf:15:85:29:b3:93:25:b9:ec:3d:15:b5:
         50:ee:be:3d:ea:78:f9:44:be:00:63:53:64:44:d9:d9:04:8d:
         e5:18:05:d9:ee:45:48:1f:b7:d0:d1:8a:21:e4:36:3b:6f:ef:
         c0:1e:d3:03:6c:02:75:84:9e:28:b0:5a:8e:e1:10:27:93:11:
         ef:aa:79:8a:2f:66:cf:93:57:30:ba:96:4b:81:5a:4b:a7:bf:
         ff:d7:75:8c:fe:0a:04:9d:50:2a:5b:c9:d5:b6:16:ec:48:b3:
         48:74:7e:7d:25:f1:08:89:c3:1a:88:62:7c:96:03:5d:bf:d9:
         a7:07:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----