Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/323630323a3233343a66663a3a2f34382d3438203d3e2039363633.roa
File:                     323630323a3233343a66663a3a2f34382d3438203d3e2039363633.roa (raw, json)
Hash identifier:          gB5debVuuaes9rI0ci+2c6CtE1U9MPhxeTHTcTtiMAs=
Subject key identifier:   3B:A7:06:34:30:A3:52:49:1E:8B:F2:57:E7:F5:50:0F:63:FC:96:37
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       66211EADC7254B653052DD0DE0FCD925E4137754
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/323630323a3233343a66663a3a2f34382d3438203d3e2039363633.roa
Signing time:             Wed 04 Oct 2023 17:51:51 +0000
ROA not before:           Wed 04 Oct 2023 17:46:51 +0000
ROA not after:            Wed 02 Oct 2024 17:51:51 +0000
asID:                     9663
IP address blocks:        2602:234:ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:21:1e:ad:c7:25:4b:65:30:52:dd:0d:e0:fc:d9:25:e4:13:77:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Oct  4 17:46:51 2023 GMT
            Not After : Oct  2 17:51:51 2024 GMT
        Subject: CN=3BA7063430A352491E8BF257E7F5500F63FC9637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:50:c1:12:40:28:2a:b3:37:5e:0c:c8:9e:
                    bf:5a:e0:8e:6d:ea:d9:9f:c1:4c:4a:91:d6:b7:2f:
                    dd:75:f9:b2:08:fb:6e:25:de:bb:ee:cd:7f:6c:8d:
                    7d:fc:17:69:f8:05:28:e1:f3:56:42:c0:1b:de:ab:
                    d7:aa:a8:9f:13:eb:44:32:ca:93:81:93:20:fc:21:
                    ba:4e:a1:0f:41:64:8e:a0:84:d5:cd:9d:59:f6:0a:
                    ee:05:8e:5e:43:70:0a:1b:b6:e1:c4:8f:0d:5b:88:
                    75:38:47:94:40:00:9b:58:53:45:50:3b:f8:59:89:
                    8a:3b:7d:c7:2e:9b:42:7e:08:d8:16:04:16:10:cc:
                    47:56:b4:00:a7:14:04:4c:e7:68:4e:57:ff:f8:5a:
                    35:7b:a8:e4:ba:1f:92:50:43:c7:f6:bd:cb:0f:00:
                    43:6b:c2:f5:ed:80:f1:bb:70:97:f9:6e:87:3f:cf:
                    44:87:05:22:16:98:2f:c0:3d:b4:e7:dd:96:e2:c9:
                    8f:67:a5:86:63:ae:5b:74:7a:24:aa:fc:fd:38:34:
                    bc:57:75:04:c1:bf:a7:47:6a:82:48:33:0e:9a:11:
                    ae:ff:7b:18:f9:f0:f2:32:94:89:84:2e:59:d0:bf:
                    80:f3:a6:7d:96:b7:e4:e8:e9:5e:0c:ee:0b:80:30:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A7:06:34:30:A3:52:49:1E:8B:F2:57:E7:F5:50:0F:63:FC:96:37
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/323630323a3233343a66663a3a2f34382d3438203d3e2039363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234:ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:71:7b:c0:05:9a:fe:83:b0:64:c5:ce:3a:a3:81:ba:58:
         95:08:67:fe:7f:e8:47:75:3f:fc:09:8b:07:fa:b6:55:d7:bf:
         f6:2a:b0:f6:44:5c:4b:3b:ae:e9:72:0b:2c:49:50:b9:cf:ea:
         1f:99:91:94:39:50:af:e5:c0:a6:7d:42:1f:62:e5:f0:43:36:
         bd:6a:9b:fd:b8:59:ed:27:08:c1:30:fc:1e:64:2f:29:55:4b:
         a5:00:ad:ff:02:cb:59:c0:c1:d3:4e:a4:e3:0d:02:a7:33:6d:
         1c:f7:3f:ed:c8:46:a3:67:41:b0:e0:15:cc:34:b3:1c:a9:6c:
         e6:dc:a5:5b:bf:76:44:5e:f5:ad:03:5c:26:6f:cf:cb:03:78:
         33:6e:9e:8c:8b:a1:a0:e2:dd:46:ec:12:be:c8:28:a0:16:0d:
         63:83:00:2f:8b:ae:71:ec:24:f3:8c:df:d7:fa:ed:48:28:d4:
         5a:95:f4:27:24:30:79:19:18:c7:d8:ea:b8:db:5d:f8:1b:56:
         3e:8a:60:88:6e:57:be:23:ea:1f:cb:ef:9a:bd:60:9d:91:18:
         ea:55:84:81:75:04:13:15:e7:b4:ad:6b:42:06:8f:47:e5:68:
         2f:c1:1e:29:2d:ea:4e:b2:e2:42:c6:28:db:84:6b:71:96:1a:
         9a:3a:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----