Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/323630323a666234343a3a2f33362d3336203d3e203530303538.roa
File:                     323630323a666234343a3a2f33362d3336203d3e203530303538.roa (raw, json)
Hash identifier:          JMasPmSGqPtFi4tRv2LO1bkzV7t10cvtFtLrtF1T+zc=
Subject key identifier:   51:4C:CB:47:B9:CC:CA:71:4D:2A:CC:9C:26:22:FD:4F:39:8C:5B:26
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       376FA8825AB34A5FDA3FB58C2E22D83688AD5CEA
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/323630323a666234343a3a2f33362d3336203d3e203530303538.roa
Signing time:             Mon 10 Apr 2023 03:31:28 +0000
ROA not before:           Mon 10 Apr 2023 03:26:28 +0000
ROA not after:            Mon 08 Apr 2024 03:31:28 +0000
asID:                     50058
IP address blocks:        2602:fb44::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6f:a8:82:5a:b3:4a:5f:da:3f:b5:8c:2e:22:d8:36:88:ad:5c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Apr 10 03:26:28 2023 GMT
            Not After : Apr  8 03:31:28 2024 GMT
        Subject: CN=514CCB47B9CCCA714D2ACC9C2622FD4F398C5B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:0a:3f:94:e5:55:45:fb:4b:9b:82:7a:00:
                    fb:53:67:84:3f:ad:83:f9:62:aa:ed:a3:9d:e4:fb:
                    18:d6:64:b8:8f:6a:67:bc:c8:5e:06:6a:ee:52:2b:
                    17:f7:b2:13:e7:d0:50:5d:00:66:dd:c7:8c:77:12:
                    81:3d:7d:cc:fb:7b:66:e2:eb:c7:09:00:3b:64:9c:
                    6b:c4:33:76:ca:98:5e:bf:3d:0e:d1:40:30:22:45:
                    b7:8d:6e:07:40:e7:34:28:fa:34:6b:26:f1:0d:67:
                    f6:b3:8b:ae:7f:61:d7:2c:74:50:4a:f6:06:2e:00:
                    f7:57:ac:0d:ff:f3:3d:66:b3:f0:9d:a1:1d:a6:c3:
                    b0:f2:95:ec:30:19:f2:3d:31:35:e4:4e:db:61:60:
                    45:b1:de:7c:35:c4:96:5e:bf:5b:88:d5:df:d4:c2:
                    a1:e3:6a:b6:2b:74:79:9e:69:a5:0e:48:cf:00:cf:
                    1f:38:18:31:fe:66:f3:c3:38:8c:33:4b:de:91:2d:
                    09:8f:34:60:8c:66:28:f3:1c:09:c7:0f:55:0f:5f:
                    ec:d7:6e:ea:6c:9e:fe:2b:07:2f:bd:83:67:27:73:
                    ff:2e:47:30:4e:fe:58:35:32:b3:7b:86:91:01:86:
                    c0:1a:ca:c9:32:8a:9d:3d:c8:27:ae:ff:46:02:a0:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4C:CB:47:B9:CC:CA:71:4D:2A:CC:9C:26:22:FD:4F:39:8C:5B:26
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/323630323a666234343a3a2f33362d3336203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb44::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:cc:53:64:52:3d:a6:f1:a3:62:36:4f:2f:2c:43:01:e5:8d:
         70:fb:ee:17:30:19:87:bc:73:f4:30:87:59:b1:3d:a4:77:2b:
         53:3b:10:a9:72:d2:73:09:f8:9c:f6:d3:e7:08:4d:52:b5:93:
         43:b5:2e:b4:77:f6:b0:c4:73:97:d5:0d:f9:86:83:15:65:00:
         56:81:94:e9:85:86:ee:d2:d3:74:87:f2:87:a3:22:5c:df:7f:
         0e:5b:25:1a:2e:49:c6:47:84:83:c1:27:5a:ea:0b:c3:87:4b:
         f2:47:c2:0c:90:91:40:5f:9e:a5:29:5a:43:fe:46:27:e3:ad:
         7a:35:11:d8:71:51:b1:1b:5e:08:a3:40:a2:fe:95:60:83:c0:
         98:b9:98:c2:ba:c8:36:21:3c:ba:78:05:09:ae:de:df:e6:78:
         03:07:32:cb:36:cf:18:33:30:5e:cf:52:f0:07:53:b5:fd:31:
         74:ca:2d:88:03:1c:fa:15:be:f1:1b:8c:66:9c:a6:63:47:1a:
         49:7b:a5:f9:3f:25:eb:29:56:fa:7a:fb:3e:af:34:b9:75:e7:
         4f:f6:67:f3:e7:fa:bb:1a:d6:8e:2b:cb:ce:74:ae:7c:10:98:
         1a:92:17:03:58:c1:89:02:ec:85:f5:d4:8c:66:ee:63:b1:15:
         ac:9c:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----