Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/323630323a666234343a3a2f34302d3430203d3e2031303132.roa
File:                     323630323a666234343a3a2f34302d3430203d3e2031303132.roa (raw, json)
Hash identifier:          gskYTfgB5q1wfevEbznVFKe88FILrMkjiZaqAhQu0gA=
Subject key identifier:   BA:A5:05:36:4F:BB:BB:DA:BA:B0:E2:37:9D:07:25:6E:7D:C7:B4:17
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       696936211483E97F2E52DD5887036A7953E77610
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/323630323a666234343a3a2f34302d3430203d3e2031303132.roa
Signing time:             Wed 04 Oct 2023 17:41:44 +0000
ROA not before:           Wed 04 Oct 2023 17:36:44 +0000
ROA not after:            Wed 02 Oct 2024 17:41:44 +0000
asID:                     1012
IP address blocks:        2602:fb44::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:69:36:21:14:83:e9:7f:2e:52:dd:58:87:03:6a:79:53:e7:76:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Oct  4 17:36:44 2023 GMT
            Not After : Oct  2 17:41:44 2024 GMT
        Subject: CN=BAA505364FBBBBDABAB0E2379D07256E7DC7B417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:88:06:88:f5:7d:63:17:9e:c4:d2:17:3d:
                    92:8d:d0:4e:05:e6:1c:9f:aa:9c:2d:ca:90:d4:75:
                    16:6d:8d:8e:12:ee:98:a6:6e:fd:40:bc:de:ee:21:
                    82:66:d1:f8:1c:fd:44:e1:06:1b:4a:a6:3e:84:e0:
                    07:d4:87:8b:11:71:62:13:71:54:e8:35:8d:47:76:
                    5e:2f:76:21:15:15:4e:04:5b:f0:ac:e7:22:fc:ab:
                    b9:e1:06:d5:95:59:77:ab:52:e6:e2:b6:40:51:19:
                    a6:10:99:b4:6d:3e:ab:ef:ef:07:05:47:75:64:a7:
                    8b:dd:15:7a:73:6a:3b:89:a4:b0:52:c9:bd:0a:93:
                    24:13:99:d6:31:ed:ba:0a:d7:26:49:8d:83:29:88:
                    2e:71:e3:c7:65:2c:2f:92:a7:70:f0:37:b7:ee:e7:
                    b5:c2:3f:d6:54:94:fb:80:13:29:25:2b:63:b0:c7:
                    0c:b6:0c:33:54:97:ea:a8:f4:5f:7c:ca:3b:21:92:
                    5b:a0:02:00:26:23:1e:f8:7c:a5:3a:1c:97:bd:3f:
                    e2:ab:b8:e7:b7:6a:82:dc:90:36:4f:5f:67:39:92:
                    e4:9f:fd:34:5e:3e:a2:62:33:e4:a7:0e:0e:a6:41:
                    f2:51:da:15:74:9d:90:ff:de:97:45:9c:94:b8:80:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A5:05:36:4F:BB:BB:DA:BA:B0:E2:37:9D:07:25:6E:7D:C7:B4:17
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/323630323a666234343a3a2f34302d3430203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb44::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:90:05:6e:fa:69:f0:6b:90:cd:c3:8c:46:cd:b9:3f:e6:5a:
         ae:27:da:b7:a5:47:2f:c1:bb:1d:a0:e8:7e:13:4a:f6:83:a8:
         14:71:84:2f:03:55:81:39:09:8a:dd:38:41:3c:13:e9:45:4e:
         30:95:1c:de:f4:e1:86:22:77:dc:28:2b:ed:c0:ab:6d:cd:99:
         3e:e9:de:cd:19:4f:57:d1:c8:f6:55:6d:19:d5:68:90:e1:1d:
         05:c3:f4:f4:04:a3:19:1a:29:af:d8:86:9c:ad:24:c6:d1:10:
         ed:b3:38:9a:17:57:b0:72:d9:70:90:1d:0b:86:62:4a:29:7e:
         45:6e:e1:07:55:99:b4:81:26:5b:b3:91:d9:d3:4f:7d:02:0f:
         59:b1:33:78:a5:a4:ea:f9:14:96:29:94:ff:e9:c9:4d:17:9c:
         c7:74:2a:9e:f9:90:d8:2b:d9:8d:89:c2:54:68:ae:16:b0:54:
         c8:5f:25:52:aa:62:aa:22:0a:d6:ba:51:26:96:fb:57:60:76:
         b8:8d:ca:8f:46:b4:60:29:cb:4c:d3:95:77:99:f3:a2:26:01:
         44:d8:6c:31:c5:b4:6e:28:9c:48:30:dd:69:29:9a:fd:5a:60:
         fd:cf:bd:07:68:40:15:1d:2c:c8:bd:7c:e2:fb:a1:c4:aa:07:
         fe:94:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----