Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/14/326130353a646663363a386161303a3a2f34342d3438203d3e20323132363233.roa
File:                     326130353a646663363a386161303a3a2f34342d3438203d3e20323132363233.roa (raw, json)
Hash identifier:          C+dr7mKKo1aoQ1Y/U1ZDfxYsRDkNQb9cKBsxblGajmg=
Subject key identifier:   86:C4:AE:32:EE:6B:C8:03:CC:E8:63:81:1D:55:AB:72:86:CD:9C:BC
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       5950D5BD586109C8EBEB522C250CF6C15EFA37A5
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Authority info access:    rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/326130353a646663363a386161303a3a2f34342d3438203d3e20323132363233.roa
Signing time:             Sun 24 Sep 2023 11:05:10 +0000
ROA not before:           Sun 24 Sep 2023 11:00:10 +0000
ROA not after:            Sun 22 Sep 2024 11:05:10 +0000
asID:                     212623
IP address blocks:        2a05:dfc6:8aa0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:50:d5:bd:58:61:09:c8:eb:eb:52:2c:25:0c:f6:c1:5e:fa:37:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Sep 24 11:00:10 2023 GMT
            Not After : Sep 22 11:05:10 2024 GMT
        Subject: CN=86C4AE32EE6BC803CCE863811D55AB7286CD9CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e4:d3:a3:f1:d3:3a:95:3d:80:d1:cf:38:21:
                    d9:5a:40:b7:d5:c8:42:a3:18:79:db:7a:28:6a:c2:
                    28:fd:1d:bb:d1:b7:01:83:bd:2b:78:cf:a1:7d:bb:
                    4d:ab:11:2a:77:3f:97:be:bf:bb:62:00:10:83:39:
                    f4:e6:8a:f5:a7:f1:06:71:f5:27:a3:e5:c9:2d:db:
                    8e:52:d3:ef:c0:02:31:65:a2:d2:99:a6:8c:a7:f8:
                    c3:0e:64:11:09:2d:31:04:d5:8c:78:c5:70:cb:95:
                    d3:38:a2:0e:27:73:ae:f9:57:89:ed:2e:31:be:ba:
                    33:32:e0:8f:c6:01:3b:4b:89:0f:37:c7:f4:d1:b8:
                    4a:54:ad:71:de:be:4b:68:12:ef:0b:c1:e8:c3:95:
                    66:77:3f:04:b2:22:a2:a7:a2:51:e1:96:fe:75:3b:
                    bb:2b:38:4f:20:20:c2:e0:a1:31:d7:db:e9:0d:f7:
                    b0:04:7f:5d:01:01:d7:86:2b:bb:fb:e8:3d:16:18:
                    e9:de:8d:5a:7e:11:6f:af:b8:b7:1c:9c:25:8b:5b:
                    7a:ee:63:cb:61:0e:3d:56:5e:e2:7c:62:8d:3c:f7:
                    4b:f0:61:a0:e1:3e:1c:e8:d0:a0:68:02:72:68:74:
                    a2:2f:9d:e1:c3:fc:1a:e3:f7:ac:73:00:d8:bb:f3:
                    70:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C4:AE:32:EE:6B:C8:03:CC:E8:63:81:1D:55:AB:72:86:CD:9C:BC
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/326130353a646663363a386161303a3a2f34342d3438203d3e20323132363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:8aa0::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:e6:7e:4e:91:50:91:61:21:ba:b7:8e:82:b3:77:33:4f:b7:
         03:ed:fe:68:18:58:d5:73:80:06:b3:ca:c5:89:b5:37:96:18:
         73:84:37:56:c3:05:96:fc:47:0c:58:95:e1:17:90:73:65:e3:
         80:37:bc:3a:0f:94:b2:27:39:6a:56:fa:d3:05:c9:8b:d8:e9:
         c1:87:6f:c8:b1:15:20:51:d4:97:43:36:0e:a4:0c:47:71:7c:
         35:75:f3:a7:a9:b2:82:0e:ff:9f:b3:10:b1:c1:8e:e9:76:7f:
         9f:df:c6:c9:e0:fb:aa:98:69:c5:40:8c:57:00:75:20:0a:8e:
         32:51:f2:c2:b7:cf:d5:0e:25:dc:01:97:6e:92:66:3c:2c:3a:
         16:19:e2:2e:89:a8:ab:dc:40:95:f2:b7:2c:79:52:b1:7f:f6:
         28:17:de:14:cb:a3:1b:b0:b9:48:74:76:75:90:63:f1:b6:99:
         4e:7c:1f:c4:b4:2f:c8:f6:63:5e:21:b8:48:cb:38:be:21:ac:
         2f:84:b8:23:4d:40:4e:e1:4d:db:26:ed:f6:4b:7f:2c:f8:0c:
         85:63:fd:28:1a:22:e1:e1:6d:e7:1c:38:e8:44:44:72:66:60:
         f8:9c:ee:27:cc:70:eb:bc:98:b4:52:17:a7:0b:ae:28:a5:67:
         19:08:9e:2f
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgIUWVDVvVhhCcjr61IsJQz2wV76N6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UzODIzQ0ZGNEQ0MUMyQzZGNkIzQTIwQ0NERDU5RjZF
QkJFQURFOTAeFw0yMzA5MjQxMTAwMTBaFw0yNDA5MjIxMTA1MTBaMDMxMTAvBgNV
BAMTKDg2QzRBRTMyRUU2QkM4MDNDQ0U4NjM4MTFENTVBQjcyODZDRDlDQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY5NOj8dM6lT2A0c84IdlaQLfV
yEKjGHnbeihqwij9HbvRtwGDvSt4z6F9u02rESp3P5e+v7tiABCDOfTmivWn8QZx
9Sej5ckt245S0+/AAjFlotKZpoyn+MMOZBEJLTEE1Yx4xXDLldM4og4nc675V4nt
LjG+ujMy4I/GATtLiQ83x/TRuEpUrXHevktoEu8LwejDlWZ3PwSyIqKnolHhlv51
O7srOE8gIMLgoTHX2+kN97AEf10BAdeGK7v76D0WGOnejVp+EW+vuLccnCWLW3ru
Y8thDj1WXuJ8Yo0890vwYaDhPhzo0KBoAnJodKIvneHD/Brj96xzANi783DXAgMB
AAGjggHYMIIB1DAdBgNVHQ4EFgQUhsSuMu5ryAPM6GOBHVWrcobNnLwwHwYDVR0j
BBgwFoAUPjgjz/TUHCxvazogzN1Z9uu+rekwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzE0LzNFMzgy
M0NGRjRENDFDMkM2RjZCM0EyMENDREQ1OUY2RUJCRUFERTkuY3JsMGcGCCsGAQUF
BwEBBFswWTBXBggrBgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0
LzEzLzNFMzgyM0NGRjRENDFDMkM2RjZCM0EyMENDREQ1OUY2RUJCRUFERTkuY2Vy
MH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMTQvMzI2MTMwMzUzYTY0NjY2MzM2M2EzODYxNjEzMDNhM2EyZjM0
MzQyZDM0MzgyMDNkM2UyMDMyMzEzMjM2MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoF38aKoDAN
BgkqhkiG9w0BAQsFAAOCAQEAIOZ+TpFQkWEhureOgrN3M0+3A+3+aBhY1XOABrPK
xYm1N5YYc4Q3VsMFlvxHDFiV4ReQc2XjgDe8Og+Usic5alb60wXJi9jpwYdvyLEV
IFHUl0M2DqQMR3F8NXXzp6mygg7/n7MQscGO6XZ/n9/GyeD7qphpxUCMVwB1IAqO
MlHywrfP1Q4l3AGXbpJmPCw6FhniLomoq9xAlfK3LHlSsX/2KBfeFMujG7C5SHR2
dZBj8baZTnwfxLQvyPZjXiG4SMs4viGsL4S4I01ATuFN2ybt9kt/LPgMhWP9KBoi
4eFt5xw46EREcmZg+JzuJ8xw67yYtFIXpwuuKKVnGQieLw==
-----END CERTIFICATE-----