Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/14/326130353a646663363a393030303a3a2f34302d3438203d3e203438323331.roa
File:                     326130353a646663363a393030303a3a2f34302d3438203d3e203438323331.roa (raw, json)
Hash identifier:          Z9Z1NxMReuczPSccTVRJcOnrHZQT0wS0S6W23+nelho=
Subject key identifier:   3C:F2:FD:1E:A6:A1:02:FC:AE:E0:C8:DC:E1:AE:63:54:FB:B5:49:2E
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       7E312AF667B87005267E72BB673502FBF073D1A8
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Authority info access:    rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/326130353a646663363a393030303a3a2f34302d3438203d3e203438323331.roa
Signing time:             Wed 02 Aug 2023 11:59:22 +0000
ROA not before:           Wed 02 Aug 2023 11:54:22 +0000
ROA not after:            Wed 31 Jul 2024 11:59:22 +0000
asID:                     48231
IP address blocks:        2a05:dfc6:9000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:31:2a:f6:67:b8:70:05:26:7e:72:bb:67:35:02:fb:f0:73:d1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Aug  2 11:54:22 2023 GMT
            Not After : Jul 31 11:59:22 2024 GMT
        Subject: CN=3CF2FD1EA6A102FCAEE0C8DCE1AE6354FBB5492E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:d6:30:71:c5:49:2e:5c:ad:89:65:67:24:
                    2a:ed:1f:e8:42:81:56:e3:39:14:d8:bb:cc:c1:b3:
                    86:8b:d8:e9:62:e1:c0:ab:23:c1:81:83:b5:9b:8b:
                    9a:fe:2d:d1:c7:17:5e:6a:d0:ca:35:f3:1a:20:81:
                    cb:0c:50:2d:72:f9:fa:da:ee:9c:2d:a8:d8:73:e3:
                    36:8a:ec:83:1b:81:22:bc:d3:0e:eb:39:e2:b2:f2:
                    0d:04:2e:c7:1c:5f:7c:b1:f3:45:1b:f5:71:b1:7a:
                    79:bb:e0:76:c8:c9:a9:61:64:03:f5:c0:13:78:5a:
                    7e:22:21:0b:e0:d0:44:8f:96:4f:87:03:2c:9f:f0:
                    5b:8f:ee:99:1f:6b:71:c6:80:81:de:f4:45:db:cc:
                    47:6a:ed:0c:04:c7:b5:c0:3a:bd:86:6f:b1:e1:10:
                    ef:e0:64:36:9f:af:c7:63:b6:b2:cb:d2:23:eb:37:
                    70:0a:f9:30:33:ba:75:76:33:d6:de:06:69:7f:18:
                    02:8d:be:e4:fe:b6:01:94:33:fc:13:5a:b6:fd:bb:
                    6c:8c:19:44:16:fe:86:30:2f:0b:08:d9:f0:01:d1:
                    13:1f:b6:06:86:21:95:09:a8:bc:94:2c:52:34:30:
                    bd:ce:03:03:0f:72:69:21:26:5b:ff:97:82:b0:cd:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:FD:1E:A6:A1:02:FC:AE:E0:C8:DC:E1:AE:63:54:FB:B5:49:2E
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/326130353a646663363a393030303a3a2f34302d3438203d3e203438323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:77:8b:ed:75:ea:d8:e2:8a:cf:1f:40:2e:8f:a4:71:d2:
         42:70:07:b2:21:c0:00:62:3d:dd:7e:5b:0d:dc:f0:8c:0b:29:
         83:26:8d:f6:c9:74:29:d9:f8:3c:e9:3f:5d:23:92:36:84:62:
         f2:4c:14:a8:a9:89:45:41:63:c1:e7:d7:76:93:2d:ed:52:7a:
         50:b7:59:ca:ea:d3:2c:50:e4:bb:63:f1:fd:57:5c:9d:80:f1:
         b8:64:63:2f:f3:ba:d2:cf:16:6d:a0:f1:7d:e4:a5:cf:72:db:
         04:21:90:30:45:df:d0:5d:16:28:b2:7a:6d:a3:fb:cb:be:74:
         32:36:1f:3a:cc:1b:1d:d8:a2:19:e0:15:1b:e1:7e:2a:fa:b1:
         7c:69:4b:a3:84:8b:c3:ee:be:15:60:f4:52:68:31:b7:fe:4a:
         06:b9:d4:3b:f9:89:ce:c8:29:80:e5:f9:6e:7d:fe:8e:ee:47:
         d5:92:42:e9:3c:0e:9f:38:ee:a8:c1:3d:0c:2c:8a:fc:bc:a1:
         78:77:34:21:ff:c1:97:87:c6:ca:a8:e8:a7:c0:f5:7f:25:61:
         c0:65:ed:cb:d6:a9:96:92:9f:17:53:f7:16:bf:8f:bb:44:9d:
         e6:12:fc:46:79:30:fd:80:46:67:33:97:ec:30:77:7f:64:90:
         99:0f:a9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----