Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/14/326130353a646663363a393130303a3a2f34302d3438203d3e20323038333238.roa
File:                     326130353a646663363a393130303a3a2f34302d3438203d3e20323038333238.roa (raw, json)
Hash identifier:          QyUspyzi6eHEvWVEEmflxO2okZaDFkQocMGtKFlDhIs=
Subject key identifier:   4A:C2:F6:4D:56:7E:54:78:BD:A7:D6:0D:70:4E:E2:54:A7:5A:DC:76
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       5ECC0C792BB6FE3BCD0AAA5D369EC1769D338AE0
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Authority info access:    rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/326130353a646663363a393130303a3a2f34302d3438203d3e20323038333238.roa
Signing time:             Fri 11 Aug 2023 09:02:46 +0000
ROA not before:           Fri 11 Aug 2023 08:57:46 +0000
ROA not after:            Fri 09 Aug 2024 09:02:46 +0000
asID:                     208328
IP address blocks:        2a05:dfc6:9100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cc:0c:79:2b:b6:fe:3b:cd:0a:aa:5d:36:9e:c1:76:9d:33:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Aug 11 08:57:46 2023 GMT
            Not After : Aug  9 09:02:46 2024 GMT
        Subject: CN=4AC2F64D567E5478BDA7D60D704EE254A75ADC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:ef:ea:ac:50:c1:5c:4d:ff:df:89:c7:a1:
                    3d:b8:02:8a:d4:c8:e8:3b:4d:11:80:d8:91:bb:b3:
                    d6:02:56:53:d7:83:39:41:9f:2b:c2:84:7e:7a:c2:
                    d4:12:c0:90:cb:fe:f4:2a:53:10:50:3e:d3:a8:65:
                    22:a5:b8:df:b5:07:fc:ca:d5:c8:73:4e:80:49:c7:
                    ae:3c:78:6d:f7:96:ac:28:44:5d:e1:9f:c5:f1:89:
                    64:6e:e6:9b:c3:69:51:ca:81:5d:59:e3:c9:80:04:
                    62:9d:c1:6a:71:ba:80:ec:21:ff:cb:9d:d6:63:90:
                    66:07:59:53:bb:16:86:0c:f9:6b:67:bc:b9:da:e6:
                    43:9f:5a:58:45:f5:74:d0:89:ee:92:48:71:32:5f:
                    b7:8d:20:64:4c:d6:33:16:bd:5b:f5:bc:27:40:f2:
                    1f:dd:2a:39:10:49:2e:d1:b1:a7:36:dd:27:ad:76:
                    1b:5e:17:9a:81:c2:31:7a:27:f4:03:6f:22:1e:a2:
                    a9:84:31:1d:63:f2:11:cf:ea:d3:54:ed:b7:b2:39:
                    86:07:a1:a5:5a:7b:d0:91:1a:4b:3c:be:6b:0f:e2:
                    2c:41:1f:b1:77:ac:a0:f0:74:4d:fa:2c:7c:da:93:
                    f1:df:1c:78:fa:31:e1:b8:4a:6c:17:38:a7:2e:18:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C2:F6:4D:56:7E:54:78:BD:A7:D6:0D:70:4E:E2:54:A7:5A:DC:76
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/326130353a646663363a393130303a3a2f34302d3438203d3e20323038333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:dd:ba:6d:72:a8:08:ba:8b:da:63:17:51:b9:a0:a5:17:35:
         98:22:b3:d1:49:b1:4e:c6:a6:63:99:a0:06:de:03:d5:4f:01:
         00:10:a3:83:e4:41:f9:c3:02:76:1c:8f:67:19:1e:5f:c2:2e:
         d1:c9:a4:84:22:85:2d:b8:59:3a:33:2b:a5:e4:d1:77:56:0c:
         b1:41:c3:12:84:fa:73:6a:92:26:32:f3:58:aa:f0:dc:1e:3f:
         0f:54:8f:34:c2:fd:d2:e6:0c:b4:05:56:7a:34:8e:9b:e6:70:
         6d:5a:5b:5b:b3:90:09:ac:29:98:ed:99:ab:97:37:75:08:c7:
         25:65:4d:c9:1e:31:8d:a7:37:65:2e:d8:80:f8:b4:b4:17:8b:
         db:94:71:3d:11:63:ea:4f:89:7a:21:97:9c:d2:fb:9b:33:f7:
         89:49:5d:be:f4:20:5c:2d:19:a7:07:0f:db:a1:f8:06:48:09:
         ce:2e:e8:56:a1:02:8d:81:f1:00:de:92:45:6e:c8:1c:5d:eb:
         48:b0:35:76:4f:63:0f:17:90:d5:4d:1a:d0:33:61:3e:79:de:
         a6:20:d2:71:7d:85:3c:b0:6c:96:cb:b0:84:ac:be:a1:76:57:
         d7:39:2c:1b:e6:00:a6:21:ca:45:50:84:f7:07:1e:0b:74:37:
         be:d4:1b:77
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgIUXswMeSu2/jvNCqpdNp7Bdp0ziuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UzODIzQ0ZGNEQ0MUMyQzZGNkIzQTIwQ0NERDU5RjZF
QkJFQURFOTAeFw0yMzA4MTEwODU3NDZaFw0yNDA4MDkwOTAyNDZaMDMxMTAvBgNV
BAMTKDRBQzJGNjRENTY3RTU0NzhCREE3RDYwRDcwNEVFMjU0QTc1QURDNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUOu/qrFDBXE3/34nHoT24AorU
yOg7TRGA2JG7s9YCVlPXgzlBnyvChH56wtQSwJDL/vQqUxBQPtOoZSKluN+1B/zK
1chzToBJx648eG33lqwoRF3hn8XxiWRu5pvDaVHKgV1Z48mABGKdwWpxuoDsIf/L
ndZjkGYHWVO7FoYM+WtnvLna5kOfWlhF9XTQie6SSHEyX7eNIGRM1jMWvVv1vCdA
8h/dKjkQSS7Rsac23SetdhteF5qBwjF6J/QDbyIeoqmEMR1j8hHP6tNU7beyOYYH
oaVae9CRGks8vmsP4ixBH7F3rKDwdE36LHzak/HfHHj6MeG4SmwXOKcuGEX5AgMB
AAGjggHXMIIB0zAdBgNVHQ4EFgQUSsL2TVZ+VHi9p9YNcE7iVKda3HYwHwYDVR0j
BBgwFoAUPjgjz/TUHCxvazogzN1Z9uu+rekwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzE0LzNFMzgy
M0NGRjRENDFDMkM2RjZCM0EyMENDREQ1OUY2RUJCRUFERTkuY3JsMGcGCCsGAQUF
BwEBBFswWTBXBggrBgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0
LzEzLzNFMzgyM0NGRjRENDFDMkM2RjZCM0EyMENDREQ1OUY2RUJCRUFERTkuY2Vy
MH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMTQvMzI2MTMwMzUzYTY0NjY2MzM2M2EzOTMxMzAzMDNhM2EyZjM0
MzAyZDM0MzgyMDNkM2UyMDMyMzAzODMzMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF38aRMA0G
CSqGSIb3DQEBCwUAA4IBAQAu3bptcqgIuovaYxdRuaClFzWYIrPRSbFOxqZjmaAG
3gPVTwEAEKOD5EH5wwJ2HI9nGR5fwi7RyaSEIoUtuFk6Myul5NF3VgyxQcMShPpz
apImMvNYqvDcHj8PVI80wv3S5gy0BVZ6NI6b5nBtWltbs5AJrCmY7Zmrlzd1CMcl
ZU3JHjGNpzdlLtiA+LS0F4vblHE9EWPqT4l6IZec0vubM/eJSV2+9CBcLRmnBw/b
ofgGSAnOLuhWoQKNgfEA3pJFbsgcXetIsDV2T2MPF5DVTRrQM2E+ed6mINJxfYU8
sGyWy7CErL6hdlfXOSwb5gCmIcpFUIT3Bx4LdDe+1Bt3
-----END CERTIFICATE-----