Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/14/326130353a646663363a393230303a3a2f34302d3438203d3e20313937353337.roa
File:                     326130353a646663363a393230303a3a2f34302d3438203d3e20313937353337.roa (raw, json)
Hash identifier:          BGprAzwlQPzlyMJ1QLEO9GogWKFszI/XjcMru4ypx/I=
Subject key identifier:   DC:AB:04:75:CE:50:A8:F5:00:55:D1:7F:3C:52:45:D9:98:B8:8D:79
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       7D891E1DA86ACEBBA53A44EA7CD0BBB3C77836EB
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Authority info access:    rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/326130353a646663363a393230303a3a2f34302d3438203d3e20313937353337.roa
Signing time:             Wed 30 Aug 2023 20:02:13 +0000
ROA not before:           Wed 30 Aug 2023 19:57:13 +0000
ROA not after:            Wed 28 Aug 2024 20:02:13 +0000
asID:                     197537
IP address blocks:        2a05:dfc6:9200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:89:1e:1d:a8:6a:ce:bb:a5:3a:44:ea:7c:d0:bb:b3:c7:78:36:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Aug 30 19:57:13 2023 GMT
            Not After : Aug 28 20:02:13 2024 GMT
        Subject: CN=DCAB0475CE50A8F50055D17F3C5245D998B88D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:85:5d:94:05:91:99:29:6e:8a:b6:a3:5d:
                    fa:76:09:e0:41:fa:b3:b1:1a:dd:20:38:0a:d0:94:
                    91:fa:95:6e:24:03:61:c4:bb:6e:87:04:0b:d9:ec:
                    7d:40:16:34:f6:f7:81:4c:89:11:3f:11:21:21:4a:
                    a7:63:b9:12:6c:58:03:99:cb:3b:b0:4b:54:fa:7e:
                    c0:57:c5:67:7e:74:5d:4b:2e:96:5f:17:5b:86:79:
                    f5:59:97:9b:6e:5f:10:52:98:99:16:7b:51:f0:c8:
                    96:44:b0:b7:8b:bc:7b:22:61:d1:80:76:da:5d:d3:
                    cc:b7:50:4a:94:3d:18:6c:62:ba:b8:3c:89:6f:b6:
                    51:e3:db:b8:ac:67:60:41:96:27:e4:31:ca:7e:d9:
                    88:74:64:b4:a6:87:ec:a2:3d:ab:08:32:8e:1a:a5:
                    9c:8b:26:83:4d:d3:d1:3e:3d:d4:38:55:ef:9f:d4:
                    fb:c2:73:6f:cb:3e:ba:46:ca:df:d2:27:4b:f8:f3:
                    d5:25:94:63:3f:d8:0c:0e:b4:2c:63:a8:69:43:7e:
                    67:a2:67:a1:8a:0f:5f:f2:d8:8b:45:5f:05:7a:72:
                    95:3d:7b:65:02:98:e4:dd:69:12:83:5e:ca:8e:25:
                    48:40:3a:71:5d:aa:26:65:1b:6a:f3:69:10:f0:36:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AB:04:75:CE:50:A8:F5:00:55:D1:7F:3C:52:45:D9:98:B8:8D:79
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/326130353a646663363a393230303a3a2f34302d3438203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:0b:03:54:1b:25:94:69:24:da:55:da:df:79:da:62:77:cb:
         87:af:70:4e:54:5e:3c:6c:9f:25:53:81:cf:65:04:ed:2b:53:
         8b:ad:66:5e:34:43:4c:b7:f8:7e:25:9d:9c:69:96:fe:28:0d:
         e6:a3:fb:a3:08:40:c5:da:d3:92:27:ae:20:f4:35:5f:1f:ab:
         98:fc:f2:0f:5b:c7:84:42:0a:23:12:02:84:d7:b9:79:e1:36:
         c1:61:b1:20:49:6d:40:00:7c:21:1a:97:ee:ff:60:ff:67:99:
         d5:17:40:18:90:63:98:89:db:12:8d:1c:0f:9f:34:3e:b1:7f:
         70:4d:1c:35:06:01:92:73:63:6e:e9:f0:a1:fa:8e:3b:0f:49:
         1b:46:85:56:aa:4d:89:f1:8a:59:e9:34:ed:0b:75:3b:b7:34:
         38:91:95:71:72:b2:51:e1:2d:7e:9c:53:17:5e:87:61:80:8c:
         2b:e6:32:99:f8:62:10:65:1b:5c:59:4c:4e:85:0b:42:11:31:
         21:b8:a9:2f:a8:3a:9a:26:16:6c:5b:a1:86:c1:81:43:37:c1:
         cf:58:34:6d:c4:72:c9:63:0d:ed:dd:31:91:50:b9:b4:2d:15:
         48:bc:4c:9e:be:31:a8:dd:90:94:b3:c1:c4:5c:c5:83:86:b7:
         bf:6d:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----