Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/14/326130353a646663363a3a2f33322d3332203d3e20393435.roa
File:                     326130353a646663363a3a2f33322d3332203d3e20393435.roa (raw, json)
Hash identifier:          OvdjeHmjji613ZCW6LwGi/k7rSnCLRuKIUk/Ley9yJg=
Subject key identifier:   EF:6E:A8:DA:8E:41:90:27:0B:17:50:A9:60:C0:7A:C5:D4:CE:7B:78
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       4210E18F27B9B28D1B3B793E3C7B9EDC3C7336A5
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Authority info access:    rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/326130353a646663363a3a2f33322d3332203d3e20393435.roa
Signing time:             Mon 14 Aug 2023 02:45:24 +0000
ROA not before:           Mon 14 Aug 2023 02:40:24 +0000
ROA not after:            Mon 12 Aug 2024 02:45:24 +0000
asID:                     945
IP address blocks:        2a05:dfc6::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:10:e1:8f:27:b9:b2:8d:1b:3b:79:3e:3c:7b:9e:dc:3c:73:36:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Aug 14 02:40:24 2023 GMT
            Not After : Aug 12 02:45:24 2024 GMT
        Subject: CN=EF6EA8DA8E4190270B1750A960C07AC5D4CE7B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:73:82:16:80:ec:ba:d9:86:1b:fb:8d:68:
                    5c:c1:6b:c6:61:d7:00:2d:46:28:bc:27:f1:ce:f8:
                    cf:30:a2:c6:49:9d:0e:96:b0:e7:f1:11:af:1a:76:
                    fc:50:86:bf:fd:a5:a8:c6:ec:2d:61:f4:1c:32:a1:
                    31:5e:15:70:b5:cf:6e:2c:f6:3c:7e:f7:9e:bc:dc:
                    06:51:2d:2f:3d:24:79:60:de:4e:d8:79:b4:81:59:
                    28:bb:68:da:72:a6:c4:11:97:e2:8a:64:8d:de:08:
                    f4:db:52:ac:24:5e:e0:9b:fc:98:35:b9:11:53:5f:
                    a3:c2:b0:a1:69:8a:5c:f8:1e:ed:b6:d4:b9:e8:8a:
                    ac:7e:56:79:0f:57:75:f9:6c:66:d4:c6:b6:e5:30:
                    c7:2f:9c:a5:94:50:1d:2c:6c:ce:e4:21:f7:13:ea:
                    75:8c:02:35:41:6a:60:83:88:8d:9f:c5:d0:a0:4a:
                    fb:41:84:5d:c6:35:7e:7d:e8:a4:49:7e:bf:1c:df:
                    2c:64:71:53:0f:1d:9a:ec:6c:d6:29:a7:a6:24:da:
                    ac:13:94:61:17:87:3d:d7:50:41:2d:58:bd:50:60:
                    ef:94:1c:88:85:c7:36:9a:1c:50:6a:1e:78:eb:1d:
                    62:63:35:6e:58:bd:ee:03:a3:c1:f6:77:9a:7e:55:
                    d2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6E:A8:DA:8E:41:90:27:0B:17:50:A9:60:C0:7A:C5:D4:CE:7B:78
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/326130353a646663363a3a2f33322d3332203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:3b:65:91:1e:c0:87:1c:3f:9c:a2:8b:0a:ba:08:c2:b3:30:
         fb:09:34:11:f7:83:90:3b:6b:6d:3e:e2:74:7a:df:3e:ef:38:
         49:f0:d7:b3:da:e6:af:7f:66:23:a2:ee:b3:32:2b:b1:b4:8c:
         dc:04:ea:6e:eb:3d:bd:3b:b9:17:54:f7:43:18:e8:25:4e:29:
         f4:dd:80:5f:6f:f6:48:fc:16:cb:11:3e:7e:7b:06:04:44:a6:
         48:72:4b:ad:2b:6c:32:0c:b3:13:2a:a3:85:e5:76:bd:d4:fb:
         14:62:ec:9d:34:d1:1f:9c:70:06:7d:e9:a9:fb:e7:e2:a6:05:
         f9:0a:1e:30:77:04:a1:97:ec:66:35:5c:fd:07:4b:e8:13:fc:
         e6:74:e2:c0:1e:0c:6b:51:fb:3f:8e:08:d0:a7:13:e0:3c:8b:
         ee:60:25:33:f8:c5:7b:9b:eb:30:03:75:98:97:23:82:43:b4:
         ce:86:dc:26:c3:52:7e:03:28:c6:9e:93:7e:a4:1a:a8:9e:8d:
         d9:b7:f0:b9:b4:fc:dd:60:3c:c3:ac:83:e3:09:50:b3:80:45:
         cc:fd:66:e6:16:07:e8:dd:f7:46:ce:6e:9a:00:44:59:57:7e:
         1d:97:9a:75:05:71:42:68:a4:86:31:5b:07:bd:a5:55:36:88:
         eb:ff:ff:e4
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIUQhDhjye5so0bO3k+PHue3DxzNqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UzODIzQ0ZGNEQ0MUMyQzZGNkIzQTIwQ0NERDU5RjZF
QkJFQURFOTAeFw0yMzA4MTQwMjQwMjRaFw0yNDA4MTIwMjQ1MjRaMDMxMTAvBgNV
BAMTKEVGNkVBOERBOEU0MTkwMjcwQjE3NTBBOTYwQzA3QUM1RDRDRTdCNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE93OCFoDsutmGG/uNaFzBa8Zh
1wAtRii8J/HO+M8wosZJnQ6WsOfxEa8advxQhr/9pajG7C1h9BwyoTFeFXC1z24s
9jx+95683AZRLS89JHlg3k7YebSBWSi7aNpypsQRl+KKZI3eCPTbUqwkXuCb/Jg1
uRFTX6PCsKFpilz4Hu221Lnoiqx+VnkPV3X5bGbUxrblMMcvnKWUUB0sbM7kIfcT
6nWMAjVBamCDiI2fxdCgSvtBhF3GNX596KRJfr8c3yxkcVMPHZrsbNYpp6Yk2qwT
lGEXhz3XUEEtWL1QYO+UHIiFxzaaHFBqHnjrHWJjNW5Yve4Do8H2d5p+VdJtAgMB
AAGjggHGMIIBwjAdBgNVHQ4EFgQU726o2o5BkCcLF1CpYMB6xdTOe3gwHwYDVR0j
BBgwFoAUPjgjz/TUHCxvazogzN1Z9uu+rekwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzE0LzNFMzgy
M0NGRjRENDFDMkM2RjZCM0EyMENDREQ1OUY2RUJCRUFERTkuY3JsMGcGCCsGAQUF
BwEBBFswWTBXBggrBgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0
LzEzLzNFMzgyM0NGRjRENDFDMkM2RjZCM0EyMENDREQ1OUY2RUJCRUFERTkuY2Vy
MG4GCCsGAQUFBwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMTQvMzI2MTMwMzUzYTY0NjY2MzM2M2EzYTJmMzMzMjJkMzMzMjIw
M2QzZTIwMzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsG
AQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgXfxjANBgkqhkiG9w0BAQsFAAOCAQEA
aztlkR7Ahxw/nKKLCroIwrMw+wk0EfeDkDtrbT7idHrfPu84SfDXs9rmr39mI6Lu
szIrsbSM3ATqbus9vTu5F1T3QxjoJU4p9N2AX2/2SPwWyxE+fnsGBESmSHJLrSts
MgyzEyqjheV2vdT7FGLsnTTRH5xwBn3pqfvn4qYF+QoeMHcEoZfsZjVc/QdL6BP8
5nTiwB4Ma1H7P44I0KcT4DyL7mAlM/jFe5vrMAN1mJcjgkO0zobcJsNSfgMoxp6T
fqQaqJ6N2bfwubT83WA8w6yD4wlQs4BFzP1m5hYH6N33Rs5umgBEWVd+HZeadQVx
QmikhjFbB72lVTaI6///5A==
-----END CERTIFICATE-----