Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a3831353a373030303a3a2f34342d3434203d3e20393435.roa
File:                     323630323a3831353a373030303a3a2f34342d3434203d3e20393435.roa (raw, json)
Hash identifier:          WxmtGMXfW0htkHhCE08iCLt6gZiwt4W+YDd2iZqgv1c=
Subject key identifier:   E3:2B:EA:F6:7A:2B:8A:C7:6B:1C:F2:C3:46:E0:E7:94:4F:C6:78:A2
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       5563D3AEC82B0A9085FB1A41A43C42EF02B4BB42
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a3831353a373030303a3a2f34342d3434203d3e20393435.roa
Signing time:             Wed 02 Aug 2023 20:28:20 +0000
ROA not before:           Wed 02 Aug 2023 20:23:20 +0000
ROA not after:            Wed 31 Jul 2024 20:28:20 +0000
asID:                     945
IP address blocks:        2602:815:7000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:63:d3:ae:c8:2b:0a:90:85:fb:1a:41:a4:3c:42:ef:02:b4:bb:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Aug  2 20:23:20 2023 GMT
            Not After : Jul 31 20:28:20 2024 GMT
        Subject: CN=E32BEAF67A2B8AC76B1CF2C346E0E7944FC678A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:dc:c6:a3:59:1d:c1:bd:30:87:60:3e:a6:
                    71:b2:83:84:cf:3a:1a:9d:d1:45:68:9d:a5:1a:28:
                    ea:6f:8a:68:95:9a:5c:f2:d1:c0:20:67:dd:ea:89:
                    85:84:7e:a2:66:ff:f8:aa:0b:36:e3:2a:5c:aa:ca:
                    3c:20:24:f5:23:92:30:0a:c3:21:c7:1d:f3:59:aa:
                    9e:b7:ec:4f:40:0a:0f:5e:fd:03:cc:67:97:83:3d:
                    12:14:df:9a:05:ef:53:dc:73:f3:1e:05:7e:cc:8a:
                    2d:32:57:c1:4b:56:18:b2:4c:5a:4c:4a:f8:f1:28:
                    a9:5b:03:75:b4:67:a0:69:ef:15:48:ad:1b:74:a3:
                    43:3f:97:87:bf:89:e5:5e:5d:17:2d:27:32:12:44:
                    78:80:0c:52:4c:3f:ae:f0:80:53:bc:42:23:ba:39:
                    8f:d3:9b:90:29:46:c6:08:5a:8e:8c:d9:47:64:7d:
                    5a:55:d9:1b:21:76:6e:1f:4a:da:8f:b4:e9:f2:c2:
                    2c:81:71:17:f3:ad:5b:22:aa:87:1f:15:03:09:af:
                    d8:1d:f4:4b:9d:95:02:84:ee:c3:57:f5:87:3f:3d:
                    d1:90:f8:3c:77:cb:80:f1:b4:5d:57:4e:0a:60:5e:
                    d6:04:6a:1c:05:30:b9:a5:22:ee:75:a3:11:ec:03:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:EA:F6:7A:2B:8A:C7:6B:1C:F2:C3:46:E0:E7:94:4F:C6:78:A2
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a3831353a373030303a3a2f34342d3434203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:7000::/44

    Signature Algorithm: sha256WithRSAEncryption
         22:54:34:53:f2:82:5e:03:9f:22:0f:74:d9:b7:24:77:89:7e:
         0f:8e:c8:e1:ef:6a:46:e8:50:d6:dc:04:78:6f:e0:69:66:86:
         f8:04:9b:0e:f7:30:a3:dc:b6:0b:30:89:63:84:63:0c:a9:cb:
         e6:48:87:a2:69:f8:1b:8c:31:35:6d:e4:69:81:b4:8f:1a:9d:
         e2:18:7a:be:6e:bd:06:ea:3a:30:e9:0b:0c:61:38:1b:08:cf:
         66:78:44:fd:c3:ed:e4:6b:86:c6:e7:a8:cf:a5:bf:88:20:86:
         76:1a:e5:70:3c:c4:06:e5:04:ed:15:f2:be:93:bf:3e:4d:1e:
         7b:80:76:c6:1f:8c:7d:61:27:9a:ec:0f:f0:ed:ac:ad:2d:a5:
         a0:80:ef:9e:d1:66:1f:02:32:7d:87:c2:ed:e9:f0:db:52:d5:
         c1:1e:35:2a:4e:2c:8d:d8:d5:5d:28:a8:34:4f:09:80:83:cf:
         e4:96:4e:78:30:05:ed:b4:88:a5:56:92:3a:ea:99:9b:29:e9:
         29:d4:3c:8b:7c:3e:1b:fb:60:85:8f:91:d1:7a:bd:82:9e:67:
         e7:35:9a:25:ae:89:26:d4:ce:81:ca:31:01:c6:2e:cb:c2:3c:
         0c:0e:50:75:a3:4f:76:fd:43:71:69:67:93:5e:fd:4f:7c:1f:
         99:2a:6e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----