Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa
File:                     323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa (raw, json)
Hash identifier:          GIanXEyUjQtDOosZDv2+QnB+tekWl9BddrG8yUMBEeA=
Subject key identifier:   D2:3C:3B:08:50:B5:50:84:D3:C2:41:D4:02:FA:A0:78:09:ED:9C:CF
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       4032884C528D38689D7D89E0665F62ACE7F0B6AC
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa
Signing time:             Mon 10 Apr 2023 03:31:30 +0000
ROA not before:           Mon 10 Apr 2023 03:26:30 +0000
ROA not after:            Mon 08 Apr 2024 03:31:30 +0000
asID:                     44406
IP address blocks:        2602:fc23:114::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:32:88:4c:52:8d:38:68:9d:7d:89:e0:66:5f:62:ac:e7:f0:b6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Apr 10 03:26:30 2023 GMT
            Not After : Apr  8 03:31:30 2024 GMT
        Subject: CN=D23C3B0850B55084D3C241D402FAA07809ED9CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:70:a7:b8:ea:da:11:20:aa:de:66:a5:86:
                    6f:e2:5d:9e:7a:56:e6:23:38:db:1e:76:78:76:24:
                    88:63:74:b5:55:be:82:f7:ab:80:30:5d:71:1d:f2:
                    93:ea:4e:03:3c:f8:1a:38:39:d6:bf:44:d4:22:85:
                    88:fc:ff:6e:33:d5:b7:a1:6f:49:7c:f4:ce:b0:13:
                    d8:2f:1b:9a:5b:94:19:3a:e9:2b:61:0d:48:1c:30:
                    24:e3:72:a3:6f:5e:03:7d:46:f6:e3:b9:d0:23:81:
                    37:ad:24:60:bd:66:ef:3e:75:ab:8a:8a:32:79:0e:
                    46:cd:23:65:aa:61:be:46:1c:bf:97:b7:d9:bc:f8:
                    bb:67:60:35:bc:6e:a8:ba:24:28:8d:dd:27:59:ff:
                    9f:7b:d0:22:29:5a:fa:3c:52:bc:2e:11:62:a8:bd:
                    bc:3f:cb:96:ca:46:09:81:48:3e:d6:64:ff:b2:4f:
                    42:b5:4f:0f:c0:df:ba:f0:40:30:62:e3:f3:12:ba:
                    80:81:f0:60:74:77:b8:c4:be:ec:b7:e2:24:68:bd:
                    e9:11:cd:0b:95:c5:0f:9d:0d:1c:92:ad:9c:3f:05:
                    b4:3c:5f:63:17:44:95:e3:24:65:2c:c4:e3:ef:2d:
                    61:a6:96:29:b8:70:5a:f4:ce:1c:a2:6c:68:bd:0d:
                    a1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3C:3B:08:50:B5:50:84:D3:C2:41:D4:02:FA:A0:78:09:ED:9C:CF
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3131343a3a2f34372d3437203d3e203434343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:114::/47

    Signature Algorithm: sha256WithRSAEncryption
         7f:76:bc:d1:09:60:7c:99:d4:cf:4c:2f:81:ca:87:bf:1a:69:
         bf:df:9a:42:3e:53:b6:54:3e:b8:22:f8:1d:0a:fe:5e:b8:8a:
         29:34:52:2e:e3:ee:85:91:30:f8:9c:bc:e7:8d:96:80:b5:c8:
         97:3c:e5:ab:98:13:ca:f3:16:15:f3:ba:53:df:50:5f:a5:58:
         4f:da:63:bb:52:40:6f:2d:4b:64:59:9d:01:17:5a:83:a4:b7:
         3b:65:c4:2a:64:0f:5e:dd:22:cf:3d:10:cb:99:c8:09:0e:cd:
         18:00:b8:c3:d2:24:b2:da:d4:29:eb:8b:e2:77:dc:0b:13:e9:
         f0:7a:ab:23:35:a5:f0:53:99:bc:61:d6:65:83:2a:40:31:87:
         50:bf:55:56:50:16:ae:b6:59:37:bb:ae:2d:ee:6f:a1:5d:30:
         8e:dd:cf:01:68:35:1a:ae:31:4a:38:b9:cc:07:6a:52:ad:2a:
         a5:e3:0b:1e:2b:6d:d4:3d:d0:4c:7f:bc:40:47:97:62:05:aa:
         9f:d3:28:55:98:f6:37:2f:49:3f:f4:c4:18:24:f3:a5:fd:89:
         ad:70:65:4d:63:a0:d1:38:ee:e0:ed:85:11:aa:4c:75:cb:52:
         4e:57:a3:5b:65:71:8d:b3:93:31:e0:c0:8d:db:93:b3:d6:f2:
         46:92:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----