Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa
File:                     323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa (raw, json)
Hash identifier:          5UYDfzsj2BmMJwpwRTSZuFtV+uIDdQzTkjdQ6SlgmOw=
Subject key identifier:   FD:72:1F:5F:F9:14:1F:5F:2E:24:A6:DB:8F:B5:BD:5B:71:A1:4B:B1
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       04347C4D621F9BAAB0777227481CEEB4CF4AB81E
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa
Signing time:             Mon 10 Apr 2023 03:31:29 +0000
ROA not before:           Mon 10 Apr 2023 03:26:29 +0000
ROA not after:            Mon 08 Apr 2024 03:31:29 +0000
asID:                     54625
IP address blocks:        2602:fc23:150::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:34:7c:4d:62:1f:9b:aa:b0:77:72:27:48:1c:ee:b4:cf:4a:b8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Apr 10 03:26:29 2023 GMT
            Not After : Apr  8 03:31:29 2024 GMT
        Subject: CN=FD721F5FF9141F5F2E24A6DB8FB5BD5B71A14BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:6c:b0:0c:14:a7:9a:09:5b:61:17:b1:f4:
                    69:07:43:47:63:be:cd:0f:5a:37:6f:ca:5a:83:0d:
                    e6:cd:c7:fe:33:90:c7:6f:22:50:42:e6:d7:45:3d:
                    de:7e:85:2b:7a:59:e6:b9:b8:2a:d4:b0:3c:92:92:
                    e4:6f:f1:82:04:1c:f1:be:22:81:8a:d3:dd:8c:a2:
                    51:d2:21:53:a5:a9:98:42:49:a6:8a:64:51:d6:b2:
                    1d:f9:fb:f8:c9:a7:86:d4:a1:ee:51:90:16:76:7f:
                    74:23:b7:e9:11:64:48:69:6e:3a:0f:12:28:52:37:
                    20:9c:10:44:d3:18:38:c0:e0:fa:3b:da:cf:67:f9:
                    39:51:1f:a3:aa:69:84:8d:47:2f:82:b2:0a:5b:12:
                    ff:b0:d1:64:a9:0e:15:7f:20:9a:76:86:c4:ee:4d:
                    f9:8e:96:ec:6f:03:e6:27:12:20:2b:a4:bb:4f:99:
                    88:f6:f8:0e:a8:21:39:aa:87:45:2c:c1:31:51:54:
                    3b:1c:d4:36:05:fc:8e:dc:4e:00:6c:d6:e8:b5:40:
                    6f:49:95:a7:c3:ed:6a:3d:4a:71:a1:94:48:9a:d3:
                    87:aa:24:58:08:cf:dd:61:a6:d4:7a:b5:ec:c5:a7:
                    8d:04:76:d7:b8:35:19:fc:b7:2d:c7:48:35:1a:33:
                    09:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:1F:5F:F9:14:1F:5F:2E:24:A6:DB:8F:B5:BD:5B:71:A1:4B:B1
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:150::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:63:f7:bd:3a:6a:3a:61:47:c5:01:ad:b5:29:6e:50:cb:78:
         2a:97:b1:ee:d4:18:79:1a:b7:97:3a:1a:58:19:cf:fe:a1:16:
         7c:e7:4f:b6:be:7e:e9:d5:63:c8:1d:f9:87:2e:a9:09:02:cd:
         8b:7e:12:58:87:49:91:62:bf:25:9b:81:24:a5:60:23:ac:c4:
         48:cd:3a:60:85:70:41:c9:af:81:5e:c1:69:66:1d:bb:3b:a5:
         66:a5:6f:bd:46:fa:8e:73:76:59:21:60:02:93:95:27:3f:69:
         79:85:73:4b:c3:91:05:80:f8:ae:f6:c3:32:a8:ac:e1:b3:dc:
         38:7b:02:a3:ac:3b:59:63:ba:21:5b:a5:9c:27:86:a4:8e:c7:
         be:38:ac:76:f8:31:4d:9c:e2:c1:4f:56:5d:e1:ce:b0:94:fb:
         15:16:5c:03:91:ca:79:44:7d:e8:b4:ce:cf:57:3c:31:19:de:
         4a:21:d1:cd:4d:c9:e7:6a:18:ba:3b:15:1b:10:ea:7a:94:75:
         41:64:73:ea:c1:35:4c:cf:85:e4:9e:22:e6:3e:1d:0a:56:70:
         b7:d1:88:a1:0a:0d:df:bf:55:54:eb:62:f6:df:24:e0:07:4a:
         7e:03:78:2d:11:fd:2a:ac:2c:de:08:82:93:92:43:29:47:dd:
         eb:df:c5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----