Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3a2f33362d3336203d3e20393435.roa
File:                     323630323a666332333a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          mEi/9dZmc1i0INi5ZjJNchQmRXKfEHBAZ/x2yUH/Pk8=
Subject key identifier:   D0:E6:BD:F3:B6:30:B1:DE:CA:40:07:FA:EE:FC:AE:2E:0A:9F:9A:E8
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       7900B08A01902E5A4A861BA150371C61264DD070
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3a2f33362d3336203d3e20393435.roa
Signing time:             Mon 14 Aug 2023 02:45:50 +0000
ROA not before:           Mon 14 Aug 2023 02:40:50 +0000
ROA not after:            Mon 12 Aug 2024 02:45:50 +0000
asID:                     945
IP address blocks:        2602:fc23::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:00:b0:8a:01:90:2e:5a:4a:86:1b:a1:50:37:1c:61:26:4d:d0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Aug 14 02:40:50 2023 GMT
            Not After : Aug 12 02:45:50 2024 GMT
        Subject: CN=D0E6BDF3B630B1DECA4007FAEEFCAE2E0A9F9AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:d1:4b:16:5e:88:d3:c4:c9:0d:90:c2:0a:
                    d0:1c:31:37:9e:b8:00:c7:df:1a:4d:c1:ff:48:35:
                    de:b8:7b:f3:94:d1:03:8d:d7:3e:c9:20:8d:f1:7b:
                    6b:61:a8:cb:e7:10:f8:01:ec:e4:dc:5f:8d:bb:52:
                    ae:11:40:a4:ba:ae:87:ea:67:bf:7f:0c:15:79:b8:
                    6e:2f:f3:70:93:cd:27:72:81:d0:bb:89:e5:10:60:
                    a8:e7:85:88:a6:8e:ae:e8:2c:39:b3:44:83:a5:56:
                    f2:70:fe:50:ae:37:24:92:07:13:03:cd:e8:9b:c7:
                    cc:ba:34:d5:4d:10:6a:1d:93:4a:2e:ba:75:a8:3e:
                    e7:16:2a:a6:4f:2c:26:62:b1:cd:48:76:81:7f:ce:
                    a7:3a:95:ae:e4:0b:48:5e:f5:5b:e1:13:af:96:71:
                    00:c3:58:2b:d4:14:52:f9:e2:cf:08:7b:0a:61:18:
                    b5:6d:78:9b:3d:e0:16:79:8f:db:7d:61:89:fa:95:
                    5c:d3:6e:ee:0b:82:c6:48:da:91:2a:0d:e9:c0:8b:
                    c6:24:ba:b0:cb:b0:3c:51:b2:5e:96:f3:55:58:49:
                    51:40:0a:d5:a6:3f:41:3b:35:c5:35:a8:7e:4f:ee:
                    44:38:ed:5c:2a:15:01:62:54:5d:75:db:1f:01:6e:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E6:BD:F3:B6:30:B1:DE:CA:40:07:FA:EE:FC:AE:2E:0A:9F:9A:E8
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23::/36

    Signature Algorithm: sha256WithRSAEncryption
         5a:25:c7:bf:c7:66:97:9d:73:fd:14:fd:48:1e:25:a1:f2:d2:
         68:6e:fa:84:a2:c5:7d:74:f1:a5:77:80:ec:79:4b:cf:0e:61:
         ba:46:48:8b:6d:de:fc:ce:89:a3:e4:d5:f1:62:89:cf:d2:30:
         e8:f7:31:3c:19:d7:01:d6:6b:dd:51:59:ec:7f:e5:59:82:e0:
         92:fb:4e:69:86:d7:13:f5:bd:f2:02:f2:c7:95:fd:c7:e4:6f:
         f0:67:e7:82:d8:b8:f3:a2:5c:11:5b:4a:d6:62:66:d2:d5:9e:
         70:5d:85:4d:85:0d:2c:43:ac:05:aa:4c:75:bd:9e:c5:9c:e2:
         1d:bb:a6:9a:0b:e1:4c:0f:31:11:a6:13:c0:34:a5:37:8e:0f:
         2e:03:ee:2f:5a:3f:6e:92:79:a1:65:d5:fc:6d:e6:e9:06:2f:
         bc:f9:42:97:26:17:32:88:86:c5:c4:08:98:98:b4:e1:a9:7d:
         f3:69:a7:a0:d7:2e:a9:e7:ec:06:ed:b2:c5:a9:fa:d3:88:eb:
         0d:02:bd:c4:5c:59:3a:7d:bd:2c:80:c1:4b:f9:88:94:64:43:
         8e:68:e6:8d:29:3f:25:2e:58:8a:80:7b:cd:74:e0:6a:49:ce:
         55:a2:17:34:d9:cb:93:0e:38:b3:1d:6f:b9:66:01:b2:7c:26:
         7c:f5:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----