Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/3/323030313a3530363a33333a3a2f34382d3438203d3e20393435.roa
File:                     323030313a3530363a33333a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          h+8QacivzXEDcuM/Lx3bhUE36hx0xlpnRpVMap+FKog=
Subject key identifier:   F0:FC:C1:F5:19:56:F8:3B:88:DF:D3:EB:11:91:4E:A2:7C:52:43:40
Certificate issuer:       /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial:       2B2C135F58561BE4DA88618E3FE61A15F95074B3
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access:    rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access:      rsync://rpki.co/repo/AS945/3/323030313a3530363a33333a3a2f34382d3438203d3e20393435.roa
Signing time:             Fri 11 Aug 2023 05:52:50 +0000
ROA not before:           Fri 11 Aug 2023 05:47:50 +0000
ROA not after:            Fri 09 Aug 2024 05:52:50 +0000
asID:                     945
IP address blocks:        2001:506:33::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2c:13:5f:58:56:1b:e4:da:88:61:8e:3f:e6:1a:15:f9:50:74:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
        Validity
            Not Before: Aug 11 05:47:50 2023 GMT
            Not After : Aug  9 05:52:50 2024 GMT
        Subject: CN=F0FCC1F51956F83B88DFD3EB11914EA27C524340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:b8:72:70:97:5d:c4:fb:2e:fd:96:c9:10:
                    52:74:da:70:df:00:e9:28:4b:7e:ea:a2:57:1c:da:
                    9e:e0:1e:3d:d1:2a:5c:2c:a1:7a:0f:73:58:68:90:
                    62:3f:65:3c:7c:c4:a7:68:ce:fc:c3:13:f1:3f:f1:
                    a4:d4:aa:40:e2:f4:fe:fe:41:9b:16:62:d3:6e:5a:
                    5f:fb:18:83:71:83:c8:f3:45:7a:99:ff:57:33:07:
                    06:aa:ed:3a:5a:d4:72:9c:1d:95:2c:ee:72:49:e3:
                    8e:e6:c0:49:04:c2:a8:7e:f5:93:a8:0c:80:f2:59:
                    4c:15:08:72:66:53:29:77:d2:97:34:d7:11:a0:ca:
                    71:f5:16:6e:96:01:3b:58:e1:78:75:d0:0a:d8:70:
                    20:fb:55:ac:a2:d4:da:ac:60:00:1d:8b:24:1e:0d:
                    66:de:e4:05:f3:54:4a:4a:b2:b0:0a:2b:3d:5d:f2:
                    25:8c:f2:c5:12:48:c2:ae:12:bd:79:e1:82:3a:ec:
                    3b:2e:37:87:81:b3:1e:18:9a:8a:3b:fa:91:c4:59:
                    98:82:3d:eb:64:a8:c1:38:a4:50:aa:4d:d0:95:01:
                    03:04:94:24:6f:61:9b:1a:bf:f6:6a:9e:f3:d9:3b:
                    da:e0:19:8f:30:14:81:3d:98:00:46:0f:1a:a3:e8:
                    36:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FC:C1:F5:19:56:F8:3B:88:DF:D3:EB:11:91:4E:A2:7C:52:43:40
            X509v3 Authority Key Identifier:
                keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/3/323030313a3530363a33333a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:506:33::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:c7:2a:f8:f3:53:17:aa:99:2f:69:6d:cd:e9:4e:89:fb:88:
         aa:05:21:54:30:84:c6:a3:16:05:7a:85:13:57:f0:24:dd:86:
         e1:21:d9:23:d0:3c:6e:98:04:2d:18:d5:75:ff:c4:4f:4a:f6:
         4c:2c:93:f8:23:ad:de:79:74:81:17:ec:c8:35:3b:34:c8:ee:
         ac:30:ed:ae:c6:fd:b2:ae:f6:b5:6f:78:1c:39:6f:8d:d8:56:
         a0:11:d4:55:2f:51:28:59:29:d6:22:b8:57:b7:1e:dc:af:ca:
         2b:2e:83:63:13:ba:9b:fe:28:bc:83:e2:25:0e:c2:79:d6:09:
         3b:fd:69:0f:13:42:25:45:c4:1d:7c:a7:84:ae:86:b7:94:8e:
         64:86:a3:98:7f:da:6f:2c:f1:92:cc:db:bb:73:9a:81:04:55:
         5f:3a:80:d0:b7:e6:5a:4e:a9:98:7c:56:65:3f:95:2b:4a:22:
         98:b0:81:bf:ed:2b:56:a2:20:93:36:cf:ec:24:b8:45:f8:39:
         a6:c1:fb:d2:72:35:d8:14:c3:b1:1e:1f:43:3a:f6:c7:57:44:
         e1:f6:3e:42:2d:5e:29:16:39:04:50:98:ea:30:a2:06:9f:4f:
         ca:56:14:46:cf:6c:b0:ea:7a:6c:71:99:75:f8:6b:0d:bb:1e:
         ad:88:7d:2d
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUKywTX1hWG+TaiGGOP+YaFflQdLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk5RTM2NzdGOEUyREVGMkE1ODM3QzNENEE3Njg2QzdD
ODlCNTFDNjAeFw0yMzA4MTEwNTQ3NTBaFw0yNDA4MDkwNTUyNTBaMDMxMTAvBgNV
BAMTKEYwRkNDMUY1MTk1NkY4M0I4OERGRDNFQjExOTE0RUEyN0M1MjQzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SbhycJddxPsu/ZbJEFJ02nDf
AOkoS37qolcc2p7gHj3RKlwsoXoPc1hokGI/ZTx8xKdozvzDE/E/8aTUqkDi9P7+
QZsWYtNuWl/7GINxg8jzRXqZ/1czBwaq7Tpa1HKcHZUs7nJJ447mwEkEwqh+9ZOo
DIDyWUwVCHJmUyl30pc01xGgynH1Fm6WATtY4Xh10ArYcCD7Vayi1NqsYAAdiyQe
DWbe5AXzVEpKsrAKKz1d8iWM8sUSSMKuEr154YI67DsuN4eBsx4Ymoo7+pHEWZiC
PetkqME4pFCqTdCVAQMElCRvYZsav/ZqnvPZO9rgGY8wFIE9mABGDxqj6Da5AgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU8PzB9RlW+DuI39PrEZFOonxSQ0AwHwYDVR0j
BBgwFoAU2Z42d/ji3vKlg3w9SnaGx8ibUcYwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzMvRDk5RTM2
NzdGOEUyREVGMkE1ODM3QzNENEE3Njg2QzdDODlCNTFDNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
MC9EOTlFMzY3N0Y4RTJERUYyQTU4MzdDM0Q0QTc2ODZDN0M4OUI1MUM2LmNlcjBx
BggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzMvMzIzMDMwMzEzYTM1MzAzNjNhMzMzMzNhM2EyZjM0MzgyZDM0Mzgy
MDNkM2UyMDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBQYAMzANBgkqhkiG9w0BAQsFAAOC
AQEAJccq+PNTF6qZL2ltzelOifuIqgUhVDCExqMWBXqFE1fwJN2G4SHZI9A8bpgE
LRjVdf/ET0r2TCyT+COt3nl0gRfsyDU7NMjurDDtrsb9sq72tW94HDlvjdhWoBHU
VS9RKFkp1iK4V7ce3K/KKy6DYxO6m/4ovIPiJQ7CedYJO/1pDxNCJUXEHXynhK6G
t5SOZIajmH/abyzxkszbu3OagQRVXzqA0LfmWk6pmHxWZT+VK0oimLCBv+0rVqIg
kzbP7CS4Rfg5psH70nI12BTDsR4fQzr2x1dE4fY+Qi1eKRY5BFCY6jCiBp9PylYU
Rs9ssOp6bHGZdfhrDbserYh9LQ==
-----END CERTIFICATE-----