Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/3/323630323a666266363a3a2f33322d3332203d3e203530303538.roa
File:                     323630323a666266363a3a2f33322d3332203d3e203530303538.roa (raw, json)
Hash identifier:          k9UyGIM/vKYzAXBhbEJc2rTQchoV7Au2/4F99Jlq/L8=
Subject key identifier:   AC:03:E3:D5:2D:1F:63:F5:AA:6C:E8:DB:00:FF:13:C8:FC:FB:E7:87
Certificate issuer:       /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial:       4F2B5DC33D29E5122796BE2BD4D0D50AC1A8D5E8
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access:    rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access:      rsync://rpki.co/repo/AS945/3/323630323a666266363a3a2f33322d3332203d3e203530303538.roa
Signing time:             Mon 10 Apr 2023 03:31:30 +0000
ROA not before:           Mon 10 Apr 2023 03:26:30 +0000
ROA not after:            Mon 08 Apr 2024 03:31:30 +0000
asID:                     50058
IP address blocks:        2602:fbf6::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2b:5d:c3:3d:29:e5:12:27:96:be:2b:d4:d0:d5:0a:c1:a8:d5:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
        Validity
            Not Before: Apr 10 03:26:30 2023 GMT
            Not After : Apr  8 03:31:30 2024 GMT
        Subject: CN=AC03E3D52D1F63F5AA6CE8DB00FF13C8FCFBE787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:36:91:1a:f6:c5:9c:1c:b5:ef:cc:8a:c6:
                    d9:ef:ff:1f:82:05:d2:ab:ef:28:b4:b8:1e:ae:d3:
                    23:cb:85:2d:03:9f:bc:f4:a4:22:03:1c:a3:ca:1b:
                    76:f5:c6:d7:ec:87:94:d1:64:ec:d9:eb:e7:d1:c7:
                    c9:2d:5a:72:e1:53:a8:1e:62:7c:45:81:13:9d:7c:
                    95:e3:14:70:32:a7:6a:5f:94:78:b5:98:47:14:fa:
                    32:e5:aa:14:89:dc:b8:a1:67:72:03:ed:6a:a5:7d:
                    19:b1:58:5d:fb:eb:10:c6:c3:97:ce:e4:ae:7e:a7:
                    e5:0b:59:df:88:12:45:8b:bb:e8:2a:35:91:38:82:
                    bb:ba:d4:bd:79:9d:3c:1f:ab:7a:05:f2:dd:9d:c0:
                    38:25:9c:09:17:d2:d2:5b:ad:56:15:61:b5:fb:12:
                    26:a4:db:a5:06:07:ca:08:cc:d3:8d:8b:25:c7:15:
                    39:7a:5a:ed:b4:13:85:25:d9:89:99:88:1e:d9:90:
                    49:f4:c3:34:96:ce:dd:f5:00:85:94:ea:f7:07:5e:
                    49:26:e9:fa:5a:78:26:60:ae:d4:43:b7:29:19:38:
                    e9:2f:a1:40:b2:da:bb:05:4d:75:d9:a8:b7:15:bc:
                    fc:26:d5:ca:c0:3d:f6:e0:cc:b8:14:2c:a1:f2:b3:
                    8f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:03:E3:D5:2D:1F:63:F5:AA:6C:E8:DB:00:FF:13:C8:FC:FB:E7:87
            X509v3 Authority Key Identifier:
                keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/3/323630323a666266363a3a2f33322d3332203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf6::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:62:5e:d4:4d:ee:e2:42:8f:cd:4f:8b:33:05:7d:a3:02:aa:
         dc:c2:4d:60:3e:8c:e9:4d:e8:99:84:d1:62:85:cb:d7:67:5e:
         e1:49:9d:1f:cd:f9:e3:40:66:01:92:e6:90:98:28:b4:46:0d:
         5d:a5:fd:9c:4c:1e:e6:72:6c:d9:35:f5:80:1c:67:ac:21:08:
         11:85:10:b2:b0:66:29:67:3c:78:06:0b:f4:d6:21:db:b9:ac:
         64:d1:22:2f:74:ba:a2:0d:0f:5b:39:12:59:6c:1f:9a:ba:8d:
         4a:91:ab:cf:ec:a9:79:49:7f:38:94:11:e1:95:66:33:7a:01:
         64:51:e3:32:8b:4e:6f:97:af:11:eb:07:23:0f:20:16:95:18:
         10:ea:63:5f:cd:9c:1d:39:01:24:73:35:d0:19:bf:a3:32:cd:
         03:14:c8:0a:60:d0:c9:94:d6:4a:01:a7:ec:01:b2:ec:a5:1e:
         3c:17:f9:f9:4a:0b:ac:97:d7:d3:12:f1:9c:af:26:81:50:2e:
         2d:63:3b:9f:aa:2d:19:67:ea:5b:8a:7f:95:f4:49:ec:b3:c6:
         bb:7a:f0:74:d7:5c:20:23:bd:10:7b:da:b6:56:20:73:db:5b:
         fa:ee:f1:05:2d:c3:e0:82:77:9e:e5:d9:60:95:2e:7c:fd:d2:
         7f:47:70:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----