Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/3/323630323a666266363a3a2f33322d3332203d3e20393435.roa
File:                     323630323a666266363a3a2f33322d3332203d3e20393435.roa (raw, json)
Hash identifier:          JcOnWTRrYwGKjctoYhtTL8CuYDNaVLBNuRMJu2F3snQ=
Subject key identifier:   DB:69:DF:9B:F7:55:57:6C:F4:5A:AE:3E:59:A4:51:F4:01:91:58:25
Certificate issuer:       /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial:       11AE664FCC5A9BA9164B98196BCE19F067AE9465
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access:    rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access:      rsync://rpki.co/repo/AS945/3/323630323a666266363a3a2f33322d3332203d3e20393435.roa
Signing time:             Mon 14 Aug 2023 02:46:03 +0000
ROA not before:           Mon 14 Aug 2023 02:41:03 +0000
ROA not after:            Mon 12 Aug 2024 02:46:03 +0000
asID:                     945
IP address blocks:        2602:fbf6::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ae:66:4f:cc:5a:9b:a9:16:4b:98:19:6b:ce:19:f0:67:ae:94:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
        Validity
            Not Before: Aug 14 02:41:03 2023 GMT
            Not After : Aug 12 02:46:03 2024 GMT
        Subject: CN=DB69DF9BF755576CF45AAE3E59A451F401915825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ca:92:49:03:28:f2:24:42:4a:19:1e:4c:29:
                    96:2b:6a:56:d3:11:1f:fc:cb:76:b5:a1:58:8c:cc:
                    b3:5e:1e:43:71:2d:34:a5:ac:00:e3:71:d5:2a:1b:
                    05:94:62:a5:32:0f:d4:ab:6a:a3:d3:2c:0d:e3:f7:
                    d4:96:2b:06:ee:64:88:57:90:4a:db:fc:25:e8:ab:
                    da:1d:7d:63:b7:c2:ff:2b:82:df:48:48:e8:00:e0:
                    83:c8:8f:56:25:4d:0c:6b:25:25:d7:1c:69:83:bf:
                    85:89:1c:10:6a:76:d5:d6:3e:2e:47:11:7e:82:f7:
                    6c:85:eb:e4:ce:cf:e4:c6:0e:df:d2:07:c0:00:e4:
                    88:f5:66:85:61:c7:2b:56:15:f9:9f:73:7e:2d:88:
                    91:f6:97:3b:d6:77:3b:a1:32:69:01:85:ca:4a:29:
                    b9:b8:83:7d:a2:f6:85:99:6b:1f:6a:53:89:0c:44:
                    74:9a:9a:ee:f5:71:ed:a0:d4:68:15:25:40:31:dc:
                    1b:91:2b:85:94:03:77:c2:b1:ae:32:33:27:92:4c:
                    a9:ee:4a:92:56:a9:9c:71:2c:a8:95:dc:1c:7e:80:
                    91:10:4e:5e:7a:42:31:63:b8:c4:7b:ff:dc:4c:46:
                    8c:11:fc:db:2d:43:9f:d0:3f:20:06:19:0b:78:e0:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:69:DF:9B:F7:55:57:6C:F4:5A:AE:3E:59:A4:51:F4:01:91:58:25
            X509v3 Authority Key Identifier:
                keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/3/323630323a666266363a3a2f33322d3332203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf6::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:ea:e2:e3:51:fe:76:c3:a1:0f:f1:d1:84:c9:9a:97:03:
         48:76:77:de:69:1d:75:36:18:95:b3:61:25:1c:3a:aa:a5:9a:
         b0:ec:73:cd:e0:ce:33:89:09:f3:5c:a6:21:1b:c5:c5:42:de:
         6a:9b:5b:6d:74:d7:95:cb:35:dd:99:c5:7a:ac:68:ff:3e:b6:
         d1:78:6f:be:ee:dd:4b:24:42:93:a9:e3:23:b6:9d:84:eb:0d:
         26:4c:93:c8:ec:db:18:a3:a5:6e:af:19:a1:07:14:8b:87:f8:
         4a:2c:ed:8f:83:f0:e5:2a:20:2a:5d:20:38:7d:cc:e5:c7:7c:
         70:63:2b:c8:c4:88:27:c6:e8:5a:b5:c4:c2:90:40:d1:c4:98:
         8b:c5:d3:e0:53:a9:1e:ec:0f:b3:e0:e5:47:5a:12:11:6a:65:
         7f:ee:0a:cc:d2:17:c1:2c:fc:73:96:7a:79:c2:99:35:68:cf:
         7f:1f:07:e7:f6:bc:30:48:f1:2f:a8:92:40:55:cf:a0:13:20:
         f9:1f:55:66:37:5a:93:36:67:84:e1:f6:f2:8d:ff:d4:cb:62:
         68:3a:b4:87:6b:35:52:c5:ce:1d:c8:eb:a6:26:8e:ae:91:16:
         87:70:87:18:c8:2e:77:17:5c:42:2a:31:9f:4a:c3:cf:4c:90:
         30:0a:15:5a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUEa5mT8xam6kWS5gZa84Z8GeulGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk5RTM2NzdGOEUyREVGMkE1ODM3QzNENEE3Njg2QzdD
ODlCNTFDNjAeFw0yMzA4MTQwMjQxMDNaFw0yNDA4MTIwMjQ2MDNaMDMxMTAvBgNV
BAMTKERCNjlERjlCRjc1NTU3NkNGNDVBQUUzRTU5QTQ1MUY0MDE5MTU4MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeypJJAyjyJEJKGR5MKZYralbT
ER/8y3a1oViMzLNeHkNxLTSlrADjcdUqGwWUYqUyD9SraqPTLA3j99SWKwbuZIhX
kErb/CXoq9odfWO3wv8rgt9ISOgA4IPIj1YlTQxrJSXXHGmDv4WJHBBqdtXWPi5H
EX6C92yF6+TOz+TGDt/SB8AA5Ij1ZoVhxytWFfmfc34tiJH2lzvWdzuhMmkBhcpK
Kbm4g32i9oWZax9qU4kMRHSamu71ce2g1GgVJUAx3BuRK4WUA3fCsa4yMyeSTKnu
SpJWqZxxLKiV3Bx+gJEQTl56QjFjuMR7/9xMRowR/NstQ5/QPyAGGQt44DQBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU22nfm/dVV2z0Wq4+WaRR9AGRWCUwHwYDVR0j
BBgwFoAU2Z42d/ji3vKlg3w9SnaGx8ibUcYwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzMvRDk5RTM2
NzdGOEUyREVGMkE1ODM3QzNENEE3Njg2QzdDODlCNTFDNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
MC9EOTlFMzY3N0Y4RTJERUYyQTU4MzdDM0Q0QTc2ODZDN0M4OUI1MUM2LmNlcjBt
BggrBgEFBQcBCwRhMF8wXQYIKwYBBQUHMAuGUXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzMvMzIzNjMwMzIzYTY2NjI2NjM2M2EzYTJmMzMzMjJkMzMzMjIwM2Qz
ZTIwMzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJgL79jANBgkqhkiG9w0BAQsFAAOCAQEAD03q
4uNR/nbDoQ/x0YTJmpcDSHZ33mkddTYYlbNhJRw6qqWasOxzzeDOM4kJ81ymIRvF
xULeaptbbXTXlcs13ZnFeqxo/z620Xhvvu7dSyRCk6njI7adhOsNJkyTyOzbGKOl
bq8ZoQcUi4f4Siztj4Pw5SogKl0gOH3M5cd8cGMryMSIJ8boWrXEwpBA0cSYi8XT
4FOpHuwPs+DlR1oSEWplf+4KzNIXwSz8c5Z6ecKZNWjPfx8H5/a8MEjxL6iSQFXP
oBMg+R9VZjdakzZnhOH28o3/1MtiaDq0h2s1UsXOHcjrpiaOrpEWh3CHGMgudxdc
Qioxn0rDz0yQMAoVWg==
-----END CERTIFICATE-----