Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030303a3a2f32392d3239203d3e20393435.roa
File:                     326131333a633030303a3a2f32392d3239203d3e20393435.roa (raw, json)
Hash identifier:          a1qUDu0U+XiaBasZcOjnqDXiIX9y8EQ9XztWB25cNtk=
Subject key identifier:   96:A9:B1:5F:DA:FC:82:88:E9:81:28:36:92:29:EA:7F:E4:89:15:F7
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       39C027D9C437E2B7AE6C882F90B4008C87BD662C
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030303a3a2f32392d3239203d3e20393435.roa
Signing time:             Mon 14 Aug 2023 02:44:43 +0000
ROA not before:           Mon 14 Aug 2023 02:39:43 +0000
ROA not after:            Mon 12 Aug 2024 02:44:43 +0000
asID:                     945
IP address blocks:        2a13:c000::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c0:27:d9:c4:37:e2:b7:ae:6c:88:2f:90:b4:00:8c:87:bd:66:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Aug 14 02:39:43 2023 GMT
            Not After : Aug 12 02:44:43 2024 GMT
        Subject: CN=96A9B15FDAFC8288E98128369229EA7FE48915F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:69:60:fa:bc:a5:de:d1:31:39:3f:f7:4c:4d:
                    2f:40:48:15:b6:8a:39:82:8e:f5:f9:93:a6:57:4e:
                    e8:c3:46:5f:d5:e5:94:bc:60:d1:52:b6:f6:ae:59:
                    c0:1c:17:1a:77:df:de:cd:98:a6:7e:c6:4d:d1:a0:
                    35:a0:23:e8:4e:27:1b:55:40:2e:8e:e0:5b:8f:f8:
                    85:d9:99:10:11:97:06:50:a0:95:87:d6:74:d8:8e:
                    4d:d1:21:27:57:a8:2c:4d:78:94:84:ed:73:c3:02:
                    fe:2f:2f:98:f3:33:87:ae:11:5d:ff:f5:10:6f:2e:
                    72:35:0f:79:c9:2d:37:e1:54:23:e6:93:71:44:80:
                    48:fa:a9:c9:ce:73:b5:73:be:44:91:b0:8b:2b:4b:
                    d5:5f:96:eb:d4:02:4f:6b:e9:f1:d1:45:ff:54:04:
                    03:aa:2d:7f:f0:e1:cd:43:a6:04:59:a6:2f:35:88:
                    87:bb:57:af:ec:1b:fc:82:b7:e7:78:65:43:24:bf:
                    78:3d:6a:e5:7c:36:c6:75:3e:2d:b9:df:c8:de:0f:
                    55:49:66:db:77:43:f2:c7:e4:33:5b:c9:64:aa:ff:
                    64:79:25:0d:11:75:4b:0a:6c:13:e3:aa:e2:4c:3c:
                    3d:72:4a:d0:4f:4b:6e:7c:a9:15:5a:38:23:b0:fc:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A9:B1:5F:DA:FC:82:88:E9:81:28:36:92:29:EA:7F:E4:89:15:F7
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030303a3a2f32392d3239203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000::/29

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:16:ac:e9:ac:12:fc:1b:f1:89:02:28:c3:55:66:51:12:
         53:f4:6b:fc:b8:e7:81:40:f3:f6:e4:b6:f2:84:37:67:5c:68:
         0f:03:a7:2c:11:ee:79:5d:64:63:56:b1:f1:4a:b0:fc:22:3d:
         4a:95:ed:e9:f5:6d:bf:79:78:df:40:e1:ca:17:49:45:4f:3c:
         c3:6b:8e:bc:ce:df:c2:b6:7d:a8:de:4c:35:c9:c7:58:34:18:
         b7:b6:6d:66:d9:e1:bf:84:e4:49:5f:50:d0:5c:e1:f2:47:87:
         ca:9e:e4:ff:6e:2d:7e:46:6b:d8:6c:58:c8:fd:f4:33:18:78:
         cc:fc:c0:d0:be:27:e8:21:64:38:64:56:6d:43:a5:82:f8:5b:
         81:ef:14:5f:1c:a6:41:5a:8d:aa:0b:05:4e:17:52:c7:20:b5:
         97:49:a2:54:08:12:70:02:9d:e8:d0:d3:57:83:94:25:44:ee:
         65:54:8f:96:2e:f2:75:d9:8b:f3:f5:cc:bc:13:6e:2a:75:8a:
         54:b9:f4:7a:79:1f:b0:02:91:77:49:6a:3a:02:d6:a7:f9:d0:
         5e:5e:2c:24:45:6d:46:b7:9a:ae:3d:0a:cb:db:ff:9a:d6:52:
         3d:c9:17:14:b6:9f:af:11:c5:35:36:bd:7b:e2:cf:ee:91:d4:
         1b:8d:07:a1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOcAn2cQ34reubIgvkLQAjIe9ZiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ0QTIyNEE5NTY1RjY3RTQ5MTRFNkY4QzJCM0MzNDMw
M0M5Qzg3NTAeFw0yMzA4MTQwMjM5NDNaFw0yNDA4MTIwMjQ0NDNaMDMxMTAvBgNV
BAMTKDk2QTlCMTVGREFGQzgyODhFOTgxMjgzNjkyMjlFQTdGRTQ4OTE1RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbaWD6vKXe0TE5P/dMTS9ASBW2
ijmCjvX5k6ZXTujDRl/V5ZS8YNFStvauWcAcFxp3397NmKZ+xk3RoDWgI+hOJxtV
QC6O4FuP+IXZmRARlwZQoJWH1nTYjk3RISdXqCxNeJSE7XPDAv4vL5jzM4euEV3/
9RBvLnI1D3nJLTfhVCPmk3FEgEj6qcnOc7VzvkSRsIsrS9VfluvUAk9r6fHRRf9U
BAOqLX/w4c1DpgRZpi81iIe7V6/sG/yCt+d4ZUMkv3g9auV8NsZ1Pi2538jeD1VJ
Ztt3Q/LH5DNbyWSq/2R5JQ0RdUsKbBPjquJMPD1yStBPS258qRVaOCOw/PBPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUlqmxX9r8gojpgSg2kinqf+SJFfcwHwYDVR0j
BBgwFoAUrUoiSpVl9n5JFOb4wrPDQwPJyHUwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzUvQUQ0QTIy
NEE5NTY1RjY3RTQ5MTRFNkY4QzJCM0MzNDMwM0M5Qzg3NS5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
MS9BRDRBMjI0QTk1NjVGNjdFNDkxNEU2RjhDMkIzQzM0MzAzQzlDODc1LmNlcjBt
BggrBgEFBQcBCwRhMF8wXQYIKwYBBQUHMAuGUXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzUvMzI2MTMxMzMzYTYzMzAzMDMwM2EzYTJmMzIzOTJkMzIzOTIwM2Qz
ZTIwMzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhPAADANBgkqhkiG9w0BAQsFAAOCAQEAOkUW
rOmsEvwb8YkCKMNVZlESU/Rr/LjngUDz9uS28oQ3Z1xoDwOnLBHueV1kY1ax8Uqw
/CI9SpXt6fVtv3l430DhyhdJRU88w2uOvM7fwrZ9qN5MNcnHWDQYt7ZtZtnhv4Tk
SV9Q0Fzh8keHyp7k/24tfkZr2GxYyP30Mxh4zPzA0L4n6CFkOGRWbUOlgvhbge8U
XxymQVqNqgsFThdSxyC1l0miVAgScAKd6NDTV4OUJUTuZVSPli7yddmL8/XMvBNu
KnWKVLn0enkfsAKRd0lqOgLWp/nQXl4sJEVtRrearj0Ky9v/mtZSPckXFLafrxHF
NTa9e+LP7pHUG40HoQ==
-----END CERTIFICATE-----