Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/7/32332e3134392e3234382e302f32342d3234203d3e2037303138.roa
File:                     32332e3134392e3234382e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          kl8fQKxPDyZTA+ChPLhfjTD3Ioqojgx3gZ6sOU35ulU=
Subject key identifier:   5F:B3:1C:11:C8:92:3F:8B:7E:AB:50:13:1B:44:49:98:FA:C8:85:CA
Certificate issuer:       /CN=8489863A432D851EFEA043950365EE23436FCF95
Certificate serial:       568460D81A730843D5333B2FF615C985DB67AE22
Authority key identifier: 84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95
Authority info access:    rsync://rpki.co/repo/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer
Subject info access:      rsync://rpki.co/repo/AS945/7/32332e3134392e3234382e302f32342d3234203d3e2037303138.roa
Signing time:             Fri 28 Jul 2023 10:49:48 +0000
ROA not before:           Fri 28 Jul 2023 10:44:48 +0000
ROA not after:            Fri 26 Jul 2024 10:49:48 +0000
asID:                     7018
IP address blocks:        23.149.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:84:60:d8:1a:73:08:43:d5:33:3b:2f:f6:15:c9:85:db:67:ae:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8489863A432D851EFEA043950365EE23436FCF95
        Validity
            Not Before: Jul 28 10:44:48 2023 GMT
            Not After : Jul 26 10:49:48 2024 GMT
        Subject: CN=5FB31C11C8923F8B7EAB50131B444998FAC885CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dc:f0:3a:46:3d:18:47:17:f2:ee:e8:d0:b4:
                    6a:72:fb:24:71:ea:f9:d9:dc:39:ec:32:23:e4:f4:
                    bc:7f:8d:1e:cf:25:3a:d0:57:58:c5:7b:bb:09:af:
                    c2:2b:04:e5:f6:67:5b:9c:de:c4:c1:e0:90:f4:da:
                    33:5c:57:56:0f:15:88:af:da:2e:cd:bb:aa:22:3c:
                    6f:7a:17:bd:40:4f:c0:e7:b2:5a:c3:d8:9a:05:6d:
                    6b:ed:3b:3d:33:04:2f:94:f1:07:d4:a8:a5:07:9a:
                    13:c9:12:4c:ea:2d:13:1a:4d:24:76:d8:fc:2f:3d:
                    a7:8b:5e:3a:36:4b:24:6a:ab:95:91:aa:ab:02:6f:
                    ad:c0:e9:c4:c4:c1:1e:7e:bf:ca:28:2e:05:6e:80:
                    04:16:c9:8a:85:a2:bb:fc:ea:e4:24:cc:f2:d6:f7:
                    bc:ff:b4:c7:4d:6e:5b:73:e4:c1:f6:de:d7:6c:cd:
                    e2:4b:f5:7a:97:09:74:33:2a:95:18:bb:73:5f:14:
                    20:e4:11:d1:8c:b8:d1:b8:0a:07:76:1b:4b:4b:ec:
                    f1:46:ab:f4:9d:3b:aa:3e:03:d7:ce:09:2b:5b:9e:
                    ae:95:10:86:e7:0b:69:41:97:d6:4b:92:bd:fd:ef:
                    10:c3:dc:8d:da:90:1d:d8:85:94:ce:c0:c8:1d:f1:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B3:1C:11:C8:92:3F:8B:7E:AB:50:13:1B:44:49:98:FA:C8:85:CA
            X509v3 Authority Key Identifier:
                keyid:84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/7/8489863A432D851EFEA043950365EE23436FCF95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/7/32332e3134392e3234382e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:a7:25:12:14:54:53:c7:84:a7:70:13:c7:6a:aa:b2:42:
         0a:39:c3:1c:91:af:81:d3:a2:30:4a:f1:e5:a7:39:36:b8:95:
         68:92:99:b8:62:c2:42:2d:eb:63:98:5a:fd:12:1e:83:14:bd:
         df:d9:15:c9:bb:e9:6e:97:da:57:eb:86:53:d3:08:dc:06:ea:
         ae:07:76:c7:04:6a:aa:a5:0a:41:53:fd:76:44:7c:b5:f0:9d:
         61:77:c2:8e:ea:55:8e:d3:99:91:c3:8b:fd:85:64:65:26:0a:
         7a:63:2e:e4:c5:13:41:d3:56:24:6b:48:61:a0:d9:46:5c:c3:
         6d:6b:1f:c6:18:34:f5:58:b9:27:7c:5a:d9:6b:ce:c8:11:c4:
         56:75:5d:9f:9d:be:bb:22:6f:eb:a4:aa:58:6a:4b:14:69:53:
         9f:41:5d:8b:f5:95:28:68:61:d9:8a:7a:ec:90:32:71:05:2b:
         11:1e:10:c1:f2:f3:70:f2:16:96:e1:04:40:d0:51:0d:35:76:
         0c:b5:e4:94:28:2e:95:0c:b4:ce:2b:59:f3:4c:8f:eb:a3:52:
         93:fc:a3:3d:d6:4d:d0:1e:8f:6d:e8:db:a8:38:a2:2c:51:c9:
         56:97:7f:3d:a8:8e:50:c7:83:ee:18:28:ff:d4:ae:6a:15:b7:
         e6:60:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----