Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/7/323630323a666139303a3a2f33362d3336203d3e203530303538.roa
File:                     323630323a666139303a3a2f33362d3336203d3e203530303538.roa (raw, json)
Hash identifier:          wSt2xj+3mcZmS0G8GGRDxyqSmBFq4C+Ng16ewgPHwco=
Subject key identifier:   F9:45:1A:FA:D6:12:19:73:9B:27:0B:51:E8:4A:3C:F1:31:3B:94:4F
Certificate issuer:       /CN=8489863A432D851EFEA043950365EE23436FCF95
Certificate serial:       5B592A55709C99A3914CD22C5230303910B3B997
Authority key identifier: 84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95
Authority info access:    rsync://rpki.co/repo/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer
Subject info access:      rsync://rpki.co/repo/AS945/7/323630323a666139303a3a2f33362d3336203d3e203530303538.roa
Signing time:             Mon 10 Apr 2023 03:31:27 +0000
ROA not before:           Mon 10 Apr 2023 03:26:27 +0000
ROA not after:            Mon 08 Apr 2024 03:31:27 +0000
asID:                     50058
IP address blocks:        2602:fa90::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:59:2a:55:70:9c:99:a3:91:4c:d2:2c:52:30:30:39:10:b3:b9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8489863A432D851EFEA043950365EE23436FCF95
        Validity
            Not Before: Apr 10 03:26:27 2023 GMT
            Not After : Apr  8 03:31:27 2024 GMT
        Subject: CN=F9451AFAD61219739B270B51E84A3CF1313B944F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3f:aa:9a:79:9c:53:93:61:ac:49:58:9a:b5:
                    88:00:3d:4e:13:13:a5:89:6a:d1:0a:35:02:d9:37:
                    eb:f2:38:0d:94:01:20:9b:79:87:3c:75:d5:ab:5e:
                    0f:fd:cf:fc:48:90:0d:96:fc:0f:44:15:c7:7f:0a:
                    5e:f2:40:7e:54:c9:07:d2:e2:aa:96:a6:b5:b6:aa:
                    37:b0:81:fb:ff:4e:28:35:d4:56:0b:b3:22:e2:30:
                    2c:16:60:d3:67:c9:f1:38:8b:58:2d:7c:1f:b5:a2:
                    1e:d8:a9:69:79:2c:14:9c:6a:43:3d:ac:50:9e:06:
                    aa:c6:d6:8c:ea:52:90:e2:aa:86:8e:4b:2b:36:26:
                    30:4d:d8:76:f9:8f:d8:ea:44:44:39:ad:93:bc:bb:
                    0d:d7:35:38:b9:3e:f1:ee:b2:9f:8f:4d:1e:03:68:
                    90:51:14:10:15:2d:73:5b:45:58:22:c5:57:92:8c:
                    7d:88:d4:a8:9d:47:0d:84:fc:83:84:32:74:0d:78:
                    89:75:45:52:30:33:96:39:a7:b9:b8:e6:dd:f9:98:
                    f3:25:bf:1a:a8:0d:ac:29:37:f4:45:f8:7f:4f:a1:
                    f7:8d:ec:1c:8f:8d:c1:e1:d0:73:2e:9e:3e:2c:d6:
                    fc:e1:2f:ed:c6:cb:dc:f0:70:d6:a0:fd:7e:b4:a9:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:45:1A:FA:D6:12:19:73:9B:27:0B:51:E8:4A:3C:F1:31:3B:94:4F
            X509v3 Authority Key Identifier:
                keyid:84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/7/8489863A432D851EFEA043950365EE23436FCF95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/7/323630323a666139303a3a2f33362d3336203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa90::/36

    Signature Algorithm: sha256WithRSAEncryption
         a7:bc:18:bd:ec:d7:17:56:02:8b:82:97:93:20:4e:af:67:4c:
         10:cc:70:85:c3:eb:c3:11:c5:0c:39:e1:23:89:d2:6b:2c:29:
         bc:bd:44:de:15:05:3c:64:93:8d:57:ee:c2:1e:42:65:02:ad:
         cc:b7:fc:72:6e:d4:f8:d9:a0:c3:c5:b2:42:57:36:99:f7:0a:
         03:15:ab:b0:d5:f0:78:d8:a9:7a:a4:f2:60:6b:24:f1:4c:34:
         06:cd:1c:e6:23:98:54:a6:3f:ac:5c:c6:20:9d:b9:74:33:8e:
         1c:66:d1:5b:dc:8c:26:9e:d3:8b:c8:ab:1b:4d:a1:47:80:ea:
         88:1d:ba:99:57:98:d4:ae:df:57:d5:7a:23:59:f1:fd:50:ee:
         13:1f:a8:d6:df:b7:1a:7d:d0:6d:d5:94:47:bd:44:b5:bb:81:
         d8:38:2c:fb:5a:fe:f6:93:a6:69:9b:e9:fe:1f:ec:38:86:44:
         46:55:66:ca:ad:28:00:b4:f4:f8:4b:da:d0:c4:9a:5a:d5:f5:
         dc:12:95:0b:2f:8f:d8:4d:16:e7:15:9a:e1:34:c6:d7:d7:49:
         8c:d6:9d:d9:89:04:6c:78:a9:19:5f:c2:df:cc:96:33:a7:80:
         30:60:b2:52:c6:c8:4a:c1:ca:1f:d4:30:b4:c2:b9:b6:9a:92:
         e3:e3:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----