Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/7/323630323a666139303a3a2f33362d3336203d3e20393435.roa
File:                     323630323a666139303a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          5LJQ4xoRsXzHn52p3rNOKlXAHCvv5DnGmvYxuObS/1o=
Subject key identifier:   0D:1F:07:94:1E:C2:3D:64:24:EA:ED:A5:DF:47:D2:87:26:AC:1F:E2
Certificate issuer:       /CN=8489863A432D851EFEA043950365EE23436FCF95
Certificate serial:       34959EA8C74523C85B22BFDD2EE8351738C1112F
Authority key identifier: 84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95
Authority info access:    rsync://rpki.co/repo/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer
Subject info access:      rsync://rpki.co/repo/AS945/7/323630323a666139303a3a2f33362d3336203d3e20393435.roa
Signing time:             Mon 14 Aug 2023 02:46:42 +0000
ROA not before:           Mon 14 Aug 2023 02:41:42 +0000
ROA not after:            Mon 12 Aug 2024 02:46:42 +0000
asID:                     945
IP address blocks:        2602:fa90::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:95:9e:a8:c7:45:23:c8:5b:22:bf:dd:2e:e8:35:17:38:c1:11:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8489863A432D851EFEA043950365EE23436FCF95
        Validity
            Not Before: Aug 14 02:41:42 2023 GMT
            Not After : Aug 12 02:46:42 2024 GMT
        Subject: CN=0D1F07941EC23D6424EAEDA5DF47D28726AC1FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:9d:ed:15:b8:17:d0:7e:3f:81:af:64:04:f9:
                    47:41:a5:8a:ad:cb:97:44:d6:b0:48:22:a5:12:4a:
                    35:39:9f:52:64:39:65:2f:25:a0:f3:8a:f1:4f:9b:
                    95:4e:16:ed:26:f7:95:eb:9c:a2:f2:a9:cf:33:1e:
                    aa:d3:60:59:2b:9b:7d:60:2e:07:aa:f5:37:bb:57:
                    c5:93:42:cb:b6:cc:ad:00:d2:fd:dd:e3:b3:a1:1c:
                    50:d7:0e:22:f0:51:68:39:e5:86:0a:e3:02:87:79:
                    96:be:42:67:49:cd:18:7e:aa:51:b3:6e:cf:e2:5f:
                    7d:f3:74:a6:14:15:31:7e:ad:0e:28:40:e2:ed:17:
                    bc:85:33:fb:b3:96:ba:b1:17:2a:57:a5:0b:52:c6:
                    bb:d1:12:f0:b0:5e:29:c1:0b:ce:d2:b9:41:60:7f:
                    fa:55:3e:bb:f7:f2:eb:6e:83:91:74:54:81:85:92:
                    72:d1:cd:a2:a5:72:ed:ed:d4:a3:36:0b:0b:7c:11:
                    96:bf:2e:f8:70:4a:3d:0a:a8:aa:23:d5:1f:91:92:
                    d2:cc:81:7e:9a:2a:6f:12:6d:4c:c1:ef:60:9f:6e:
                    7b:1f:43:5b:9f:f4:e3:d4:71:07:26:8e:2c:9b:de:
                    9c:16:1e:b6:5b:39:e9:ed:68:25:d1:4f:96:34:e3:
                    d8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1F:07:94:1E:C2:3D:64:24:EA:ED:A5:DF:47:D2:87:26:AC:1F:E2
            X509v3 Authority Key Identifier:
                keyid:84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/7/8489863A432D851EFEA043950365EE23436FCF95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/7/323630323a666139303a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa90::/36

    Signature Algorithm: sha256WithRSAEncryption
         60:11:b0:6c:f5:2e:66:9e:cc:0a:e7:9b:c3:d4:1d:f7:d6:57:
         13:f0:8f:41:bf:b7:3a:0f:27:31:88:00:3e:46:39:fa:96:c5:
         5c:ea:73:4d:14:1f:06:5f:64:93:96:60:60:0e:e8:dd:38:4b:
         a3:97:f8:9b:44:9e:71:09:fe:ca:85:b4:ee:ba:b7:44:22:78:
         12:0e:e6:3b:37:13:cf:d0:8d:cd:b2:28:b9:6b:5c:ae:6d:bf:
         32:99:69:e1:29:01:d5:4a:c4:bf:62:c5:2f:c4:94:62:26:c7:
         2f:7a:b8:8c:79:5a:c4:4d:0a:ca:f4:71:d0:c9:e6:96:a7:81:
         e2:33:cd:c1:f0:41:53:4d:69:95:d9:59:83:2d:02:e0:9a:8c:
         ca:a9:10:54:8a:28:c1:a7:1d:f0:98:d4:6a:35:12:b7:c8:c4:
         b1:f3:85:db:d8:7f:85:d3:61:48:8f:2a:d0:ba:0e:ad:51:15:
         e2:15:85:02:7d:09:7d:9c:fa:b4:d9:17:bf:79:a7:d1:f1:a4:
         88:0a:81:e8:c2:ea:d3:53:d3:97:74:60:f0:c0:ae:89:2b:96:
         8d:cd:b3:cb:4d:2b:17:24:91:2f:a8:2a:e3:7d:b0:a8:d1:1c:
         0b:95:c6:67:ab:b2:54:de:38:ff:f8:9a:db:c4:31:d7:3b:6a:
         10:e7:ae:de
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIUNJWeqMdFI8hbIr/dLug1FzjBES8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ4OTg2M0E0MzJEODUxRUZFQTA0Mzk1MDM2NUVFMjM0
MzZGQ0Y5NTAeFw0yMzA4MTQwMjQxNDJaFw0yNDA4MTIwMjQ2NDJaMDMxMTAvBgNV
BAMTKDBEMUYwNzk0MUVDMjNENjQyNEVBRURBNURGNDdEMjg3MjZBQzFGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9ne0VuBfQfj+Br2QE+UdBpYqt
y5dE1rBIIqUSSjU5n1JkOWUvJaDzivFPm5VOFu0m95XrnKLyqc8zHqrTYFkrm31g
Lgeq9Te7V8WTQsu2zK0A0v3d47OhHFDXDiLwUWg55YYK4wKHeZa+QmdJzRh+qlGz
bs/iX33zdKYUFTF+rQ4oQOLtF7yFM/uzlrqxFypXpQtSxrvREvCwXinBC87SuUFg
f/pVPrv38utug5F0VIGFknLRzaKlcu3t1KM2Cwt8EZa/LvhwSj0KqKoj1R+RktLM
gX6aKm8SbUzB72CfbnsfQ1uf9OPUcQcmjiyb3pwWHrZbOentaCXRT5Y049gzAgMB
AAGjggHEMIIBwDAdBgNVHQ4EFgQUDR8HlB7CPWQk6u2l30fShyasH+IwHwYDVR0j
BBgwFoAUhImGOkMthR7+oEOVA2XuI0Nvz5UwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzcvODQ4OTg2
M0E0MzJEODUxRUZFQTA0Mzk1MDM2NUVFMjM0MzZGQ0Y5NS5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
OC84NDg5ODYzQTQzMkQ4NTFFRkVBMDQzOTUwMzY1RUUyMzQzNkZDRjk1LmNlcjBt
BggrBgEFBQcBCwRhMF8wXQYIKwYBBQUHMAuGUXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzcvMzIzNjMwMzIzYTY2NjEzOTMwM2EzYTJmMzMzNjJkMzMzNjIwM2Qz
ZTIwMzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6kAAwDQYJKoZIhvcNAQELBQADggEBAGAR
sGz1LmaezArnm8PUHffWVxPwj0G/tzoPJzGIAD5GOfqWxVzqc00UHwZfZJOWYGAO
6N04S6OX+JtEnnEJ/sqFtO66t0QieBIO5js3E8/Qjc2yKLlrXK5tvzKZaeEpAdVK
xL9ixS/ElGImxy96uIx5WsRNCsr0cdDJ5pangeIzzcHwQVNNaZXZWYMtAuCajMqp
EFSKKMGnHfCY1Go1ErfIxLHzhdvYf4XTYUiPKtC6Dq1RFeIVhQJ9CX2c+rTZF795
p9HxpIgKgejC6tNT05d0YPDArokrlo3Ns8tNKxckkS+oKuN9sKjRHAuVxmerslTe
OP/4mtvEMdc7ahDnrt4=
-----END CERTIFICATE-----