Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/8/323630363a623063303a3a2f33322d3332203d3e20393435.roa
File:                     323630363a623063303a3a2f33322d3332203d3e20393435.roa (raw, json)
Hash identifier:          JSjVIkfZiXsaBQBKAJMTYW2tGp2DzxS0j15nIekRPhE=
Subject key identifier:   B4:15:85:18:2C:70:3E:71:5E:3F:BB:67:6B:33:AB:F8:6B:C1:78:2B
Certificate issuer:       /CN=381C7A4E80F50F1F7F8CE0819134F3836A8C389C
Certificate serial:       3C34ADDF745BFC07952D1D255CF8398127777C62
Authority key identifier: 38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C
Authority info access:    rsync://rpki.co/repo/August/4/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer
Subject info access:      rsync://rpki.co/repo/AS945/8/323630363a623063303a3a2f33322d3332203d3e20393435.roa
Signing time:             Mon 14 Aug 2023 02:45:37 +0000
ROA not before:           Mon 14 Aug 2023 02:40:37 +0000
ROA not after:            Mon 12 Aug 2024 02:45:37 +0000
asID:                     945
IP address blocks:        2606:b0c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:34:ad:df:74:5b:fc:07:95:2d:1d:25:5c:f8:39:81:27:77:7c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381C7A4E80F50F1F7F8CE0819134F3836A8C389C
        Validity
            Not Before: Aug 14 02:40:37 2023 GMT
            Not After : Aug 12 02:45:37 2024 GMT
        Subject: CN=B41585182C703E715E3FBB676B33ABF86BC1782B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:27:2c:94:fa:20:c0:b4:52:ca:51:7a:88:
                    34:6a:28:80:30:55:89:01:e1:3c:05:ba:09:e0:46:
                    cd:91:09:c9:31:1d:ac:7e:b9:87:88:e3:8c:29:e4:
                    f8:98:cd:7f:7c:33:f5:e5:db:f7:dd:75:53:ab:94:
                    4e:0d:70:e3:ba:f4:0c:ca:ee:aa:8c:32:8c:04:34:
                    ad:e2:5a:ef:be:29:64:78:3d:3a:fb:59:65:fb:ba:
                    d4:9f:6a:d7:ac:9d:c5:a0:c6:d6:0c:9e:ec:a4:fb:
                    89:c2:fe:21:70:4a:57:7c:40:67:5f:7e:06:a2:bc:
                    31:a1:ec:2a:d6:c6:84:0e:0f:7c:53:13:70:98:81:
                    85:61:e5:c8:12:91:1f:85:1a:c2:71:78:c2:12:dd:
                    83:9f:a8:ee:ad:f4:a5:4d:ce:80:44:83:11:c8:26:
                    41:4e:8f:79:aa:8e:11:f0:fa:11:15:5d:6b:6a:9b:
                    9a:36:ea:a1:f0:c0:d0:1e:09:71:23:d1:c8:29:a7:
                    cf:e8:75:ec:b1:29:2e:82:d2:47:d9:7e:dd:f3:7d:
                    a3:81:c3:43:0f:f8:d9:24:b0:38:f0:9c:b4:35:41:
                    f6:f3:b6:fa:6d:54:6d:fe:70:3f:70:b0:62:f9:fe:
                    a5:82:6c:36:3c:98:cc:10:93:1a:87:6d:66:e6:79:
                    d1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:15:85:18:2C:70:3E:71:5E:3F:BB:67:6B:33:AB:F8:6B:C1:78:2B
            X509v3 Authority Key Identifier:
                keyid:38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/8/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/4/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/8/323630363a623063303a3a2f33322d3332203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a5:bf:c3:ce:0b:11:ad:72:e3:87:5b:a7:3a:0f:12:f6:41:
         2d:eb:0b:b2:06:f4:38:a0:e9:cd:ed:4f:6d:b0:0b:b7:14:7f:
         2a:65:11:89:8a:e6:e4:9b:55:69:6f:34:54:bc:7e:d5:51:b2:
         f3:f9:c4:69:20:20:ea:98:df:fd:0f:28:da:25:ec:54:9c:d6:
         57:38:c8:6c:ee:ae:66:ad:e5:2a:72:67:fa:ba:92:ed:81:48:
         4c:90:b1:26:17:80:fc:ea:dd:44:90:10:e3:97:d9:4b:e5:63:
         36:aa:dc:8e:a6:fc:aa:14:28:eb:cc:12:98:5c:f4:54:6f:36:
         39:8d:7f:44:be:ff:d0:2a:05:58:26:ca:1d:f8:5c:aa:5a:df:
         3b:a8:56:43:06:76:35:58:1d:3a:2d:71:b6:e9:8c:b9:99:f3:
         90:73:eb:a8:7c:40:3e:d9:4d:ff:43:f8:26:6f:32:93:87:b2:
         aa:b0:22:19:a3:59:d3:ac:d6:b2:fd:dd:4d:82:39:ae:81:05:
         6d:8d:ad:c4:68:88:b4:bf:10:78:83:d9:66:92:d9:5a:82:4e:
         68:41:d8:5c:4f:e8:ef:61:fb:63:bf:20:3c:34:7c:7c:e7:85:
         fe:c1:12:89:0b:5c:aa:5d:99:79:8e:3b:62:02:7f:23:7c:ed:
         a4:c5:f8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----