Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/9/323630323a666139343a3a2f33362d3336203d3e20393435.roa
File:                     323630323a666139343a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          L0pmeltpAyxaSbfcyJ7Taws9DcH2Jp74edwhvHKyI0s=
Subject key identifier:   46:D6:03:52:87:27:75:44:A4:B7:33:BF:C4:ED:AE:4E:7D:71:5F:61
Certificate issuer:       /CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
Certificate serial:       1B9DFD5802B9174B4FCE9196FF01A7C33B122C72
Authority key identifier: 26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority info access:    rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
Subject info access:      rsync://rpki.co/repo/AS945/9/323630323a666139343a3a2f33362d3336203d3e20393435.roa
Signing time:             Mon 14 Aug 2023 02:46:30 +0000
ROA not before:           Mon 14 Aug 2023 02:41:30 +0000
ROA not after:            Mon 12 Aug 2024 02:46:30 +0000
asID:                     945
IP address blocks:        2602:fa94::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9d:fd:58:02:b9:17:4b:4f:ce:91:96:ff:01:a7:c3:3b:12:2c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
        Validity
            Not Before: Aug 14 02:41:30 2023 GMT
            Not After : Aug 12 02:46:30 2024 GMT
        Subject: CN=46D6035287277544A4B733BFC4EDAE4E7D715F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:be:e9:49:43:88:9b:c9:09:63:c7:bd:1d:
                    21:51:db:ba:b3:f4:dd:45:3c:39:79:32:15:d8:8b:
                    67:dd:e9:ec:47:92:9e:13:e6:dc:f1:74:17:87:5c:
                    6b:8c:35:1c:7d:de:ab:a8:49:ed:bd:39:20:18:e1:
                    32:b1:cf:70:86:e4:4a:78:b5:5e:74:78:63:5c:ce:
                    ef:36:28:60:a5:7b:89:9c:ce:91:7b:4a:17:fd:0b:
                    84:56:c3:27:bb:f9:ac:e2:9f:35:75:ab:fa:0c:cb:
                    6f:31:a0:16:ed:df:0b:24:9b:96:62:18:f0:b3:3d:
                    b5:2c:cd:c3:3c:a0:0c:6a:ae:a4:9e:6c:cc:4c:25:
                    cf:e6:28:cc:39:e4:85:81:c3:53:30:96:e0:ae:ba:
                    a2:07:e0:4f:38:e5:6c:d8:d6:7f:7e:27:a6:d7:ec:
                    a0:b3:23:c4:87:b6:aa:92:6b:43:c1:55:7a:46:d6:
                    15:86:40:28:ac:14:51:3c:4a:14:3f:a2:b5:8d:ee:
                    d1:a9:40:f0:7f:ce:46:7c:f0:f5:8c:9a:12:29:fd:
                    07:83:8d:9d:c2:46:7d:57:46:6e:e8:cb:5a:29:0a:
                    ac:39:8e:7d:7e:37:dd:3b:1a:b2:99:d2:34:32:1c:
                    73:3d:7f:81:4b:66:04:41:41:f8:c2:3b:0f:36:de:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D6:03:52:87:27:75:44:A4:B7:33:BF:C4:ED:AE:4E:7D:71:5F:61
            X509v3 Authority Key Identifier:
                keyid:26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/9/323630323a666139343a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa94::/36

    Signature Algorithm: sha256WithRSAEncryption
         71:4a:5d:04:7a:f6:a2:f9:13:65:36:38:31:cc:17:77:91:88:
         22:e1:58:5a:2c:78:3a:3c:57:40:7f:90:e9:b0:33:1b:b0:bd:
         c9:f3:18:5a:17:90:2d:32:ad:08:1f:7e:0b:f6:b7:18:1c:bf:
         4f:fb:48:4d:30:3b:0b:be:43:b5:51:60:51:1e:ef:e9:2d:c0:
         c5:5f:5d:c0:9e:6b:dc:21:26:db:30:94:7e:28:1e:84:bc:42:
         d4:87:fe:27:e1:cd:30:a2:27:eb:f0:9c:1b:9d:22:0d:58:f7:
         d0:f1:72:07:82:b4:f7:70:88:ec:45:03:9b:f5:06:e0:f0:a0:
         12:60:01:e8:49:31:e5:3c:4f:aa:0e:ec:a5:ac:93:f8:08:a7:
         2d:59:12:93:3d:5a:73:71:b5:58:32:0e:9a:5a:bb:af:a7:ca:
         5b:03:97:fd:07:1b:cc:ad:6d:5c:c9:0b:de:c8:1d:b3:19:9d:
         77:6a:82:ad:ed:24:c6:d0:f9:0d:21:54:80:65:b8:82:99:21:
         79:3b:31:8b:44:70:6e:ec:31:4e:2d:e6:2e:df:10:17:7a:14:
         c0:5e:2c:e8:16:69:ce:a4:61:3d:ff:7c:2b:75:61:16:a7:1e:
         39:a7:83:c6:f4:2b:4c:ce:dc:22:16:b3:e8:90:15:64:04:7f:
         c4:ce:12:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----