Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3130303a3a2f34342d3438203d3e20323034333430.roa
File:                     323630323a666332333a3130303a3a2f34342d3438203d3e20323034333430.roa (raw, json)
Hash identifier:          sXzYeLPYvvrk410fe26qR3d+3Y+eoqr6TB06NYMYo8o=
Subject key identifier:   87:2C:FC:95:E5:11:85:63:24:E7:73:45:9C:D8:5B:2E:75:D4:C8:2F
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       514D2BFB0DD75A0C64FAA72F77F4778294113225
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/323630323a666332333a3130303a3a2f34342d3438203d3e20323034333430.roa
Signing time:             Sat 08 Apr 2023 09:22:00 +0000
ROA not before:           Sat 08 Apr 2023 09:17:00 +0000
ROA not after:            Sat 06 Apr 2024 09:22:00 +0000
asID:                     204340
IP address blocks:        2602:fc23:100::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4d:2b:fb:0d:d7:5a:0c:64:fa:a7:2f:77:f4:77:82:94:11:32:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:17:00 2023 GMT
            Not After : Apr  6 09:22:00 2024 GMT
        Subject: CN=872CFC95E511856324E773459CD85B2E75D4C82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:20:68:00:b8:ce:2e:61:aa:a7:66:6a:0f:
                    e2:99:8f:7e:8a:81:48:05:5a:0d:f9:29:a5:86:b1:
                    ce:73:aa:31:eb:c3:04:18:7f:7b:31:05:35:26:b2:
                    68:c1:46:c6:d0:81:74:b7:e4:7c:1f:82:d3:27:7e:
                    24:60:51:4d:47:f5:43:b2:e1:18:a0:2c:8e:ae:6b:
                    b0:af:16:c2:00:bc:2c:93:48:84:a5:ba:5e:c1:6c:
                    a7:1c:40:c2:4d:1d:42:ec:22:77:26:55:36:a8:27:
                    6e:e2:ef:84:4d:8f:06:b6:ca:83:e9:b1:04:b0:3c:
                    ff:98:8b:97:84:d3:e0:50:db:91:f0:11:29:59:0f:
                    76:ae:36:c6:d2:54:6d:41:0e:1c:6e:23:26:8c:ad:
                    67:06:4c:73:48:82:57:c5:f8:29:60:3f:86:25:af:
                    02:96:c8:2e:6e:48:4e:72:4b:8f:0e:49:d9:bc:8d:
                    8b:e7:5f:84:ad:cb:da:58:3a:86:1d:5e:a3:52:16:
                    5c:51:a9:d5:c3:f0:ea:55:1f:fb:bf:49:09:a3:13:
                    fc:85:b6:01:36:99:5c:ec:5e:9e:b5:11:f0:59:ce:
                    17:ef:99:e1:a6:ac:0b:81:63:63:bd:1e:2e:98:5b:
                    0f:68:c3:28:3e:9e:90:eb:bc:4d:cb:06:68:80:77:
                    76:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2C:FC:95:E5:11:85:63:24:E7:73:45:9C:D8:5B:2E:75:D4:C8:2F
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3130303a3a2f34342d3438203d3e20323034333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:25:79:e8:7a:b7:24:3f:42:2e:94:59:a4:60:d7:b5:19:0b:
         e6:cd:09:a9:a0:8f:44:4c:7d:79:27:ec:fd:50:f7:cf:75:c6:
         bd:14:d1:a3:48:78:f7:d5:db:6d:d0:eb:4b:1d:e3:24:21:89:
         15:21:a6:85:78:9c:57:b9:a6:78:74:bf:fa:3f:74:ee:ed:8e:
         c4:e2:2c:44:4a:ab:1f:5e:8d:85:ca:1d:b6:3b:44:9a:30:95:
         5d:99:26:46:17:e1:a2:3c:f7:fc:8a:83:28:a4:79:8b:15:99:
         94:1e:9d:10:40:84:40:b8:12:0a:90:8a:43:ac:99:2c:2b:5a:
         08:00:04:3e:25:71:67:b3:ea:ef:17:43:f5:7a:4a:e4:f8:f2:
         15:4d:ef:7e:dc:54:2e:d6:82:aa:22:c2:ea:84:f9:01:0d:c2:
         f7:df:4c:19:7f:0a:a3:9b:07:36:38:8a:15:18:35:6b:6c:2f:
         ec:f6:27:d0:72:0e:91:25:84:5e:d7:d8:c6:ea:81:11:e6:58:
         8d:38:3e:bb:54:32:c4:25:00:27:7e:b2:ca:e0:83:94:81:e8:
         c1:0c:dd:51:40:3a:74:48:35:de:fc:17:9d:c3:90:d9:3a:6a:
         30:39:3a:8b:17:f9:2b:d3:ec:12:4a:9c:4c:b6:65:2e:14:ee:
         73:8c:c1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----