Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
File:                     323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa (raw, json)
Hash identifier:          nUeQJzxbpKi6SXi0xExEDv/FnRA9tfIGTade0HPRLB8=
Subject key identifier:   17:F3:E3:C5:31:D0:CC:3B:9A:C9:1B:A8:07:7A:5B:46:9E:5B:18:4F
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       34597BFE478D67B736F745A920A899213306B674
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
Signing time:             Sat 08 Apr 2023 09:22:00 +0000
ROA not before:           Sat 08 Apr 2023 09:17:00 +0000
ROA not after:            Sat 06 Apr 2024 09:22:00 +0000
asID:                     57429
IP address blocks:        2602:fc23:111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:59:7b:fe:47:8d:67:b7:36:f7:45:a9:20:a8:99:21:33:06:b6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:17:00 2023 GMT
            Not After : Apr  6 09:22:00 2024 GMT
        Subject: CN=17F3E3C531D0CC3B9AC91BA8077A5B469E5B184F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:0e:0c:fa:2a:d7:00:0a:ac:3d:35:2b:2c:
                    37:ae:62:d3:31:14:8b:e3:15:f9:4b:51:ae:eb:e2:
                    11:65:94:41:5d:69:7b:92:43:b7:c4:2f:29:e5:92:
                    8a:ad:63:8a:8d:b6:2f:f3:bf:73:34:74:b9:20:48:
                    aa:b7:a9:70:a0:7b:49:31:4e:00:3e:6e:29:f1:3d:
                    38:10:76:7b:ab:b2:aa:09:ae:89:11:4f:0a:86:b8:
                    be:34:06:b0:3d:6d:a5:8f:34:60:1a:10:68:53:7c:
                    c0:18:5d:45:3f:87:ae:da:0a:da:73:41:4a:3c:9a:
                    86:e9:4b:d3:8f:41:ea:86:9d:b8:b5:c9:a3:0d:97:
                    94:f0:94:55:60:be:b9:b7:5a:c3:f1:d4:1e:ea:bb:
                    a0:d9:45:a0:bf:9d:b1:5e:10:50:45:ee:fc:3e:77:
                    29:c9:25:d2:08:40:82:23:e6:8a:29:9d:17:d8:da:
                    3b:d5:3c:11:bd:e5:6a:23:cc:65:a5:e1:1d:af:c3:
                    17:03:7d:26:43:78:1f:d6:20:65:7d:9f:24:9a:c9:
                    fa:c7:eb:f0:bd:de:1e:4b:d5:8e:b1:a4:d5:8d:5e:
                    f7:50:27:ec:81:9f:ab:87:b9:a2:5e:dc:55:9e:38:
                    c6:f8:43:71:42:3f:4f:5a:91:b7:f3:b2:93:a8:22:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F3:E3:C5:31:D0:CC:3B:9A:C9:1B:A8:07:7A:5B:46:9E:5B:18:4F
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:b5:66:10:89:d7:1a:7a:86:6e:db:e4:46:8b:23:1d:0f:
         af:46:b0:06:cb:da:0b:e2:28:8d:0a:e6:7e:5a:30:4c:ee:6f:
         d9:65:08:18:e5:fa:be:50:74:76:89:26:fe:e4:90:b2:2a:30:
         1b:1a:86:18:39:85:a5:60:d1:c0:5b:de:32:2b:e1:51:b4:7c:
         0a:a3:92:e9:29:80:3d:1a:33:8a:a6:76:45:fb:de:7d:95:2e:
         14:e4:44:6b:c5:7e:22:9f:bc:5d:ab:c1:9b:ec:c6:fa:9c:d6:
         4e:c5:27:25:f0:96:8c:7c:46:af:2b:fe:a2:9f:b2:4d:c0:2c:
         7a:9e:03:1d:92:82:12:e4:26:69:fb:50:ea:ac:a8:a5:dc:3c:
         47:5e:77:3e:b4:f6:a7:80:ef:0f:5b:b4:cc:a6:c6:a6:61:80:
         ee:f7:95:a4:da:64:71:c4:d4:7d:ad:be:6c:2b:7e:bb:83:62:
         e5:2c:2e:34:ca:48:50:3b:b8:b4:5a:ac:06:17:69:24:b3:1c:
         d1:b1:2c:ba:58:18:fd:ac:ec:47:c8:9a:04:ef:4a:67:22:9a:
         de:76:a0:d7:14:01:9d:f1:db:d9:2f:f3:2f:6b:65:15:c9:72:
         33:cb:a9:21:41:8a:e6:17:9d:15:b4:03:3a:a1:17:b5:90:a7:
         67:59:0b:df
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIUNFl7/keNZ7c290WpIKiZITMGtnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM2OUFCNjRENEQzRUYxOEJERTY5MjZDMEU1MDYwNUY5
MTg3N0EyRjAeFw0yMzA0MDgwOTE3MDBaFw0yNDA0MDYwOTIyMDBaMDMxMTAvBgNV
BAMTKDE3RjNFM0M1MzFEMENDM0I5QUM5MUJBODA3N0E1QjQ2OUU1QjE4NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Yw4M+irXAAqsPTUrLDeuYtMx
FIvjFflLUa7r4hFllEFdaXuSQ7fELynlkoqtY4qNti/zv3M0dLkgSKq3qXCge0kx
TgA+binxPTgQdnursqoJrokRTwqGuL40BrA9baWPNGAaEGhTfMAYXUU/h67aCtpz
QUo8mobpS9OPQeqGnbi1yaMNl5TwlFVgvrm3WsPx1B7qu6DZRaC/nbFeEFBF7vw+
dynJJdIIQIIj5oopnRfY2jvVPBG95WojzGWl4R2vwxcDfSZDeB/WIGV9nySayfrH
6/C93h5L1Y6xpNWNXvdQJ+yBn6uHuaJe3FWeOMb4Q3FCP09akbfzspOoIjGdAgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQUF/PjxTHQzDuayRuoB3pbRp5bGE8wHwYDVR0j
BBgwFoAUvGmrZNTT7xi95pJsDlBgX5GHei8wDgYDVR0PAQH/BAQDAgeAMFwGA1Ud
HwRVMFMwUaBPoE2GS3JzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8xMC9CQzY5
QUI2NEQ0RDNFRjE4QkRFNjkyNkMwRTUwNjA1RjkxODc3QTJGLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1Av
MC9CQzY5QUI2NEQ0RDNFRjE4QkRFNjkyNkMwRTUwNjA1RjkxODc3QTJGLmNlcjB7
BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnBraS5jby9yZXBv
L0F1Z3VzdC8xMC8zMjM2MzAzMjNhNjY2MzMyMzMzYTMxMzEzMTNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM1MzczNDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvwjAREwDQYJKoZI
hvcNAQELBQADggEBAHu6tWYQidcaeoZu2+RGiyMdD69GsAbL2gviKI0K5n5aMEzu
b9llCBjl+r5QdHaJJv7kkLIqMBsahhg5haVg0cBb3jIr4VG0fAqjkukpgD0aM4qm
dkX73n2VLhTkRGvFfiKfvF2rwZvsxvqc1k7FJyXwlox8Rq8r/qKfsk3ALHqeAx2S
ghLkJmn7UOqsqKXcPEdedz609qeA7w9btMymxqZhgO73laTaZHHE1H2tvmwrfruD
YuUsLjTKSFA7uLRarAYXaSSzHNGxLLpYGP2s7EfImgTvSmcimt52oNcUAZ3x29kv
8y9rZRXJcjPLqSFBiuYXnRW0AzqhF7WQp2dZC98=
-----END CERTIFICATE-----