Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa
File:                     323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa (raw, json)
Hash identifier:          wpiPzbSEkKXt95POPZvY/eD+onRPNkl004pJ/tZHkAY=
Subject key identifier:   95:D1:7C:53:4F:E7:38:69:77:E4:B5:C6:EE:54:AC:CB:07:DB:35:58
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       6555ACC926AA79866B31CA7C2E33E254489BECD2
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa
Signing time:             Sat 08 Apr 2023 09:22:00 +0000
ROA not before:           Sat 08 Apr 2023 09:17:00 +0000
ROA not after:            Sat 06 Apr 2024 09:22:00 +0000
asID:                     207852
IP address blocks:        2602:fc23:11b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:55:ac:c9:26:aa:79:86:6b:31:ca:7c:2e:33:e2:54:48:9b:ec:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:17:00 2023 GMT
            Not After : Apr  6 09:22:00 2024 GMT
        Subject: CN=95D17C534FE7386977E4B5C6EE54ACCB07DB3558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:51:89:79:de:6b:5b:d6:ff:3f:64:71:31:
                    e7:69:be:bc:1d:b2:2e:24:8a:c0:b5:f0:2c:94:31:
                    f7:6d:bc:48:00:8e:8e:d9:5a:04:19:cc:ae:6d:5e:
                    b8:c3:67:31:af:01:c4:d4:cc:f1:19:43:cd:f1:2d:
                    86:52:8c:85:85:ff:90:40:84:ce:23:ba:61:6b:7c:
                    31:4f:ed:d8:9b:94:24:9a:14:59:74:82:13:2f:3b:
                    33:41:04:9c:88:76:43:67:9c:5e:09:e9:cd:8e:d8:
                    bc:7d:34:e6:8e:11:45:75:4a:23:42:82:29:75:c8:
                    bd:dd:39:a0:3c:b2:5c:f3:09:05:51:b1:5d:70:2b:
                    4a:8b:0b:db:d4:99:c7:83:e7:c2:c5:ec:e0:0e:b6:
                    c2:29:29:10:4a:a4:0b:a9:92:d6:46:ed:45:67:6e:
                    71:c6:0c:7d:21:9b:43:4d:fe:59:bc:70:79:0b:01:
                    fb:30:ca:d6:a2:22:f4:23:88:7c:08:cb:50:d8:d9:
                    85:b7:e8:4e:04:04:4d:fb:5c:f4:08:bb:ac:92:52:
                    40:8f:c9:e6:67:cd:60:f7:ef:18:fc:55:de:f4:dd:
                    84:ad:62:9a:dc:f1:5b:c0:2b:15:42:d4:70:ab:65:
                    75:e9:93:c0:51:aa:1d:bb:a7:32:e0:88:d2:37:9a:
                    cc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D1:7C:53:4F:E7:38:69:77:E4:B5:C6:EE:54:AC:CB:07:DB:35:58
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:11b::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:aa:a7:51:95:2d:e3:1d:6f:82:e1:a6:22:7c:74:1f:df:15:
         1c:20:54:2c:f6:69:9b:a6:8b:29:92:b3:72:d3:e0:f1:99:90:
         cb:89:e7:46:35:96:d9:fc:96:eb:6d:26:11:1a:fd:16:c9:0a:
         97:1e:bb:0a:ba:9b:43:8e:de:3c:4f:4a:14:4c:b8:16:bc:9e:
         48:d5:fe:1e:0c:bc:ad:5e:bc:e5:60:13:ca:0d:f6:26:55:cb:
         94:58:90:32:ee:8f:bd:b5:4e:36:d5:b5:c3:14:72:75:15:9e:
         21:24:20:dc:9f:dc:66:ff:7e:e6:73:3b:1b:89:67:70:94:92:
         f8:aa:57:ba:29:a2:ab:e7:6b:ef:63:e6:af:d6:b8:57:b8:50:
         2b:60:2b:71:2f:e8:5d:09:72:d4:5f:b5:5c:91:6f:95:a3:64:
         ac:9e:94:14:fa:2f:da:96:90:8f:a7:9a:5c:74:62:eb:da:83:
         96:01:33:96:d7:ad:70:6e:e9:7f:1c:f9:48:6f:ff:3d:28:8c:
         0c:7a:14:10:65:84:87:22:c8:fc:3c:24:16:b4:89:ee:bc:97:
         75:f5:d5:f2:4c:06:66:93:a8:fa:dc:34:9a:3f:d3:ce:f6:24:
         2e:a9:66:ac:1b:1b:9b:22:db:0b:de:e8:70:f0:69:ab:be:85:
         66:77:9b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----