Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa
File:                     323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa (raw, json)
Hash identifier:          dfant2j95SxOAmsvRKp1i0J6K39/C7Y8cPMohOEO9Ao=
Subject key identifier:   6F:7C:C2:62:51:8A:63:63:80:8E:60:7E:FE:EA:C9:28:49:50:D2:89
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       1184FF854802BBCC50925DAB8B2CB89277A128D7
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa
Signing time:             Sat 08 Apr 2023 09:21:58 +0000
ROA not before:           Sat 08 Apr 2023 09:16:58 +0000
ROA not after:            Sat 06 Apr 2024 09:21:58 +0000
asID:                     18041
IP address blocks:        2602:fc23:11d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:84:ff:85:48:02:bb:cc:50:92:5d:ab:8b:2c:b8:92:77:a1:28:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:16:58 2023 GMT
            Not After : Apr  6 09:21:58 2024 GMT
        Subject: CN=6F7CC262518A6363808E607EFEEAC9284950D289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:87:e0:70:60:53:5f:be:d5:0b:59:83:3a:
                    7b:28:a8:39:a2:d8:4a:12:84:16:75:59:05:91:c5:
                    7a:ad:db:a0:47:d3:17:ce:5a:48:56:85:3d:2f:01:
                    d0:f4:6b:99:61:a1:57:28:42:ea:18:84:b2:e2:3b:
                    3a:d1:86:08:32:d5:e5:29:1b:6b:86:e4:13:f8:92:
                    35:d5:b1:ac:d8:da:35:4a:95:23:17:a3:a1:7c:b4:
                    3a:dc:e6:91:75:e4:69:8f:b1:fd:e6:ea:32:36:5e:
                    1c:8c:f7:62:25:46:68:64:47:b3:6e:85:f4:09:6e:
                    e4:4b:f4:b7:72:5a:7e:94:75:7c:69:b9:ad:22:5b:
                    b7:0c:1a:5f:10:83:1d:d3:85:4a:d0:48:44:69:c4:
                    a9:4a:bd:26:3a:c0:e5:06:7c:47:13:fb:59:f4:43:
                    d9:08:00:e2:81:f7:34:d1:45:3c:d1:59:ba:c1:9c:
                    e0:c0:c3:6c:ce:13:a8:c5:90:3f:70:49:4d:d3:ad:
                    b4:12:83:e4:aa:65:ed:d8:34:a6:3f:37:eb:64:96:
                    8c:a4:22:d7:3b:77:e3:e4:b2:12:9f:18:78:4d:06:
                    4c:3c:c3:4e:f1:46:f1:c7:3c:15:55:d1:55:ab:36:
                    ef:53:d0:a0:74:b7:47:1e:3f:a0:2a:00:0a:9f:85:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:C2:62:51:8A:63:63:80:8E:60:7E:FE:EA:C9:28:49:50:D2:89
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:11d::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:47:b7:a4:44:76:36:69:13:07:96:e3:13:87:b9:08:af:2d:
         b6:78:09:07:d2:70:6a:8c:4d:ef:b0:40:7b:53:38:5c:e7:c4:
         21:84:2b:72:18:88:cf:82:02:9a:9e:5e:08:a9:17:56:02:32:
         20:aa:54:b7:00:f5:73:6b:6b:74:05:1a:cc:9b:91:4e:48:3d:
         4a:2f:84:cf:31:94:f6:e2:1b:fb:37:c4:bc:98:09:f3:26:27:
         e2:9e:14:57:58:e1:6c:56:22:9d:a5:14:f2:f7:2d:ba:cc:c4:
         74:50:d8:e7:39:94:ae:f0:e1:25:e4:2c:fd:1f:28:b1:4f:72:
         78:59:84:78:12:62:4d:19:a8:0a:6a:da:93:38:c9:0b:af:36:
         9f:bd:f0:18:9c:65:16:2c:d9:06:49:61:d7:11:7a:a3:80:0c:
         02:26:52:ab:af:5d:57:29:14:13:26:5d:85:95:f6:70:57:1c:
         30:f7:a3:85:65:d6:38:ca:60:0d:c8:dc:e6:0c:6b:70:62:97:
         2b:24:b6:1a:be:80:05:ec:9a:b7:d6:cc:5c:5d:04:81:e1:c0:
         36:30:e4:cd:f2:ed:bc:51:60:72:b9:5e:5b:0f:ff:31:d2:71:
         3d:97:d4:76:87:d8:fe:a2:90:56:d4:57:ac:08:01:6b:98:4f:
         27:ab:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----