Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa
File:                     323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa (raw, json)
Hash identifier:          mA5waXW8QCvE2jhV9cWur4+RdyBG9wjuF6vTtR1cklU=
Subject key identifier:   74:70:13:D9:4C:82:D1:0F:56:03:2C:DF:0B:8C:EF:5B:56:54:DD:09
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       07BAD3F1CF167BD098AD114214B59DD6E7BE69AF
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa
Signing time:             Sat 08 Apr 2023 09:22:00 +0000
ROA not before:           Sat 08 Apr 2023 09:17:00 +0000
ROA not after:            Sat 06 Apr 2024 09:22:00 +0000
asID:                     57481
IP address blocks:        2602:fc23:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ba:d3:f1:cf:16:7b:d0:98:ad:11:42:14:b5:9d:d6:e7:be:69:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:17:00 2023 GMT
            Not After : Apr  6 09:22:00 2024 GMT
        Subject: CN=747013D94C82D10F56032CDF0B8CEF5B5654DD09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:cd:30:da:c9:cd:d6:5f:df:b8:a8:c9:c0:
                    a6:2b:5e:6e:8f:71:d1:0d:ff:f4:75:3c:2f:ab:d4:
                    ff:03:2b:05:03:7f:32:26:37:11:8a:05:34:e4:de:
                    a1:43:98:20:bd:01:66:bd:92:62:69:96:9a:70:e1:
                    cd:98:8d:9e:94:f2:68:9e:6f:cd:f7:4b:db:a9:22:
                    2b:46:cf:15:71:6b:07:dd:b5:ae:f8:40:49:ca:ff:
                    bd:24:86:d3:99:ef:61:88:5b:e2:66:e5:ea:7e:62:
                    ed:79:d3:3d:16:8c:d3:51:1a:f0:a6:87:dc:7d:83:
                    62:55:ba:a6:7f:7f:d1:a5:a3:23:3f:8d:1b:77:b1:
                    04:ed:97:a0:bb:bc:29:57:b9:65:46:61:a5:42:98:
                    67:e0:29:ed:04:41:7b:03:75:09:b4:e0:1a:bc:7c:
                    81:c2:47:55:88:df:6b:69:59:61:b1:35:a8:a6:1e:
                    d9:e8:04:a4:04:9e:36:9c:9c:d5:ab:19:c0:50:58:
                    01:fe:ba:b4:ab:40:7b:92:83:b6:fc:e1:c1:10:4e:
                    fc:03:39:6f:00:03:05:f2:04:a8:2b:ff:87:7c:9d:
                    9a:15:f6:99:d7:a2:00:27:6c:9f:8c:c5:ba:38:42:
                    0c:2f:4f:18:0e:3e:ca:96:a2:8e:15:41:e8:dc:d5:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:70:13:D9:4C:82:D1:0F:56:03:2C:DF:0B:8C:EF:5B:56:54:DD:09
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:0a:27:4b:4f:a3:92:c5:d9:83:ca:69:d6:e1:96:3f:94:62:
         74:29:91:dd:f9:25:d6:54:1b:b0:17:07:47:a7:f3:f9:bb:9c:
         88:22:bf:6d:51:89:20:b6:c0:80:e8:e4:9c:1e:1c:5f:d2:2e:
         36:e3:38:ff:ed:7b:bb:fc:0c:4a:84:96:23:1f:8d:ed:3a:f8:
         09:7d:24:85:6e:b1:0b:76:7f:49:e5:79:54:7f:d4:7b:a2:20:
         ed:30:6a:2c:81:f1:33:de:e0:08:a3:28:4a:a2:be:18:81:d8:
         db:08:17:2b:aa:b2:74:c3:68:bc:17:8b:85:4b:5d:1f:be:b6:
         63:e3:11:a1:2c:2f:5f:47:a8:a2:06:6e:9f:0f:10:ee:e7:b4:
         74:8a:04:b9:fb:99:cd:a9:57:1b:e2:15:3f:33:91:a1:ef:67:
         fd:a2:7f:dd:6b:e8:41:f7:b6:22:43:86:2c:33:45:d7:f8:04:
         2d:4a:36:36:6a:2e:9a:65:c4:d9:04:8b:51:94:34:b1:c6:54:
         c8:09:58:16:c6:97:50:8b:76:71:3b:6e:e9:8e:98:a9:77:45:
         64:ed:fe:77:9b:ae:a7:4e:56:96:9d:8d:cd:b3:35:9a:e9:07:
         2c:b8:b0:c1:15:b6:21:7c:43:8d:f7:04:b1:aa:51:6c:71:b5:
         a7:72:fa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----