Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/10/323630323a666332333a3a2f33362d3336203d3e203530303538.roa
File:                     323630323a666332333a3a2f33362d3336203d3e203530303538.roa (raw, json)
Hash identifier:          wqg8E10+rtUZamlWO+S+923RXoPh/gutzwDTaji9C8Y=
Subject key identifier:   E7:29:B5:DE:77:EA:FD:9A:A5:A5:61:7A:0E:D5:EA:70:31:31:32:3A
Certificate issuer:       /CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
Certificate serial:       389A74EED793F41EDC8789D7DCDC956A0C3019FF
Authority key identifier: BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F
Authority info access:    rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer
Subject info access:      rsync://rpki.co/repo/August/10/323630323a666332333a3a2f33362d3336203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 09:22:00 +0000
ROA not before:           Sat 08 Apr 2023 09:17:00 +0000
ROA not after:            Sat 06 Apr 2024 09:22:00 +0000
asID:                     50058
IP address blocks:        2602:fc23::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9a:74:ee:d7:93:f4:1e:dc:87:89:d7:dc:dc:95:6a:0c:30:19:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC69AB64D4D3EF18BDE6926C0E50605F91877A2F
        Validity
            Not Before: Apr  8 09:17:00 2023 GMT
            Not After : Apr  6 09:22:00 2024 GMT
        Subject: CN=E729B5DE77EAFD9AA5A5617A0ED5EA703131323A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bb:c1:dd:5f:70:79:9b:32:d0:0e:0d:4a:a3:
                    20:8f:42:ae:4e:0c:0e:a3:03:6b:18:1e:94:da:45:
                    97:28:56:34:2a:3d:bf:66:fb:d6:44:78:e8:0d:29:
                    21:fb:18:94:49:48:62:b5:5c:a5:0d:c9:14:35:24:
                    41:0b:20:6a:b9:d1:41:d5:5d:a7:4e:07:88:d1:0d:
                    96:94:0a:24:80:97:a1:70:60:42:b5:ec:7f:33:fe:
                    5f:0f:fe:c6:e2:87:c5:a5:74:9b:64:94:23:bb:5c:
                    0e:2f:cc:4d:cc:d3:ac:ea:96:53:4b:1d:a0:1b:81:
                    0a:48:7f:a4:1b:08:0b:8a:e5:89:12:4a:0b:14:f7:
                    ab:5c:00:ad:64:dc:38:23:a5:f7:38:88:49:c0:68:
                    df:b3:94:2a:7b:eb:3f:f0:f2:e6:7b:87:63:c7:c6:
                    ab:21:49:f3:91:06:4f:66:4a:87:d3:ca:52:7b:36:
                    46:84:7d:2b:55:8f:61:52:60:fb:d7:5d:9d:d5:ff:
                    70:c4:12:04:a6:78:43:d4:48:90:77:01:df:9e:8b:
                    6a:51:ab:41:8e:b4:35:02:06:85:20:5b:da:36:c3:
                    9b:2f:b5:50:2d:05:f5:13:71:7a:05:ee:6e:3c:76:
                    c1:7c:a3:4e:05:53:d8:db:f0:77:07:aa:f8:68:6e:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:29:B5:DE:77:EA:FD:9A:A5:A5:61:7A:0E:D5:EA:70:31:31:32:3A
            X509v3 Authority Key Identifier:
                keyid:BC:69:AB:64:D4:D3:EF:18:BD:E6:92:6C:0E:50:60:5F:91:87:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/10/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/0/BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/10/323630323a666332333a3a2f33362d3336203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:c3:e6:28:9b:ae:dc:61:37:c3:5f:5d:fc:1f:67:c9:17:
         1f:0f:46:07:92:2c:e7:12:c4:c3:c9:76:6a:91:70:88:c7:6f:
         46:79:83:22:46:85:b4:f6:12:e4:49:da:5b:1d:cf:d0:85:1f:
         b3:e4:81:2f:23:14:85:54:65:2e:9d:46:d1:21:f6:62:9d:bc:
         10:1c:6b:bc:8f:63:b8:ae:60:e4:f4:2e:e3:53:70:ac:3c:5c:
         c8:e1:e0:73:07:26:5c:76:cb:dc:73:ef:af:30:e4:7e:fa:25:
         69:2c:24:68:4f:08:65:37:36:97:7a:f5:01:79:63:dc:03:bb:
         4d:68:ef:a3:53:1f:64:ba:cd:f4:16:b5:33:d3:7f:c9:0e:14:
         78:68:82:a7:85:30:4f:8a:36:53:45:55:da:33:5c:4f:91:ba:
         00:7b:aa:ac:53:89:af:34:96:a4:ef:bc:cc:05:42:a6:9d:9c:
         7b:0b:1b:37:fb:a4:52:e9:77:72:2d:8a:1f:9b:e3:13:d8:d0:
         44:e6:18:bd:bb:42:6f:ee:07:f8:20:83:93:48:85:e6:46:56:
         8c:69:ea:f9:f3:df:5e:d8:50:a5:41:46:c3:d8:74:45:97:c7:
         8b:44:02:87:36:03:d7:35:3e:7e:d3:c6:12:ae:ef:4c:4e:59:
         4a:21:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----