Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/11/32332e3135302e382e302f32322d3232203d3e203530303538.roa
File:                     32332e3135302e382e302f32322d3232203d3e203530303538.roa (raw, json)
Hash identifier:          993rvNa9C4Hylhqw4ey5gpHB+sF0Qo2KRPtaO5+SHkE=
Subject key identifier:   08:A8:F7:4C:30:BA:71:54:2B:1B:65:C6:12:8B:22:89:79:6C:16:CE
Certificate issuer:       /CN=0E6C5F2C1BF5535D704A579C368377D9DF7977B0
Certificate serial:       7D2C8C00BE6606E5E998A751FF589F1DD1EAC8B6
Authority key identifier: 0E:6C:5F:2C:1B:F5:53:5D:70:4A:57:9C:36:83:77:D9:DF:79:77:B0
Authority info access:    rsync://rpki.co/repo/HYSP/16/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.cer
Subject info access:      rsync://rpki.co/repo/August/11/32332e3135302e382e302f32322d3232203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 09:22:07 +0000
ROA not before:           Sat 08 Apr 2023 09:17:07 +0000
ROA not after:            Sat 06 Apr 2024 09:22:07 +0000
asID:                     50058
IP address blocks:        23.150.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2c:8c:00:be:66:06:e5:e9:98:a7:51:ff:58:9f:1d:d1:ea:c8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E6C5F2C1BF5535D704A579C368377D9DF7977B0
        Validity
            Not Before: Apr  8 09:17:07 2023 GMT
            Not After : Apr  6 09:22:07 2024 GMT
        Subject: CN=08A8F74C30BA71542B1B65C6128B2289796C16CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:40:c4:35:06:cc:c2:41:34:d2:cc:21:97:
                    b2:0f:bb:8e:f3:01:76:9f:ee:b0:50:35:7c:8b:29:
                    ed:23:f1:c5:dd:02:00:57:2d:0a:b7:4b:11:b5:de:
                    05:77:12:a9:e2:ca:c1:82:64:38:a4:c9:26:45:e9:
                    85:4e:79:21:e3:d1:b7:6a:6a:c0:ce:e0:94:27:2e:
                    5a:9a:32:d8:15:40:f7:a3:72:b8:c5:0c:b1:a3:74:
                    db:8c:2d:e8:f9:9a:56:e6:72:4b:71:c9:de:3e:8a:
                    68:29:c4:b3:15:63:dd:3c:f8:b5:4d:86:9a:d9:2e:
                    e5:c9:df:29:2f:7a:85:c9:15:af:7b:8d:14:75:b0:
                    07:e6:6a:9a:d1:ed:77:58:68:a2:5d:99:b6:6a:34:
                    66:ad:ed:6d:b7:17:30:16:23:e4:30:69:dd:b3:30:
                    4c:af:ef:b7:f9:0a:a8:b3:a0:cf:5a:d3:23:f1:ad:
                    1f:bb:e6:16:b9:12:70:3b:a6:3c:5f:1e:17:6d:da:
                    b5:25:91:3c:a3:78:f4:df:f7:15:5b:5f:83:25:da:
                    44:9d:a4:6b:8d:24:2b:e0:c4:4c:53:c4:35:1d:90:
                    9d:25:f9:e0:89:d7:69:b2:be:ed:b0:54:13:88:8a:
                    bd:d4:04:62:75:46:dd:d8:51:45:2d:1e:f3:79:47:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A8:F7:4C:30:BA:71:54:2B:1B:65:C6:12:8B:22:89:79:6C:16:CE
            X509v3 Authority Key Identifier:
                keyid:0E:6C:5F:2C:1B:F5:53:5D:70:4A:57:9C:36:83:77:D9:DF:79:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/11/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/16/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/11/32332e3135302e382e302f32322d3232203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:c7:e1:90:cc:de:3a:26:63:49:9d:69:23:50:c6:3b:0f:22:
         61:2e:1a:a1:c1:de:36:20:0f:98:68:10:ff:52:f1:12:de:8f:
         c5:5e:43:60:95:76:ab:97:84:c7:18:32:57:41:6b:9d:e8:75:
         29:8c:8b:47:76:fd:a9:c5:16:7e:4b:ff:6d:f8:e9:f1:87:e6:
         1f:f0:f1:26:3d:2c:ff:b4:7f:7b:fe:b9:17:bd:f1:d7:1f:c8:
         93:e5:74:33:84:ca:98:3a:d9:96:e1:ab:0a:ec:65:71:bc:71:
         39:e8:43:f1:e4:93:f0:33:98:73:41:1d:80:d9:00:8c:d7:39:
         9f:7b:6f:9c:17:36:ef:78:93:f0:4b:57:9f:2c:46:4a:ee:55:
         f3:49:02:55:bc:01:ec:6b:09:fa:47:d8:a2:e3:f7:71:a8:fb:
         33:5e:07:5b:bd:d6:7f:81:9d:e0:ac:5c:5f:4a:1d:21:96:d4:
         37:ad:d1:31:d4:d1:f9:f6:22:44:3b:a5:6b:0a:7b:03:29:d4:
         77:35:fd:55:40:6f:1f:86:61:60:fc:6e:6c:7e:02:69:fc:95:
         0d:ff:d9:c9:47:f4:06:95:e9:34:e2:b2:23:9b:a4:74:cf:c1:
         69:2c:ec:42:aa:d2:91:91:2f:13:86:ac:87:30:29:c4:f6:06:
         68:57:04:50
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUfSyMAL5mBuXpmKdR/1ifHdHqyLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU2QzVGMkMxQkY1NTM1RDcwNEE1NzlDMzY4Mzc3RDlE
Rjc5NzdCMDAeFw0yMzA0MDgwOTE3MDdaFw0yNDA0MDYwOTIyMDdaMDMxMTAvBgNV
BAMTKDA4QThGNzRDMzBCQTcxNTQyQjFCNjVDNjEyOEIyMjg5Nzk2QzE2Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTUDENQbMwkE00swhl7IPu47z
AXaf7rBQNXyLKe0j8cXdAgBXLQq3SxG13gV3EqniysGCZDikySZF6YVOeSHj0bdq
asDO4JQnLlqaMtgVQPejcrjFDLGjdNuMLej5mlbmcktxyd4+imgpxLMVY908+LVN
hprZLuXJ3ykveoXJFa97jRR1sAfmaprR7XdYaKJdmbZqNGat7W23FzAWI+Qwad2z
MEyv77f5CqizoM9a0yPxrR+75ha5EnA7pjxfHhdt2rUlkTyjePTf9xVbX4Ml2kSd
pGuNJCvgxExTxDUdkJ0l+eCJ12myvu2wVBOIir3UBGJ1Rt3YUUUtHvN5R2qxAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQUCKj3TDC6cVQrG2XGEosiiXlsFs4wHwYDVR0j
BBgwFoAUDmxfLBv1U11wSlecNoN32d95d7AwDgYDVR0PAQH/BAQDAgeAMFwGA1Ud
HwRVMFMwUaBPoE2GS3JzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8xMS8wRTZD
NUYyQzFCRjU1MzVENzA0QTU3OUMzNjgzNzdEOURGNzk3N0IwLmNybDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1Av
MTYvMEU2QzVGMkMxQkY1NTM1RDcwNEE1NzlDMzY4Mzc3RDlERjc5NzdCMC5jZXIw
cQYIKwYBBQUHAQsEZTBjMGEGCCsGAQUFBzALhlVyc3luYzovL3Jwa2kuY28vcmVw
by9BdWd1c3QvMTEvMzIzMzJlMzEzNTMwMmUzODJlMzAyZjMyMzIyZDMyMzIyMDNk
M2UyMDM1MzAzMDM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIXlggwDQYJKoZIhvcNAQELBQADggEB
AEvH4ZDM3jomY0mdaSNQxjsPImEuGqHB3jYgD5hoEP9S8RLej8VeQ2CVdquXhMcY
MldBa53odSmMi0d2/anFFn5L/2346fGH5h/w8SY9LP+0f3v+uRe98dcfyJPldDOE
ypg62ZbhqwrsZXG8cTnoQ/Hkk/AzmHNBHYDZAIzXOZ97b5wXNu94k/BLV58sRkru
VfNJAlW8AexrCfpH2KLj93Go+zNeB1u91n+BneCsXF9KHSGW1Det0THU0fn2IkQ7
pWsKewMp1Hc1/VVAbx+GYWD8bmx+Amn8lQ3/2clH9AaV6TTisiObpHTPwWks7EKq
0pGRLxOGrIcwKcT2BmhXBFA=
-----END CERTIFICATE-----