Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/11/32332e3135302e382e302f32332d3233203d3e20393435.roa
File:                     32332e3135302e382e302f32332d3233203d3e20393435.roa (raw, json)
Hash identifier:          WrcC7Z1+zaeKVHns2rWbk3QaZp2CYhUp7Hkl0sizw4g=
Subject key identifier:   09:53:A7:40:31:89:51:BE:AE:46:EE:CF:E0:7C:FC:95:1F:89:F3:4E
Certificate issuer:       /CN=0E6C5F2C1BF5535D704A579C368377D9DF7977B0
Certificate serial:       1F967A4AC73A03CD969A671C08E8DC9A992A8D31
Authority key identifier: 0E:6C:5F:2C:1B:F5:53:5D:70:4A:57:9C:36:83:77:D9:DF:79:77:B0
Authority info access:    rsync://rpki.co/repo/HYSP/16/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.cer
Subject info access:      rsync://rpki.co/repo/August/11/32332e3135302e382e302f32332d3233203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 09:22:07 +0000
ROA not before:           Sat 08 Apr 2023 09:17:07 +0000
ROA not after:            Sat 06 Apr 2024 09:22:07 +0000
asID:                     945
IP address blocks:        23.150.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:96:7a:4a:c7:3a:03:cd:96:9a:67:1c:08:e8:dc:9a:99:2a:8d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E6C5F2C1BF5535D704A579C368377D9DF7977B0
        Validity
            Not Before: Apr  8 09:17:07 2023 GMT
            Not After : Apr  6 09:22:07 2024 GMT
        Subject: CN=0953A740318951BEAE46EECFE07CFC951F89F34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:23:2f:63:73:9e:ee:91:87:39:37:5a:95:
                    e3:22:56:63:56:a2:9d:b0:1e:70:a7:c7:12:65:e9:
                    2b:eb:d5:c3:da:8e:12:15:47:79:9b:95:20:6b:00:
                    b5:c4:32:b2:ae:eb:d5:d3:13:da:01:03:2e:01:67:
                    b3:9e:86:ef:9a:77:32:4a:2d:71:4e:a1:8d:67:c5:
                    83:9a:55:57:da:45:5b:65:e6:b5:2a:06:46:d1:9a:
                    73:44:3b:cc:98:22:08:54:f4:72:1e:5e:0d:27:02:
                    ae:09:0e:f6:19:c7:ab:89:c1:b1:2a:83:00:61:ad:
                    66:36:37:24:fb:b4:19:ac:98:0c:3c:64:fd:01:1d:
                    4b:7a:46:f7:39:53:df:a8:58:59:80:2c:c4:7b:6c:
                    fe:59:d8:5b:69:12:5c:9e:7e:b6:47:76:a2:d1:29:
                    da:8d:67:fb:4b:f5:30:63:39:e2:73:28:70:07:b0:
                    19:75:f0:52:5a:ed:b4:8d:76:59:92:23:73:57:46:
                    f5:13:36:40:14:55:16:9b:5f:dc:40:3e:11:47:60:
                    c8:b5:3e:20:a2:f4:e4:86:00:ab:b2:72:c1:88:d6:
                    bb:17:3f:d5:55:d4:8c:6a:fa:82:24:ff:73:fb:8a:
                    25:9e:10:e5:d9:e4:e5:e7:f2:64:c9:b8:6c:f4:86:
                    5e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:53:A7:40:31:89:51:BE:AE:46:EE:CF:E0:7C:FC:95:1F:89:F3:4E
            X509v3 Authority Key Identifier:
                keyid:0E:6C:5F:2C:1B:F5:53:5D:70:4A:57:9C:36:83:77:D9:DF:79:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/11/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/16/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/11/32332e3135302e382e302f32332d3233203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:50:a3:cc:17:a9:bd:61:06:3d:fa:bc:ad:43:8e:ab:9f:e0:
         d2:58:53:0f:2e:f9:3c:c7:cc:61:5c:cb:cf:5f:c1:9d:ba:f1:
         57:bd:79:4b:35:17:7b:81:5e:26:41:38:a8:50:12:12:a7:10:
         9b:f2:a8:2d:9f:35:73:ac:70:74:13:6e:b7:8a:be:aa:20:36:
         f8:3f:17:12:f2:24:bc:f9:35:92:57:b5:d0:05:c7:81:d8:f0:
         e3:aa:21:72:78:81:2a:5b:ed:39:95:8c:9b:b1:bc:e9:bc:99:
         7c:1b:c8:c4:af:33:26:cf:3c:cc:1c:68:0d:74:27:d9:d5:f4:
         5c:34:3f:df:89:e8:b6:e4:40:51:a7:77:a9:3a:7c:7e:70:4c:
         80:d3:5f:6d:94:8f:a9:a0:53:af:46:9a:42:e6:b9:47:f3:19:
         1b:8b:64:b9:e1:4c:f1:2e:73:ae:db:a6:fa:69:a1:d3:4c:d9:
         aa:9c:0c:da:72:a0:7f:73:e2:ad:e2:1f:c8:6f:cb:83:11:0c:
         0e:17:d9:85:0a:35:99:81:0c:92:05:06:62:d6:f4:06:df:82:
         e4:7b:dd:f7:80:3f:70:39:e4:9e:7a:2a:d3:5d:94:4c:30:95:
         fb:bd:37:b9:17:71:32:91:70:fd:d5:16:51:76:9a:1d:8b:19:
         ef:d9:0c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----