Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/11/323630323a666139343a3a2f33362d3336203d3e203530303538.roa
File:                     323630323a666139343a3a2f33362d3336203d3e203530303538.roa (raw, json)
Hash identifier:          qS3gMRX3gTiJ39W2JmtzpNenJ5jcL8j6aGFCxYImk2U=
Subject key identifier:   2B:A0:F0:D5:62:52:47:7D:B1:A3:69:B3:8D:6B:98:B7:DF:30:13:F2
Certificate issuer:       /CN=0E6C5F2C1BF5535D704A579C368377D9DF7977B0
Certificate serial:       548C7A6FE7C339EBBD40ED4F90DAF227116DD8DA
Authority key identifier: 0E:6C:5F:2C:1B:F5:53:5D:70:4A:57:9C:36:83:77:D9:DF:79:77:B0
Authority info access:    rsync://rpki.co/repo/HYSP/16/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.cer
Subject info access:      rsync://rpki.co/repo/August/11/323630323a666139343a3a2f33362d3336203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 09:22:07 +0000
ROA not before:           Sat 08 Apr 2023 09:17:07 +0000
ROA not after:            Sat 06 Apr 2024 09:22:07 +0000
asID:                     50058
IP address blocks:        2602:fa94::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8c:7a:6f:e7:c3:39:eb:bd:40:ed:4f:90:da:f2:27:11:6d:d8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E6C5F2C1BF5535D704A579C368377D9DF7977B0
        Validity
            Not Before: Apr  8 09:17:07 2023 GMT
            Not After : Apr  6 09:22:07 2024 GMT
        Subject: CN=2BA0F0D56252477DB1A369B38D6B98B7DF3013F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:3d:8e:a4:1a:59:ca:1b:85:26:86:e3:a7:
                    2b:ad:4f:b6:41:3d:bf:57:64:ee:cb:18:1a:a7:6b:
                    ef:81:fd:08:5e:8c:b4:58:85:1d:d3:78:d2:3e:8e:
                    af:f4:bf:3d:52:8d:8b:4d:11:8b:c6:0c:d6:e6:ca:
                    f7:d6:b0:25:95:f9:6d:87:a4:17:29:7a:b8:d8:17:
                    cc:40:36:93:4f:29:1f:53:4f:b2:3c:fb:5d:f9:2e:
                    06:03:bd:dd:0f:2d:06:35:19:00:0d:01:2e:42:d1:
                    c4:61:69:83:78:0d:4e:ac:8e:02:46:0c:98:91:fa:
                    7d:89:ab:c9:8e:0b:0e:1e:44:e9:46:cb:00:9f:e1:
                    a6:92:20:7a:52:0c:75:63:9c:8e:7f:f3:2b:cb:46:
                    58:21:4b:4b:de:36:0e:88:58:78:18:3a:36:bc:63:
                    1a:1a:19:d3:c0:2c:a4:a6:ce:80:a8:eb:26:fa:e0:
                    72:b3:8d:62:73:c5:4d:97:d9:20:f7:d0:74:1c:05:
                    83:88:f9:03:d8:2e:9c:83:1c:92:7c:8a:e4:18:e5:
                    b7:59:c1:a2:f4:85:1e:cb:c0:8a:33:e0:e8:ce:30:
                    55:96:72:cc:a9:28:9d:82:31:ab:7b:98:1a:64:be:
                    15:ea:41:db:90:3c:88:d6:84:be:29:37:b9:31:f0:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A0:F0:D5:62:52:47:7D:B1:A3:69:B3:8D:6B:98:B7:DF:30:13:F2
            X509v3 Authority Key Identifier:
                keyid:0E:6C:5F:2C:1B:F5:53:5D:70:4A:57:9C:36:83:77:D9:DF:79:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/11/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/16/0E6C5F2C1BF5535D704A579C368377D9DF7977B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/11/323630323a666139343a3a2f33362d3336203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa94::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:1a:12:bf:5f:b1:43:98:ad:09:b5:85:53:df:e8:bd:04:0b:
         d5:88:0e:5d:f0:21:09:9b:84:3f:58:ab:93:8d:19:2b:ca:2c:
         d8:7b:23:b6:04:e6:23:8e:21:9c:33:a4:85:fb:15:37:1b:ae:
         ea:7f:35:72:a8:f4:7d:e6:75:c8:48:d9:34:76:42:13:02:63:
         74:44:eb:5e:98:16:f3:76:1a:ec:a5:59:d9:95:30:cf:45:f4:
         1f:d4:30:52:28:fb:6f:01:7d:a1:04:1e:d9:1a:18:90:23:43:
         4d:ae:a3:df:da:ed:9a:03:09:bd:5a:b2:71:6a:11:dc:f5:ae:
         d9:80:a8:39:50:05:0b:b6:e9:9a:29:bc:b3:1c:bc:bf:db:a4:
         49:64:8b:9c:cf:f4:cd:26:66:05:9e:5e:01:57:82:02:19:26:
         ec:b1:96:0d:9a:d3:a5:80:d9:d4:46:6e:8a:bc:8e:76:9e:a3:
         e2:a8:70:10:33:c9:35:b3:05:1b:23:17:81:91:b9:c4:d5:1c:
         5f:c9:52:de:eb:df:c9:c9:5d:8c:41:9b:73:a4:99:cc:49:29:
         4c:87:c7:7e:2e:00:92:29:2d:04:44:9b:c5:75:02:b2:c5:13:
         1c:6c:29:eb:34:69:fd:59:04:b8:c2:03:3e:71:46:2b:02:8a:
         42:02:6c:0b
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIUVIx6b+fDOeu9QO1PkNryJxFt2NowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU2QzVGMkMxQkY1NTM1RDcwNEE1NzlDMzY4Mzc3RDlE
Rjc5NzdCMDAeFw0yMzA0MDgwOTE3MDdaFw0yNDA0MDYwOTIyMDdaMDMxMTAvBgNV
BAMTKDJCQTBGMEQ1NjI1MjQ3N0RCMUEzNjlCMzhENkI5OEI3REYzMDEzRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztj2OpBpZyhuFJobjpyutT7ZB
Pb9XZO7LGBqna++B/QhejLRYhR3TeNI+jq/0vz1SjYtNEYvGDNbmyvfWsCWV+W2H
pBcperjYF8xANpNPKR9TT7I8+135LgYDvd0PLQY1GQANAS5C0cRhaYN4DU6sjgJG
DJiR+n2Jq8mOCw4eROlGywCf4aaSIHpSDHVjnI5/8yvLRlghS0veNg6IWHgYOja8
YxoaGdPALKSmzoCo6yb64HKzjWJzxU2X2SD30HQcBYOI+QPYLpyDHJJ8iuQY5bdZ
waL0hR7LwIoz4OjOMFWWcsypKJ2CMat7mBpkvhXqQduQPIjWhL4pN7kx8FHRAgMB
AAGjggHLMIIBxzAdBgNVHQ4EFgQUK6Dw1WJSR32xo2mzjWuYt98wE/IwHwYDVR0j
BBgwFoAUDmxfLBv1U11wSlecNoN32d95d7AwDgYDVR0PAQH/BAQDAgeAMFwGA1Ud
HwRVMFMwUaBPoE2GS3JzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8xMS8wRTZD
NUYyQzFCRjU1MzVENzA0QTU3OUMzNjgzNzdEOURGNzk3N0IwLmNybDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1Av
MTYvMEU2QzVGMkMxQkY1NTM1RDcwNEE1NzlDMzY4Mzc3RDlERjc5NzdCMC5jZXIw
cwYIKwYBBQUHAQsEZzBlMGMGCCsGAQUFBzALhldyc3luYzovL3Jwa2kuY28vcmVw
by9BdWd1c3QvMTEvMzIzNjMwMzIzYTY2NjEzOTM0M2EzYTJmMzMzNjJkMzMzNjIw
M2QzZTIwMzUzMDMwMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCYC+pQAMA0GCSqGSIb3DQEBCwUA
A4IBAQAlGhK/X7FDmK0JtYVT3+i9BAvViA5d8CEJm4Q/WKuTjRkryizYeyO2BOYj
jiGcM6SF+xU3G67qfzVyqPR95nXISNk0dkITAmN0ROtemBbzdhrspVnZlTDPRfQf
1DBSKPtvAX2hBB7ZGhiQI0NNrqPf2u2aAwm9WrJxahHc9a7ZgKg5UAULtumaKbyz
HLy/26RJZIucz/TNJmYFnl4BV4ICGSbssZYNmtOlgNnURm6KvI52nqPiqHAQM8k1
swUbIxeBkbnE1RxfyVLe69/JyV2MQZtzpJnMSSlMh8d+LgCSKS0ERJvFdQKyxRMc
bCnrNGn9WQS4wgM+cUYrAopCAmwL
-----END CERTIFICATE-----