Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/12/323630323a666139303a3a2f33362d3336203d3e203530303538.roa
File:                     323630323a666139303a3a2f33362d3336203d3e203530303538.roa (raw, json)
Hash identifier:          3kLBtwM6QANSWxnshejmX1E3x3p3SfF++9crhcAHocQ=
Subject key identifier:   17:17:2B:8B:B1:F4:3E:28:46:8B:AE:14:24:2B:C5:C7:2E:FD:3A:0F
Certificate issuer:       /CN=F4DF07ED834F20CF7568CB795C226443F7EE040F
Certificate serial:       56D6AA539EBF1613B7AA6BEE476EE8DF8D7EA4D7
Authority key identifier: F4:DF:07:ED:83:4F:20:CF:75:68:CB:79:5C:22:64:43:F7:EE:04:0F
Authority info access:    rsync://rpki.co/repo/HYSP/17/F4DF07ED834F20CF7568CB795C226443F7EE040F.cer
Subject info access:      rsync://rpki.co/repo/August/12/323630323a666139303a3a2f33362d3336203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 09:22:08 +0000
ROA not before:           Sat 08 Apr 2023 09:17:08 +0000
ROA not after:            Sat 06 Apr 2024 09:22:08 +0000
asID:                     50058
IP address blocks:        2602:fa90::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d6:aa:53:9e:bf:16:13:b7:aa:6b:ee:47:6e:e8:df:8d:7e:a4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4DF07ED834F20CF7568CB795C226443F7EE040F
        Validity
            Not Before: Apr  8 09:17:08 2023 GMT
            Not After : Apr  6 09:22:08 2024 GMT
        Subject: CN=17172B8BB1F43E28468BAE14242BC5C72EFD3A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:74:35:5a:0a:11:05:7f:ed:fb:e0:76:ad:
                    7b:de:e5:5c:26:ba:e4:fd:44:2e:00:3c:7c:d0:e6:
                    10:3a:9d:ab:ea:0f:a0:92:4f:c3:dc:ef:2b:c1:cd:
                    fc:1a:96:71:8f:90:0d:ba:b0:cf:5f:5d:04:37:24:
                    36:2c:fd:15:5d:c8:6a:77:c0:91:3d:72:90:79:43:
                    a6:56:50:d9:44:5c:42:ea:9c:3b:fb:21:8e:6e:1a:
                    a3:53:6a:5e:a4:11:64:16:f6:76:31:b7:fb:bd:07:
                    ac:bf:e0:d1:4f:a8:27:f6:63:96:9e:ec:cb:df:34:
                    8b:02:be:f9:ac:bf:c6:0c:76:63:b6:20:18:8b:94:
                    0a:8b:97:1f:4c:33:93:66:77:6d:b8:5c:aa:35:32:
                    b3:33:6b:a5:49:57:0f:f6:68:88:71:72:b6:45:8f:
                    9e:da:c1:2a:68:6d:c4:df:2f:cb:78:28:15:d3:e7:
                    44:e3:be:ae:2d:d3:b5:61:62:4b:76:59:8c:72:06:
                    62:a6:a6:b4:ce:9e:70:59:f7:c9:9a:6c:ff:3d:5e:
                    b5:28:c2:dc:c8:1e:b2:75:c3:28:15:25:f0:ca:77:
                    12:b5:29:ad:a3:f0:f9:c4:67:09:6f:43:09:3e:d8:
                    9c:2d:1e:2c:88:fa:51:58:6c:8a:99:6f:5b:02:82:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:17:2B:8B:B1:F4:3E:28:46:8B:AE:14:24:2B:C5:C7:2E:FD:3A:0F
            X509v3 Authority Key Identifier:
                keyid:F4:DF:07:ED:83:4F:20:CF:75:68:CB:79:5C:22:64:43:F7:EE:04:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/12/F4DF07ED834F20CF7568CB795C226443F7EE040F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/17/F4DF07ED834F20CF7568CB795C226443F7EE040F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/12/323630323a666139303a3a2f33362d3336203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa90::/36

    Signature Algorithm: sha256WithRSAEncryption
         66:81:27:fd:3c:73:46:0e:b3:e2:32:c0:2d:95:45:6d:2e:09:
         cc:14:12:99:b1:e8:4b:79:dc:32:79:1a:c2:56:5d:a8:8b:0f:
         96:9a:e9:be:1a:25:44:c8:52:03:52:76:b2:cf:95:5d:5e:71:
         90:a5:cc:ca:d1:de:f6:55:25:7b:8a:8e:84:12:fe:65:0c:aa:
         ba:1f:cc:6a:6c:5f:3f:bd:71:72:e8:c8:c7:07:94:6a:3d:96:
         3c:01:bd:bf:c5:1a:a1:45:29:ee:e2:e5:a5:db:b7:87:be:5c:
         cb:91:cb:58:04:c1:4f:f3:99:f5:58:d0:4c:e3:46:89:58:d5:
         39:8f:80:8d:58:85:2a:85:86:51:1d:0c:d9:c2:7d:15:17:a0:
         e2:7f:e2:a8:c6:bf:38:3e:a6:32:f0:91:e4:92:e2:d6:38:37:
         21:42:bf:c2:d2:26:58:0b:f5:60:b3:45:67:35:c0:17:1a:71:
         bc:83:b6:5a:b8:96:8c:c3:a0:9a:da:a6:ea:f3:46:e8:c6:92:
         ec:82:5a:62:42:42:86:d7:20:3b:7f:2f:7b:0b:31:c7:20:24:
         11:9e:a1:59:9d:95:51:90:32:bd:75:42:53:4a:50:cc:33:3c:
         49:6d:5b:f4:85:d0:6a:7d:14:4f:63:a3:3d:48:28:0e:62:87:
         70:ac:62:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----