Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pudu/0/326130363a613334303a3a2f32392d3438203d3e203437363839.roa
File:                     326130363a613334303a3a2f32392d3438203d3e203437363839.roa (raw, json)
Hash identifier:          iI45m67paaSAtX6UT/6o7g4soDvJqYMo6y6t0OIirxc=
Subject key identifier:   4E:E0:2A:E4:08:DA:C9:07:51:69:FF:4F:1D:B9:B1:F8:9B:42:04:A2
Certificate issuer:       /CN=ead264c4a27c6bf24ae80e57c50bd86d4b72b06e
Certificate serial:       73BB53534641F6341EC072FCEB7D644EFD8EB4F6
Authority key identifier: EA:D2:64:C4:A2:7C:6B:F2:4A:E8:0E:57:C5:0B:D8:6D:4B:72:B0:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tJkxKJ8a_JK6A5XxQvYbUtysG4.cer
Subject info access:      rsync://rpki.co/repo/Pudu/0/326130363a613334303a3a2f32392d3438203d3e203437363839.roa
Signing time:             Sun 23 Apr 2023 07:23:17 +0000
ROA not before:           Sun 23 Apr 2023 07:18:17 +0000
ROA not after:            Sun 21 Apr 2024 07:23:17 +0000
asID:                     47689
IP address blocks:        2a06:a340::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bb:53:53:46:41:f6:34:1e:c0:72:fc:eb:7d:64:4e:fd:8e:b4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead264c4a27c6bf24ae80e57c50bd86d4b72b06e
        Validity
            Not Before: Apr 23 07:18:17 2023 GMT
            Not After : Apr 21 07:23:17 2024 GMT
        Subject: CN=4EE02AE408DAC9075169FF4F1DB9B1F89B4204A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:a7:18:42:83:b3:ff:2c:66:96:1e:e3:c4:
                    ae:f5:b4:84:66:3c:f7:f4:b6:16:40:fe:2b:23:db:
                    72:c7:c7:35:38:2d:05:d4:17:df:3f:00:ad:dd:34:
                    9c:b1:58:09:e9:93:d6:94:12:29:62:b7:40:f8:c7:
                    3b:40:c6:5e:d1:24:f6:31:14:37:54:82:66:ab:51:
                    4a:75:03:19:45:c9:93:6f:5f:16:19:f1:f3:6d:04:
                    06:57:fd:94:dd:73:16:e6:17:f9:c6:bc:ef:2c:2f:
                    8a:11:97:ca:da:05:45:f5:73:af:ad:47:7b:4a:b5:
                    5b:bc:ab:db:6f:c1:86:95:ea:2a:38:84:d0:f2:41:
                    c4:90:e3:76:01:e2:68:7f:70:88:ef:e7:bc:07:28:
                    ad:a2:3d:af:72:10:49:5e:05:04:d2:5c:54:5b:cc:
                    a7:b0:ba:bb:f8:94:d1:58:53:7e:1b:7f:c9:f2:af:
                    6c:b8:9d:b7:21:e3:20:8c:dd:58:95:2f:b7:71:c1:
                    34:ad:58:12:66:c3:02:8f:f3:69:1a:0c:ac:70:ef:
                    0c:4d:79:2e:3c:7b:9f:2e:25:c2:ea:ee:0e:94:83:
                    d9:34:30:44:77:b9:e9:5c:a0:14:5f:00:5c:ee:40:
                    49:4e:4e:ba:15:eb:fd:35:8e:ea:ff:e3:61:15:57:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E0:2A:E4:08:DA:C9:07:51:69:FF:4F:1D:B9:B1:F8:9B:42:04:A2
            X509v3 Authority Key Identifier:
                keyid:EA:D2:64:C4:A2:7C:6B:F2:4A:E8:0E:57:C5:0B:D8:6D:4B:72:B0:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pudu/0/EAD264C4A27C6BF24AE80E57C50BD86D4B72B06E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tJkxKJ8a_JK6A5XxQvYbUtysG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pudu/0/326130363a613334303a3a2f32392d3438203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a340::/29

    Signature Algorithm: sha256WithRSAEncryption
         8f:df:56:5e:ab:28:12:2b:a4:7d:45:22:17:38:f7:cf:dc:2e:
         a8:54:8a:fa:e2:f6:18:97:a1:fe:cf:19:b6:bf:7e:0e:25:9c:
         4f:08:c1:9b:e2:9c:05:95:33:6b:93:df:33:c9:d0:19:3c:7f:
         fd:39:15:de:a4:f9:6b:c1:73:fc:2d:aa:71:67:dc:bf:97:03:
         7e:01:ad:28:33:dd:39:11:78:33:5f:66:18:3b:d6:6b:14:fa:
         ff:5e:5a:3a:c5:0e:97:a7:46:a4:36:44:8c:7d:a1:93:59:cb:
         12:96:c3:cd:3e:e2:bf:0b:7e:9f:ee:48:53:a7:f7:0f:15:00:
         a9:fe:14:8e:8b:dd:78:17:57:fa:b5:ba:87:48:f3:30:4c:9d:
         5f:60:60:25:64:e9:29:3b:19:d4:c9:b3:76:b5:61:29:3e:99:
         79:1f:e8:a4:ad:9d:bb:26:62:43:d5:e1:27:99:31:05:7d:59:
         3d:59:a1:f0:1d:07:90:07:c5:ea:08:c3:56:e2:09:ee:d1:56:
         71:ee:61:13:75:88:2e:79:c8:32:e1:71:f5:cb:96:75:a2:4d:
         bb:8d:20:f3:b6:8a:ea:ef:a6:9e:73:2e:e6:40:43:34:50:eb:
         bc:d5:b3:e9:46:94:ca:fe:b7:8e:63:57:e6:3b:c3:9c:af:21:
         26:1d:9e:29
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUc7tTU0ZB9jQewHL8631kTv2OtPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWFkMjY0YzRhMjdjNmJmMjRhZTgwZTU3YzUwYmQ4NmQ0
YjcyYjA2ZTAeFw0yMzA0MjMwNzE4MTdaFw0yNDA0MjEwNzIzMTdaMDMxMTAvBgNV
BAMTKDRFRTAyQUU0MDhEQUM5MDc1MTY5RkY0RjFEQjlCMUY4OUI0MjA0QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRacYQoOz/yxmlh7jxK71tIRm
PPf0thZA/isj23LHxzU4LQXUF98/AK3dNJyxWAnpk9aUEilit0D4xztAxl7RJPYx
FDdUgmarUUp1AxlFyZNvXxYZ8fNtBAZX/ZTdcxbmF/nGvO8sL4oRl8raBUX1c6+t
R3tKtVu8q9tvwYaV6io4hNDyQcSQ43YB4mh/cIjv57wHKK2iPa9yEEleBQTSXFRb
zKewurv4lNFYU34bf8nyr2y4nbch4yCM3ViVL7dxwTStWBJmwwKP82kaDKxw7wxN
eS48e58uJcLq7g6Ug9k0MER3uelcoBRfAFzuQElOTroV6/01jur/42EVV8fFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTuAq5AjayQdRaf9PHbmx+JtCBKIwHwYDVR0j
BBgwFoAU6tJkxKJ8a/JK6A5XxQvYbUtysG4wDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL1B1ZHUvMC9FQUQyNjRD
NEEyN0M2QkYyNEFFODBFNTdDNTBCRDg2RDRCNzJCMDZFLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNnRKa3hLSjhhX0pLNkE1WHhRdlliVXR5c0c0LmNlcjBwBggr
BgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS5jby9yZXBvL1B1
ZHUvMC8zMjYxMzAzNjNhNjEzMzM0MzAzYTNhMmYzMjM5MmQzNDM4MjAzZDNlMjAz
NDM3MzYzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgajQDANBgkqhkiG9w0BAQsFAAOCAQEAj99W
XqsoEiukfUUiFzj3z9wuqFSK+uL2GJeh/s8Ztr9+DiWcTwjBm+KcBZUza5PfM8nQ
GTx//TkV3qT5a8Fz/C2qcWfcv5cDfgGtKDPdORF4M19mGDvWaxT6/15aOsUOl6dG
pDZEjH2hk1nLEpbDzT7ivwt+n+5IU6f3DxUAqf4UjovdeBdX+rW6h0jzMEydX2Bg
JWTpKTsZ1MmzdrVhKT6ZeR/opK2duyZiQ9XhJ5kxBX1ZPVmh8B0HkAfF6gjDVuIJ
7tFWce5hE3WILnnIMuFx9cuWdaJNu40g87aK6u+mnnMu5kBDNFDrvNWz6UaUyv63
jmNX5jvDnK8hJh2eKQ==
-----END CERTIFICATE-----