Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/1/323630363a623063303a3a2f33322d3332203d3e203530303538.roa
File:                     323630363a623063303a3a2f33322d3332203d3e203530303538.roa (raw, json)
Hash identifier:          8Ua8Ld9Km2O0kWVVhsxmjUJb1HeUm2TCDHL2FdQdcpY=
Subject key identifier:   09:51:4F:A8:AB:D8:00:4A:D6:A9:81:5B:F5:34:13:C6:A5:C9:BE:30
Certificate issuer:       /CN=275F7402D77B27EEC0DFD260AD9C0FBDAD00026F
Certificate serial:       70D3E1125D0D97B385E24160B0E7CFE91B820749
Authority key identifier: 27:5F:74:02:D7:7B:27:EE:C0:DF:D2:60:AD:9C:0F:BD:AD:00:02:6F
Authority info access:    rsync://rpki.co/repo/HYSP/13/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.cer
Subject info access:      rsync://rpki.co/repo/August/1/323630363a623063303a3a2f33322d3332203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 09:22:08 +0000
ROA not before:           Sat 08 Apr 2023 09:17:08 +0000
ROA not after:            Sat 06 Apr 2024 09:22:08 +0000
asID:                     50058
IP address blocks:        2606:b0c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d3:e1:12:5d:0d:97:b3:85:e2:41:60:b0:e7:cf:e9:1b:82:07:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275F7402D77B27EEC0DFD260AD9C0FBDAD00026F
        Validity
            Not Before: Apr  8 09:17:08 2023 GMT
            Not After : Apr  6 09:22:08 2024 GMT
        Subject: CN=09514FA8ABD8004AD6A9815BF53413C6A5C9BE30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:59:fd:7e:68:da:f1:23:0e:f5:34:2b:a8:
                    5c:b6:19:b3:46:04:4f:52:98:2d:9c:12:f6:23:b3:
                    e2:3e:40:01:09:1a:9d:70:79:36:70:2e:83:d7:e4:
                    2c:62:9e:de:0a:a4:3c:29:bf:d3:7e:61:38:f2:ad:
                    a0:57:1b:69:67:20:15:c6:f2:69:11:7f:3d:bc:50:
                    31:f3:a1:c1:34:f9:76:9d:65:b0:9c:93:05:ae:52:
                    eb:47:27:cb:c5:bb:44:fb:7e:77:1b:d9:4c:2c:8d:
                    12:f3:01:89:aa:f1:0c:75:74:c2:c3:8e:ea:30:97:
                    b5:28:6e:1c:22:33:3e:5f:69:9a:5b:3a:4a:43:34:
                    ba:a3:83:3a:8d:cf:c3:9b:e2:80:d4:84:08:8c:c7:
                    13:31:59:1e:25:76:6e:97:63:8b:ea:57:ec:33:60:
                    62:4f:ce:41:e5:ad:5b:d0:78:33:df:60:1a:ac:d8:
                    77:f1:52:1d:ee:19:78:2b:d9:f8:8d:ce:8e:0f:0c:
                    bf:8a:d6:9a:e5:3f:de:55:a9:2d:4b:ab:65:41:06:
                    1e:cc:92:4d:ff:66:48:5c:8a:f5:46:a2:6c:ff:da:
                    b5:3f:b4:51:06:ed:49:e0:da:e2:4a:8f:a6:ee:8f:
                    0d:e0:6a:ce:7b:6c:d8:c5:6e:45:cf:a0:a6:9b:52:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:51:4F:A8:AB:D8:00:4A:D6:A9:81:5B:F5:34:13:C6:A5:C9:BE:30
            X509v3 Authority Key Identifier:
                keyid:27:5F:74:02:D7:7B:27:EE:C0:DF:D2:60:AD:9C:0F:BD:AD:00:02:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/1/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/13/275F7402D77B27EEC0DFD260AD9C0FBDAD00026F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/1/323630363a623063303a3a2f33322d3332203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:4a:52:7b:46:e5:63:3b:d5:97:69:73:01:90:4c:fa:28:2c:
         6b:68:79:5a:83:f3:5e:7d:eb:cf:c2:57:46:96:b9:14:3c:ac:
         5d:6e:39:53:a7:f1:5b:96:d8:88:90:0e:f0:50:85:28:0c:94:
         48:ef:68:34:b1:f3:f5:3a:d3:68:14:8f:ef:6e:7a:2c:a0:9e:
         95:e4:ae:63:22:c4:5a:cb:df:24:e2:c4:bf:88:53:c6:3c:b0:
         94:e7:16:c0:62:23:2b:2d:37:19:43:4d:e4:ee:b7:77:b1:3d:
         15:cf:5a:7d:cc:28:22:4b:23:95:a8:6c:85:e6:82:55:c5:78:
         3b:d0:df:63:06:a6:0a:30:f0:3f:5c:7c:ef:c7:4e:9e:a3:16:
         52:9b:f5:ba:fd:3d:26:46:65:b7:1a:66:f8:eb:91:5f:81:ce:
         6d:a3:49:c3:ac:70:66:a0:53:79:f8:e4:7b:58:45:78:4f:35:
         4e:9e:f3:c8:66:c8:8e:25:c0:53:f9:1a:43:75:31:7c:7b:5f:
         43:9a:7a:6c:5f:6a:50:9f:33:de:c5:97:ad:8e:ec:3d:01:26:
         ec:20:7e:1a:7b:28:0d:f1:6d:46:88:5f:59:07:02:63:72:26:
         a3:9e:2c:5c:5d:67:b4:1b:ca:d5:6b:e2:5c:d9:dc:6a:46:82:
         e8:98:c8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----