Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Mlgt/2/326130353a646663373a3830303a3a2f33392d3339203d3e20323034353038.roa
File:                     326130353a646663373a3830303a3a2f33392d3339203d3e20323034353038.roa (raw, json)
Hash identifier:          4reIZcWm/42VMlbsvjavNd40YR02CC05oSERM/uh5AI=
Subject key identifier:   92:BC:F0:BB:79:C3:70:9C:57:11:EC:58:86:11:A1:96:60:FD:2C:6E
Certificate issuer:       /CN=3E0073E2C5B2A8D67388F2699EAE646AB0043B13
Certificate serial:       617BB71177C2C30192CD1FF0A05BE669739A4FAF
Authority key identifier: 3E:00:73:E2:C5:B2:A8:D6:73:88:F2:69:9E:AE:64:6A:B0:04:3B:13
Authority info access:    rsync://rpki.co/repo/AS205432/0/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.cer
Subject info access:      rsync://rpki.co/repo/Mlgt/2/326130353a646663373a3830303a3a2f33392d3339203d3e20323034353038.roa
Signing time:             Sat 22 Apr 2023 11:25:09 +0000
ROA not before:           Sat 22 Apr 2023 11:20:09 +0000
ROA not after:            Sat 20 Apr 2024 11:25:09 +0000
asID:                     204508
IP address blocks:        2a05:dfc7:800::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7b:b7:11:77:c2:c3:01:92:cd:1f:f0:a0:5b:e6:69:73:9a:4f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0073E2C5B2A8D67388F2699EAE646AB0043B13
        Validity
            Not Before: Apr 22 11:20:09 2023 GMT
            Not After : Apr 20 11:25:09 2024 GMT
        Subject: CN=92BCF0BB79C3709C5711EC588611A19660FD2C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:68:65:31:da:b7:81:f9:da:dd:48:aa:f1:
                    12:0a:3c:ee:49:38:e6:62:18:f1:69:f1:43:2e:ee:
                    e2:36:53:82:90:47:22:b9:dc:8e:9c:93:dc:4b:0f:
                    87:c5:45:d2:3f:f0:dc:40:cd:99:c4:a8:6f:4b:9c:
                    51:91:e4:9b:9f:a6:a4:bb:aa:d0:bc:80:95:32:07:
                    52:3d:ba:c7:46:05:d6:5a:52:61:57:36:0e:34:6c:
                    f2:39:d2:7d:44:eb:9f:1f:a5:9e:74:62:f2:ed:62:
                    51:03:bc:3c:ef:27:8c:d6:02:5b:c1:eb:9d:c9:c2:
                    35:ae:e0:29:cb:d2:11:1a:82:9c:37:ae:74:46:fa:
                    91:15:39:fe:a3:b6:54:15:c0:74:e3:3c:f8:6c:2a:
                    02:d1:1e:c4:ef:25:57:8e:40:4d:e1:60:ee:01:88:
                    99:80:3c:55:3a:61:3b:56:90:84:73:e9:ba:b4:7b:
                    e4:b4:9e:8a:7b:00:99:a1:7f:4c:10:78:03:15:7a:
                    24:d1:84:06:78:24:db:d3:69:ed:15:8b:90:0e:35:
                    4c:eb:c6:96:f4:e8:14:34:4b:ba:4e:00:56:f3:9d:
                    bc:f1:4c:5c:df:8e:19:48:9f:28:0f:80:9f:b0:8c:
                    60:65:ba:7f:23:8d:51:63:d2:f6:6c:37:39:aa:c3:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BC:F0:BB:79:C3:70:9C:57:11:EC:58:86:11:A1:96:60:FD:2C:6E
            X509v3 Authority Key Identifier:
                keyid:3E:00:73:E2:C5:B2:A8:D6:73:88:F2:69:9E:AE:64:6A:B0:04:3B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Mlgt/2/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Mlgt/2/326130353a646663373a3830303a3a2f33392d3339203d3e20323034353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:800::/39

    Signature Algorithm: sha256WithRSAEncryption
         0f:64:77:6c:55:24:68:3a:e0:b3:ef:88:f8:2b:d6:a9:50:d0:
         ff:52:c3:e0:5e:d8:ce:90:ff:ae:90:99:0d:80:e9:a7:75:2e:
         02:8c:a3:18:b8:18:5d:2c:e7:8f:c2:65:ac:bd:cd:b1:f5:10:
         28:f8:ae:4a:92:2e:81:98:82:e2:e6:8f:76:ee:8e:e3:ca:12:
         8c:43:46:e3:05:42:78:a1:39:e0:ec:72:75:82:73:c1:f7:53:
         3a:f3:1a:e3:c7:c3:d8:8c:bd:57:d8:8d:04:46:0f:2a:be:2e:
         d1:b0:c7:db:c5:c2:7b:c5:18:37:5e:90:53:25:73:f6:45:ab:
         2f:51:57:55:91:8c:09:5e:3f:48:cf:3c:1b:7b:7b:e2:15:a7:
         a9:e6:f9:13:33:90:c0:cc:dc:c3:5e:60:e2:ba:2b:81:4f:b6:
         92:07:2a:ec:a8:05:99:30:3c:45:62:a6:5f:9f:7e:6e:92:2d:
         6f:85:36:ec:83:e8:56:1b:f8:ba:38:bb:18:42:79:26:2f:86:
         e0:ca:b3:98:e8:6e:93:f5:26:65:77:8e:ed:a2:3f:93:10:37:
         43:1f:3f:28:d6:b4:24:8d:d8:eb:c8:e7:59:f8:04:46:ca:1e:
         4c:18:7b:6e:47:1c:b1:c8:cc:c9:e0:df:be:af:61:fb:f9:39:
         30:de:77:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----