Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a383037323a3a2f34382d3438203d3e20323131363034.roa
File:                     326131323a646434373a383037323a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier:          3talfrQayfAt1OJmwx6QfPwxOoTVIMBDE1tPewmNrOQ=
Subject key identifier:   76:A6:C9:9E:09:CA:DB:32:90:56:3D:B2:97:44:29:B2:DC:C7:B0:6C
Certificate issuer:       /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial:       5A3EF53877EB8CB24E32872391CDAF9D1269AB72
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access:    rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access:      rsync://rpki.co/repo/AS211604/1/326131323a646434373a383037323a3a2f34382d3438203d3e20323131363034.roa
Signing time:             Thu 14 Mar 2024 14:14:09 +0000
ROA not before:           Thu 14 Mar 2024 14:09:09 +0000
ROA not after:            Thu 13 Mar 2025 14:14:09 +0000
asID:                     211604
IP address blocks:        2a12:dd47:8072::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3e:f5:38:77:eb:8c:b2:4e:32:87:23:91:cd:af:9d:12:69:ab:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Validity
            Not Before: Mar 14 14:09:09 2024 GMT
            Not After : Mar 13 14:14:09 2025 GMT
        Subject: CN=76A6C99E09CADB3290563DB2974429B2DCC7B06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:44:63:b4:9d:08:ab:f1:ab:a6:c9:eb:64:
                    20:97:1e:03:36:1e:3c:c7:7e:ba:53:41:8d:e7:c9:
                    a6:59:28:af:50:41:f3:62:be:d4:f9:94:58:e9:a0:
                    44:22:53:5d:25:0f:4f:ce:76:d1:38:53:d5:77:51:
                    5a:e9:64:6c:17:af:f0:ce:78:b5:77:89:d9:fb:d8:
                    ae:92:86:1f:9a:99:9f:82:60:02:1c:e3:52:42:1a:
                    9b:f0:4c:bb:ad:74:a9:c2:df:66:6d:ab:73:10:11:
                    23:bb:2a:48:eb:a2:52:c6:e8:29:6d:26:a9:ba:a8:
                    a2:1b:c2:1a:db:2c:b1:3f:f2:8c:a0:bd:97:8a:5b:
                    7e:51:17:36:67:d0:98:0b:0c:4a:82:5c:62:05:65:
                    1d:77:13:b9:2f:c6:7d:34:3a:d5:23:f0:95:03:52:
                    82:66:3f:b3:7a:7c:75:45:2d:55:9d:ed:1e:95:72:
                    c0:ee:4d:86:a8:b7:5f:47:c8:d8:c2:92:6d:dd:f1:
                    82:8b:c7:12:eb:cc:e8:9e:20:28:31:38:4e:dd:a1:
                    e1:30:c6:a9:c1:1a:17:d4:85:5c:57:3e:20:84:72:
                    94:3b:02:79:8e:cc:bb:07:ed:ae:54:0b:c7:7b:8f:
                    f5:9b:96:94:38:4d:1f:71:92:e3:4b:cc:2e:38:5e:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A6:C9:9E:09:CA:DB:32:90:56:3D:B2:97:44:29:B2:DC:C7:B0:6C
            X509v3 Authority Key Identifier:
                keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a383037323a3a2f34382d3438203d3e20323131363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8072::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:e9:d0:a0:33:18:0e:76:3a:28:9a:5a:ee:70:e5:0a:e0:bc:
         a4:66:59:8e:fe:e4:6e:46:71:da:95:b8:a7:15:66:1d:ad:b6:
         66:71:7e:7c:5d:1a:16:84:03:9f:59:1f:5e:c3:2a:75:4c:9d:
         c1:a8:48:7a:45:a0:44:91:77:f2:46:ee:35:cb:3d:cc:63:87:
         5f:1f:78:84:d2:ce:5a:ad:cc:19:69:9c:bd:4d:41:bb:1b:9a:
         40:ee:35:27:8f:80:45:5f:5e:b7:8d:fe:3f:d4:18:b0:e0:a1:
         65:e1:08:2b:11:a4:f5:1c:45:10:c8:42:37:2f:dd:41:26:a9:
         36:f8:5e:10:05:4a:e7:63:9e:fa:50:b7:8a:0d:01:8f:29:c5:
         3b:0a:02:98:5c:f3:28:5a:9a:e4:58:1b:d1:ed:a5:33:29:95:
         a5:cc:07:bb:23:49:29:bb:75:dd:14:b4:ae:55:61:11:ca:ce:
         8f:81:a2:09:50:c6:f7:94:e7:87:0c:29:5f:86:8d:97:68:6e:
         34:d4:4a:01:49:6d:d4:bd:16:cb:0a:be:7c:64:35:ee:07:09:
         82:82:3e:a4:93:9b:c0:91:81:99:69:ed:04:b8:ac:d5:94:d3:
         4b:ef:c8:1c:53:98:f6:72:43:e1:64:14:53:ef:ac:a3:b4:51:
         6e:52:19:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----