Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS151188.roa
File:                     AS151188.roa (raw, json)
Hash identifier:          o/CDq/3Bo7hAc7koyyuWAYZ3VR7cP3GDdnfLRWXXerY=
Subject key identifier:   68:63:89:35:BE:97:F9:05:E5:EB:20:2F:F8:15:E7:5D:C0:FF:DC:8C
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4B4D829DB576F6DD453580CD2BA0B567F265175C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS151188.roa
Signing time:             Sat 29 Jul 2023 06:22:58 +0000
ROA not before:           Sat 29 Jul 2023 06:17:58 +0000
ROA not after:            Sat 27 Jul 2024 06:22:58 +0000
asID:                     151188
IP address blocks:        2a12:dd46:1000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4d:82:9d:b5:76:f6:dd:45:35:80:cd:2b:a0:b5:67:f2:65:17:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Jul 29 06:17:58 2023 GMT
            Not After : Jul 27 06:22:58 2024 GMT
        Subject: CN=68638935BE97F905E5EB202FF815E75DC0FFDC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:a6:3b:98:c3:53:e9:f5:40:48:e8:1f:be:
                    b3:2f:0f:05:e1:b7:90:97:d8:9a:c2:d2:01:56:34:
                    89:df:5f:55:b0:ec:e9:1b:77:8f:24:dc:05:df:e8:
                    e4:6c:20:a2:33:56:c1:a5:ba:aa:a8:86:62:af:6e:
                    e7:58:ab:a5:6d:4d:02:27:db:31:fa:36:54:f3:e3:
                    b1:25:af:3b:21:ae:06:58:59:1e:f5:91:24:61:01:
                    fd:7b:3f:f7:80:4e:04:d1:29:d2:51:17:77:80:8a:
                    24:71:e9:18:a3:83:c6:e2:92:63:b6:05:cc:55:52:
                    fc:d0:a5:be:1d:2b:83:c0:ee:35:5a:c2:bd:0d:36:
                    0b:78:57:a8:b9:3c:e8:0f:3c:d2:25:32:9e:16:fa:
                    84:f7:a8:4d:27:69:8e:b8:2a:ba:5e:d2:d8:1f:e9:
                    e1:92:28:c5:b7:4d:c2:7d:1c:bd:e8:6f:70:46:5f:
                    4c:16:2f:c4:28:28:1e:74:41:39:3d:07:45:e4:b6:
                    0f:6b:fb:23:3d:d8:e5:bf:b7:06:fb:d0:91:45:7d:
                    85:0d:b3:0f:26:94:59:71:19:a1:28:2d:9c:ec:e4:
                    01:47:c6:30:61:26:0e:af:a2:08:51:e2:9a:ea:83:
                    cf:64:6a:45:8a:10:ce:ea:e4:d6:06:7e:d8:43:5d:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:63:89:35:BE:97:F9:05:E5:EB:20:2F:F8:15:E7:5D:C0:FF:DC:8C
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS151188.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         89:3d:f8:ae:2a:16:27:7d:96:55:10:f8:d0:b6:52:4a:95:b0:
         ba:51:40:14:27:81:a5:11:6a:d2:81:f8:9c:a8:c0:c3:4f:0c:
         fb:58:9b:08:4d:de:86:8c:ea:40:1a:1b:df:c8:e1:03:54:12:
         a0:73:2d:96:99:3b:13:46:94:ad:bd:64:b5:e6:dd:b8:53:5b:
         d0:0b:bc:93:ec:45:04:33:bb:e7:b4:46:ec:48:48:1d:61:6d:
         1c:21:7e:03:5d:f2:27:ff:70:0e:d7:1c:68:12:5f:7d:52:b7:
         c6:4f:19:08:48:77:8d:58:1b:94:2c:7c:bc:58:8d:ec:53:dd:
         d5:6c:0d:b4:07:6d:47:80:fc:14:c4:74:4d:7f:22:b5:40:8a:
         a0:39:9f:62:7f:a3:43:5d:16:fa:06:a1:00:9d:17:b8:73:11:
         8f:da:39:8b:6e:30:17:82:3e:3e:e0:5b:9c:4b:2e:8b:dd:6d:
         28:b9:55:b0:d3:8c:82:b2:7e:f6:a2:55:9f:a3:e3:0e:7a:41:
         ba:30:d2:a5:17:d2:91:9a:51:79:80:33:b0:07:67:c8:10:d8:
         a1:1d:83:96:d3:87:d1:2a:f3:ea:52:da:8d:91:f5:26:7e:a5:
         99:58:fc:31:22:a1:b8:9a:35:36:d7:4e:25:68:7a:30:1d:b6:
         8e:b6:3e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----