Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199682.roa
File:                     AS199682.roa (raw, json)
Hash identifier:          hWWvlhDqvp1b2vsb1TFGxcJvvjWaHJo0tpRF8WMeEbA=
Subject key identifier:   D3:A0:8B:5B:B5:E6:D1:29:A3:3D:A8:BB:EF:A5:09:77:66:62:1A:4F
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       499BD7032F64F6E4BECE1F77A971ECF9DFEF73E5
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199682.roa
Signing time:             Mon 10 Apr 2023 03:31:47 +0000
ROA not before:           Mon 10 Apr 2023 03:26:47 +0000
ROA not after:            Mon 08 Apr 2024 03:31:47 +0000
asID:                     199682
IP address blocks:        2a12:dd47:8333::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9b:d7:03:2f:64:f6:e4:be:ce:1f:77:a9:71:ec:f9:df:ef:73:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:47 2023 GMT
            Not After : Apr  8 03:31:47 2024 GMT
        Subject: CN=D3A08B5BB5E6D129A33DA8BBEFA5097766621A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:02:cb:93:52:b5:37:92:e2:93:65:df:b7:
                    20:df:03:48:a3:05:84:95:5d:38:7c:27:80:97:41:
                    28:2c:7a:c9:a4:fd:c6:0b:50:11:e6:75:f1:62:f2:
                    ac:b2:17:75:a8:8a:a2:6e:01:7c:d9:8c:ab:09:87:
                    9d:f2:d5:4a:cc:41:72:2c:79:14:61:4d:f9:9a:5a:
                    8f:73:9e:db:71:ca:58:5c:5e:8e:f2:2c:78:05:c4:
                    16:73:0d:d8:df:a3:47:f3:45:20:81:d2:25:ca:ff:
                    31:ce:60:32:3d:de:38:a7:5d:50:5d:cc:88:00:6a:
                    26:b6:74:66:25:3e:ba:51:22:33:ff:66:79:9c:4a:
                    95:9b:1d:16:c1:91:a1:24:d6:6b:e4:d8:d5:f6:5c:
                    bf:18:57:9e:73:2a:d7:b9:ae:02:5e:e3:1f:5f:dd:
                    46:4e:0b:5d:58:f1:f7:ef:33:97:17:f0:ab:a0:e1:
                    63:48:e1:12:4b:36:eb:6a:53:42:4c:3b:43:0f:71:
                    19:c8:23:71:0e:74:f9:0d:46:7f:8b:04:14:b4:b3:
                    47:60:5e:9f:d7:3f:67:2e:9e:cc:05:5c:5f:97:d1:
                    6a:4e:66:64:87:bb:ca:c3:7a:38:25:00:4c:2f:af:
                    e5:dd:02:c3:2f:61:2c:44:40:82:8b:dc:55:d8:29:
                    45:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A0:8B:5B:B5:E6:D1:29:A3:3D:A8:BB:EF:A5:09:77:66:62:1A:4F
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199682.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8333::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:ee:8e:36:b5:1b:f6:f3:6c:21:24:a1:d2:94:d8:a6:ed:12:
         01:43:df:31:a7:9d:32:d4:72:02:61:69:11:57:82:43:3b:08:
         7e:ec:ef:55:bb:ff:1d:a4:9e:11:7c:ab:63:cb:88:42:e1:72:
         88:f3:df:fc:8e:a3:39:ed:2a:54:83:fa:3a:4e:84:6c:cd:4e:
         17:7d:68:2a:bf:07:f0:ff:5d:d6:6f:a2:94:62:42:fe:50:84:
         7b:d6:00:ee:87:33:b3:08:cf:1e:2a:62:b0:3c:b6:74:33:d4:
         ac:dd:4a:62:58:73:12:de:12:57:f7:b5:f3:74:51:72:75:4b:
         75:2b:07:6a:af:f0:b7:92:f3:8a:07:97:e2:2d:bc:0d:ad:e1:
         7f:10:a4:d6:dc:f8:23:a6:ec:b0:02:b4:4d:47:67:7e:33:c1:
         68:e8:14:15:43:60:2c:ee:84:a1:66:08:74:b4:e9:1e:73:f7:
         46:06:44:79:62:fe:ae:87:81:c4:dc:bc:18:14:a9:7d:bd:e5:
         bb:f2:48:33:79:c7:f9:8d:da:e5:99:7c:81:3d:9d:a3:1a:61:
         f2:8b:18:f0:b8:6e:78:00:43:33:81:ce:c1:04:fe:43:82:d5:
         e4:d5:e9:c9:32:9f:06:a2:5c:81:03:ea:84:6d:7d:ec:c3:f5:
         7a:84:56:5f
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUSZvXAy9k9uS+zh93qXHs+d/vc+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NDdaFw0yNDA0MDgwMzMxNDdaMDMxMTAvBgNV
BAMTKEQzQTA4QjVCQjVFNkQxMjlBMzNEQThCQkVGQTUwOTc3NjY2MjFBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdwLLk1K1N5Lik2XftyDfA0ij
BYSVXTh8J4CXQSgsesmk/cYLUBHmdfFi8qyyF3WoiqJuAXzZjKsJh53y1UrMQXIs
eRRhTfmaWo9znttxylhcXo7yLHgFxBZzDdjfo0fzRSCB0iXK/zHOYDI93jinXVBd
zIgAaia2dGYlPrpRIjP/ZnmcSpWbHRbBkaEk1mvk2NX2XL8YV55zKte5rgJe4x9f
3UZOC11Y8ffvM5cX8Kug4WNI4RJLNutqU0JMO0MPcRnII3EOdPkNRn+LBBS0s0dg
Xp/XP2cunswFXF+X0WpOZmSHu8rDejglAEwvr+XdAsMvYSxEQIKL3FXYKUWBAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQU06CLW7Xm0SmjPai776UJd2ZiGk8wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMxOTk2ODIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgzMwDQYJKoZIhvcNAQEL
BQADggEBAKjujja1G/bzbCEkodKU2KbtEgFD3zGnnTLUcgJhaRFXgkM7CH7s71W7
/x2knhF8q2PLiELhcojz3/yOozntKlSD+jpOhGzNThd9aCq/B/D/XdZvopRiQv5Q
hHvWAO6HM7MIzx4qYrA8tnQz1KzdSmJYcxLeElf3tfN0UXJ1S3UrB2qv8LeS84oH
l+ItvA2t4X8QpNbc+COm7LACtE1HZ34zwWjoFBVDYCzuhKFmCHS06R5z90YGRHli
/q6HgcTcvBgUqX295bvySDN5x/mN2uWZfIE9naMaYfKLGPC4bngAQzOBzsEE/kOC
1eTV6ckynwaiXIED6oRtfezD9XqEVl8=
-----END CERTIFICATE-----