Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201398.roa
File:                     AS201398.roa (raw, json)
Hash identifier:          4fL0K69n3kzBq9pR2ZRswpHTHA3go3DvRoUqnWChXpc=
Subject key identifier:   0C:00:DE:79:54:B4:56:4F:14:BC:C0:38:CE:E1:0B:85:C4:F4:A8:1B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       22260F0055427796E307354DC43C83FFB1AF1B1F
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201398.roa
Signing time:             Mon 10 Apr 2023 03:38:57 +0000
ROA not before:           Mon 10 Apr 2023 03:33:57 +0000
ROA not after:            Mon 08 Apr 2024 03:38:57 +0000
asID:                     201398
IP address blocks:        2a12:dd47:8e00::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:26:0f:00:55:42:77:96:e3:07:35:4d:c4:3c:83:ff:b1:af:1b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:33:57 2023 GMT
            Not After : Apr  8 03:38:57 2024 GMT
        Subject: CN=0C00DE7954B4564F14BCC038CEE10B85C4F4A81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:ca:ce:82:13:7c:dd:9c:83:1c:47:f3:9c:
                    0d:42:bc:27:11:18:b0:f6:cc:5f:36:80:6b:3f:a5:
                    70:93:c2:f5:6f:c0:fb:b4:68:a2:ab:aa:7a:54:c6:
                    c0:e8:43:bb:e9:b0:d3:6c:43:b4:eb:f6:cb:fe:52:
                    d7:a9:f7:76:cc:e6:b3:bb:d6:23:43:84:be:42:d5:
                    b8:1c:da:77:ab:bd:2c:8d:df:26:be:ba:8d:fc:b7:
                    52:d5:12:0f:d6:fb:80:bc:e5:e7:5b:ab:39:29:eb:
                    0c:ae:7e:d3:1d:fc:86:3b:6a:89:79:ff:d1:d7:36:
                    5f:73:1a:8d:85:c2:ce:e7:e1:87:63:33:71:fd:1d:
                    65:c3:d8:c7:9f:59:f0:26:57:3e:af:e6:67:79:d8:
                    a4:35:84:f1:70:fb:c9:5c:8b:e6:8c:c1:83:04:a0:
                    7a:a7:e8:38:01:74:f5:fb:2e:ac:d8:82:4d:87:62:
                    90:82:3b:0b:e1:12:18:7c:21:cd:39:d6:b0:00:97:
                    52:89:24:8d:b2:e7:a8:fb:70:85:ce:ec:88:42:e1:
                    a6:f3:db:0f:f5:da:f1:af:f5:6d:87:c3:38:5e:37:
                    07:2e:6e:34:80:fa:bd:7b:a5:66:35:aa:8c:03:ea:
                    09:17:d6:d0:71:e7:bc:42:98:bd:63:63:f4:a9:94:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:00:DE:79:54:B4:56:4F:14:BC:C0:38:CE:E1:0B:85:C4:F4:A8:1B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201398.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e00::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:2f:84:52:3c:46:bc:0f:75:eb:d2:bf:a8:64:33:97:c3:1f:
         26:33:37:db:44:0a:c8:a4:38:a9:23:02:71:23:1c:e0:87:a8:
         b0:39:2a:96:7c:66:08:9d:d7:54:85:3f:ac:45:4c:80:ad:10:
         08:30:06:f2:08:b3:94:fd:bd:3c:76:cb:af:90:42:28:76:8f:
         7b:17:3a:13:54:58:c4:ad:07:08:5a:a0:db:c8:83:42:94:2e:
         0e:36:75:eb:e9:3a:35:e8:18:90:47:39:f9:36:ee:39:65:6a:
         19:30:f3:51:37:fa:d4:b2:6e:b1:83:7a:46:5f:51:43:24:75:
         a1:fe:4d:4e:33:4a:17:7a:d4:6e:79:f4:24:f1:0b:dc:4c:4d:
         fd:7a:0d:3b:99:20:99:cb:9e:c1:e9:b8:05:69:4b:c2:d1:79:
         24:67:b0:67:57:12:00:94:a3:81:78:8c:8a:0f:af:7f:2f:b5:
         1b:99:94:58:41:19:44:21:d5:03:1a:c8:0a:05:e1:16:0f:76:
         30:10:4e:d7:8c:de:f0:3d:3a:33:f2:1d:8b:00:a0:3e:f5:fb:
         2e:4d:eb:2d:cb:bb:8d:06:14:e2:c1:35:11:2d:d1:a6:6b:87:
         cd:8c:b5:97:03:eb:e0:e1:53:dd:9e:ce:30:d9:ea:ed:a4:79:
         b3:c6:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----