Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201801.roa
File:                     AS201801.roa (raw, json)
Hash identifier:          aL5aEP2fKxxzjn9OZd1C+mJ8BInB5RqJ8K89oeWB2V8=
Subject key identifier:   B8:26:A3:0F:F2:9B:F7:FF:B2:76:16:7A:B9:11:58:66:2F:FC:D7:83
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       69AF05B89FDA0AD3992671205A103A4CCF2B2DAF
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201801.roa
Signing time:             Thu 18 May 2023 10:45:53 +0000
ROA not before:           Thu 18 May 2023 10:40:53 +0000
ROA not after:            Thu 16 May 2024 10:45:53 +0000
asID:                     201801
IP address blocks:        2a12:dd47:200::/40 maxlen: 48
                          2a12:dd47:8370::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:af:05:b8:9f:da:0a:d3:99:26:71:20:5a:10:3a:4c:cf:2b:2d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: May 18 10:40:53 2023 GMT
            Not After : May 16 10:45:53 2024 GMT
        Subject: CN=B826A30FF29BF7FFB276167AB91158662FFCD783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:69:27:8a:dd:83:74:ae:91:2b:95:3d:ac:55:
                    f9:35:fd:9d:98:e6:6a:93:b1:5a:ce:e8:67:dd:2f:
                    46:9e:0e:9f:33:2c:2e:b2:0c:c4:e9:36:27:02:80:
                    fb:6a:4c:5b:f4:32:59:52:05:02:b4:fb:bf:7c:ef:
                    e8:70:6d:e3:45:c2:46:ad:be:c5:e4:ac:78:51:6f:
                    23:fb:c3:0e:bf:cc:7b:9e:e7:57:d1:45:7c:99:d4:
                    2e:7a:6f:26:0a:3e:cf:44:49:2b:5b:3e:8c:9c:d2:
                    e8:75:f2:6d:18:5f:45:24:93:9f:33:60:7d:2a:18:
                    93:6b:6d:d0:bc:35:4c:28:b5:4d:bb:36:57:c3:6a:
                    ec:d0:68:10:05:f4:01:e3:7a:50:3c:6c:b6:c5:a1:
                    1e:94:6d:51:76:db:ab:b0:54:6c:a8:f1:da:be:cd:
                    62:5b:aa:5a:cf:56:14:3b:54:df:25:e4:37:48:95:
                    e4:17:85:09:3f:da:e8:a3:07:6f:b4:5c:61:88:00:
                    c7:69:f3:93:77:9c:6e:8d:85:9d:a0:10:fd:73:4e:
                    f0:17:d0:77:55:04:17:2b:18:3f:10:7b:7f:88:99:
                    38:55:86:03:0e:c5:ee:fd:b4:3e:32:07:64:8e:ba:
                    d0:8e:22:11:5a:2b:01:e6:11:61:7d:e5:24:f1:bc:
                    84:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:A3:0F:F2:9B:F7:FF:B2:76:16:7A:B9:11:58:66:2F:FC:D7:83
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201801.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:200::/40
                  2a12:dd47:8370::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:c7:23:b6:65:16:04:cf:c5:be:2f:20:fd:5e:7d:45:6c:36:
         cf:85:be:33:44:17:2e:bf:02:e2:e4:e3:08:9d:bb:e4:46:f5:
         29:23:d6:36:0a:ae:fc:42:d7:53:48:d7:e9:5c:a2:dd:0c:76:
         6c:6e:b3:c3:2f:61:c3:2c:af:bc:dc:87:3a:c9:89:1b:0a:28:
         91:96:c5:25:cc:2f:84:36:e5:d6:6e:c7:64:f7:4a:e0:dd:14:
         75:4b:8e:d6:c5:dd:4b:f7:1f:91:23:76:23:cc:eb:ef:4e:05:
         50:21:3a:e3:eb:04:8f:d3:2f:1a:0a:bf:31:9c:c3:38:78:60:
         36:4b:9d:56:f8:9a:0d:33:95:9d:53:13:3a:33:6a:04:25:a7:
         c3:25:46:ab:37:d6:45:88:d1:68:3e:fd:0a:09:a2:ce:86:68:
         d0:8e:52:51:6a:f0:eb:96:58:dd:d9:ba:d4:d1:a5:41:17:ac:
         d3:10:6a:e9:a9:90:55:88:9e:84:0c:1c:5b:18:8e:75:9b:31:
         48:8c:0e:07:48:f1:ab:3c:71:85:0d:48:f0:c8:82:5a:93:57:
         c6:62:7b:fc:72:36:2c:ab:fd:91:e2:13:f5:fc:0a:f7:39:87:
         0e:1c:1c:1c:62:83:a0:c7:30:b2:f3:69:b0:4a:38:36:de:a1:
         15:6f:8f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----