Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202732.roa
File:                     AS202732.roa (raw, json)
Hash identifier:          pGmAK1pBbLuudZjrpkD+Sru5AMsae8DAOM6tKU1WdDQ=
Subject key identifier:   50:61:94:18:1F:60:EA:E0:D4:19:09:F0:53:E6:3B:4F:97:F1:31:1F
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       519962C3C3F7A52E85190CDA2C2FE1BD8D1DDC6D
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202732.roa
Signing time:             Mon 10 Apr 2023 03:31:49 +0000
ROA not before:           Mon 10 Apr 2023 03:26:49 +0000
ROA not after:            Mon 08 Apr 2024 03:31:49 +0000
asID:                     202732
IP address blocks:        2a12:dd47:8290::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:99:62:c3:c3:f7:a5:2e:85:19:0c:da:2c:2f:e1:bd:8d:1d:dc:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:49 2023 GMT
            Not After : Apr  8 03:31:49 2024 GMT
        Subject: CN=506194181F60EAE0D41909F053E63B4F97F1311F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:4b:e1:ff:2d:50:c4:74:1a:f1:f1:28:3b:
                    ea:86:c7:df:78:eb:f7:dc:46:65:1b:c2:40:a5:9f:
                    e0:0f:bf:cf:3f:cb:18:c6:50:b7:c6:34:81:d9:3a:
                    46:d5:ae:a2:fb:23:ca:61:96:c0:2d:71:cd:4a:74:
                    3c:99:35:16:b8:ad:fb:8c:e5:d1:94:e6:da:4d:7c:
                    06:b0:d0:02:d6:be:0e:67:bf:ea:df:e4:2f:70:5f:
                    84:76:dd:43:cc:60:24:a5:5c:b6:9d:00:17:96:06:
                    c0:bd:7e:14:fb:99:6e:bd:80:08:2a:9a:67:6f:5f:
                    d4:94:af:96:00:34:b4:81:51:b7:ec:18:7e:4e:2b:
                    ee:11:53:bd:ba:f4:8d:4c:a8:5c:17:99:17:2c:3e:
                    ec:ec:9b:24:29:ff:1e:29:f3:89:c9:df:1c:a9:08:
                    e6:06:ee:61:27:7e:d8:b0:b8:3a:18:5a:a2:0f:a7:
                    cf:b6:82:e7:ea:fd:d2:c6:95:6e:bf:e4:c4:ef:7b:
                    7b:0d:89:23:cd:22:83:be:68:d0:46:82:6d:83:59:
                    4d:18:df:7b:2b:b3:50:1d:bd:2d:10:53:ee:88:d6:
                    5f:63:07:a5:75:ac:66:a2:27:af:99:3e:3b:7d:d5:
                    a8:80:d5:81:e0:d7:0c:8a:fc:3c:f6:9e:26:84:71:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:94:18:1F:60:EA:E0:D4:19:09:F0:53:E6:3B:4F:97:F1:31:1F
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8290::/44

    Signature Algorithm: sha256WithRSAEncryption
         4c:99:c0:7d:c8:d4:95:8c:39:b3:74:b5:21:21:62:d5:87:d1:
         69:c5:ae:9e:5b:c9:3a:d8:53:75:a2:69:42:1e:53:b1:36:6f:
         5a:15:29:4d:44:34:ea:31:5f:ce:df:10:5a:40:74:26:33:f6:
         5d:db:16:7f:82:be:00:53:1e:5f:db:d1:b4:cd:1e:3b:52:f6:
         19:3e:e3:98:84:d2:36:13:d3:0a:fa:77:c6:b5:ea:f6:dc:a7:
         f5:2b:50:d2:2f:6b:fb:f9:63:a7:9b:1b:c9:7d:1f:8c:9f:0e:
         7c:7e:55:82:3d:ac:89:53:fc:cf:d1:db:26:e9:37:e3:ad:44:
         c6:29:b8:d3:f8:0a:d3:a2:0c:30:37:8b:79:db:4e:60:d4:54:
         64:f2:89:42:12:da:1b:a0:21:49:93:06:46:60:99:7f:bb:53:
         4b:b2:7c:be:70:e9:34:0e:c4:46:80:1e:cc:81:b2:22:a6:40:
         fb:a1:1b:25:76:8b:11:33:86:d8:44:1a:7f:50:da:69:63:a2:
         15:85:8d:48:9b:f2:d3:04:2a:cc:ba:d8:27:8e:8d:55:b7:09:
         4a:b6:63:62:98:b8:5f:f2:67:c5:aa:f7:26:b3:30:f9:b0:d7:
         78:45:80:36:3b:90:c1:3f:c1:8f:ae:ba:56:09:7a:82:cb:78:
         9b:cb:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----