Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203888.roa
File:                     AS203888.roa (raw, json)
Hash identifier:          MnDGIl/pewec5vXb5/iTLHpe2Rew/X6KX884EYWfato=
Subject key identifier:   5C:DE:09:D9:01:59:0E:06:DE:64:3C:21:B9:6B:CB:A9:E2:24:5F:E3
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       24523346590D1D2BDE6ADA71716B7CE778AD1EBD
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203888.roa
Signing time:             Mon 10 Apr 2023 03:31:51 +0000
ROA not before:           Mon 10 Apr 2023 03:26:51 +0000
ROA not after:            Mon 08 Apr 2024 03:31:51 +0000
asID:                     203888
IP address blocks:        2a12:dd47:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:52:33:46:59:0d:1d:2b:de:6a:da:71:71:6b:7c:e7:78:ad:1e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:51 2023 GMT
            Not After : Apr  8 03:31:51 2024 GMT
        Subject: CN=5CDE09D901590E06DE643C21B96BCBA9E2245FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:0e:73:84:8f:b8:1d:d5:10:20:7f:22:19:
                    26:4b:b0:ec:70:7e:d6:22:8a:44:58:ff:1a:0d:dd:
                    29:e2:03:98:d4:97:f8:96:64:5a:4f:73:ee:d2:c4:
                    ed:0b:b1:02:1b:70:8d:7c:2a:d3:29:ba:90:50:d1:
                    32:9d:18:8e:37:bc:79:b4:08:30:07:6b:35:d3:d2:
                    86:a2:63:f6:8a:fe:c0:84:11:bb:8a:c8:61:13:0e:
                    c8:a9:55:62:91:56:11:fd:8b:97:f3:2e:76:55:08:
                    0c:5e:a2:54:ec:69:40:d5:db:97:80:45:b9:dd:37:
                    b2:ec:28:5e:50:c6:f5:aa:ef:ae:d3:33:1e:90:8b:
                    a5:19:52:1f:ed:e7:7b:4b:d8:19:bd:91:51:ce:5d:
                    b7:36:fb:f2:34:bc:ac:c4:ae:19:f7:f3:6b:7f:c4:
                    0d:c1:1e:b0:b7:6e:00:f1:b2:55:f3:16:d7:0f:c4:
                    4b:0a:0f:99:d8:da:71:17:7d:f6:0b:2a:1f:42:e2:
                    b6:d6:a9:bb:0d:33:68:ab:8b:7d:d5:af:b1:3a:ea:
                    49:68:29:ab:f5:34:7a:24:a3:66:04:09:17:7b:e4:
                    96:cf:a6:ec:8b:b3:51:b8:16:1a:27:89:03:ab:1c:
                    58:e4:d3:8f:52:b8:1e:0c:ec:46:4b:42:b1:06:41:
                    01:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DE:09:D9:01:59:0E:06:DE:64:3C:21:B9:6B:CB:A9:E2:24:5F:E3
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203888.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         cb:fa:aa:34:7b:a8:76:a3:40:85:84:f6:74:ba:bf:b2:32:4b:
         b3:04:5e:11:ce:8f:ff:a2:81:cd:e5:25:aa:36:75:7e:6c:f5:
         48:bd:f5:3d:68:0b:75:9a:ab:f0:c9:bf:85:b7:4c:dd:1c:a9:
         d1:94:a9:cf:3c:34:79:4a:e7:ce:87:9c:55:37:34:79:f1:ad:
         a7:61:e4:56:e7:74:f6:b0:54:11:c2:19:58:fc:6d:61:12:f4:
         9d:51:62:72:ab:3d:91:cc:84:59:6a:45:13:ac:e8:61:a8:fe:
         da:bb:cd:e1:51:7c:6e:80:9f:df:a2:e1:e3:30:83:ee:de:98:
         56:2a:b2:32:15:82:9b:e4:b2:f9:54:91:11:21:70:70:38:1e:
         d1:cd:2e:a8:e2:85:d7:0e:a7:6e:82:df:7b:6a:85:8c:fe:2f:
         37:dc:2d:88:1a:c9:dc:2d:f6:04:c9:b3:1d:5d:17:11:06:f4:
         59:d4:02:32:aa:09:04:2a:88:ce:c7:80:12:dc:9e:f8:bb:df:
         94:61:db:6b:9d:ef:d8:06:3f:e8:5d:54:40:e5:9f:c8:1c:35:
         ae:72:31:ad:d1:9d:78:eb:03:be:26:14:fa:0e:50:94:a5:14:
         1c:b7:22:ca:7a:64:69:58:e8:55:76:73:04:f7:a6:27:3b:f5:
         f4:69:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----