Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS56808.roa
File:                     AS56808.roa (raw, json)
Hash identifier:          AunDRjOSDPOwTnydrueb8w5hGlN6+/nnHDGLn3EaXQY=
Subject key identifier:   45:EF:C1:B8:02:A2:79:D8:3B:D8:1B:AB:74:03:E4:E6:68:A3:04:99
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       7A7DA156AAD03362E5ACC9077ABD03C7E6A44AD4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS56808.roa
Signing time:             Mon 10 Apr 2023 03:31:39 +0000
ROA not before:           Mon 10 Apr 2023 03:26:39 +0000
ROA not after:            Mon 08 Apr 2024 03:31:39 +0000
asID:                     56808
IP address blocks:        2a12:dd47:804e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7d:a1:56:aa:d0:33:62:e5:ac:c9:07:7a:bd:03:c7:e6:a4:4a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:39 2023 GMT
            Not After : Apr  8 03:31:39 2024 GMT
        Subject: CN=45EFC1B802A279D83BD81BAB7403E4E668A30499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:60:2e:76:0a:2a:26:24:4f:ec:23:be:ca:
                    0d:95:22:de:8e:de:15:8c:ea:42:88:a9:32:3f:30:
                    db:a0:8a:b0:11:63:ca:00:5d:99:88:3d:bd:60:c8:
                    8b:15:d6:8b:3b:72:18:89:d2:6e:20:10:d6:41:84:
                    3e:04:1a:cf:bc:b0:54:c0:7b:a0:7e:fa:ce:f9:78:
                    0d:54:b3:e4:8a:a4:13:1c:84:f5:b1:2f:a9:ea:c4:
                    28:2a:c1:33:15:cc:38:1e:91:ca:e7:e0:32:13:b2:
                    63:d6:79:0e:8f:e0:71:ae:96:ec:1a:65:94:06:d5:
                    a6:45:54:9b:27:e6:7a:fe:cc:49:b2:d6:9b:c5:d7:
                    31:e8:64:25:58:57:91:88:41:36:ff:8e:88:d7:3b:
                    66:c7:e4:8d:5f:91:a4:97:2d:00:18:44:c4:c4:e8:
                    75:ee:cb:12:eb:88:bc:f9:03:74:41:d3:ef:19:2d:
                    d5:95:4d:c6:ad:0f:fc:15:f9:55:ef:07:be:3f:d2:
                    17:6a:7e:70:a5:da:00:32:33:f6:bb:49:f0:85:63:
                    2c:01:32:8e:d4:ef:ee:3c:04:78:dd:ba:fa:c1:c4:
                    60:97:da:1f:f3:66:d9:1b:7b:a5:82:1a:ec:1a:a6:
                    11:4a:18:67:c3:11:f0:3c:d0:ff:6c:cf:15:f7:2a:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EF:C1:B8:02:A2:79:D8:3B:D8:1B:AB:74:03:E4:E6:68:A3:04:99
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS56808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804e::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:ca:1b:aa:42:d6:f6:6e:ab:d3:bc:91:ad:89:8f:8b:86:af:
         28:47:48:32:ca:f4:57:0b:a5:fb:d1:4a:76:82:2d:a1:ed:c0:
         76:7a:45:98:f1:4b:52:55:f5:5e:7c:79:d0:79:4c:9b:1d:38:
         b0:08:29:c3:31:bb:f0:52:9b:33:1f:f1:96:87:1b:fe:3f:35:
         a8:3d:77:f9:f0:14:44:43:42:e5:8d:ac:2e:28:dd:cc:b9:ce:
         5a:fa:3c:df:94:bb:97:11:e1:cd:ce:50:f1:c6:5e:4e:6b:40:
         6f:d5:5e:4c:a9:76:e2:cf:b4:bf:59:c4:34:54:54:bb:4f:97:
         7f:94:78:d2:d5:23:4a:b5:4f:fd:e0:b9:f8:5e:0b:3c:a3:01:
         ae:88:28:b4:d5:bc:b4:10:3f:a0:42:40:9a:d0:85:02:74:25:
         5e:f0:e2:64:97:44:e8:fc:d7:dc:cb:f3:01:7a:a8:47:aa:13:
         3b:7c:45:df:97:bc:5e:96:90:cc:6a:7c:71:93:79:79:e3:27:
         75:a1:2c:59:07:17:f8:57:b7:a2:c0:f5:50:f6:66:72:e2:93:
         7a:5c:9f:ae:a0:51:3d:bc:77:7e:3f:5c:82:b0:45:eb:86:8a:
         98:18:37:03:55:ea:29:c4:2b:7b:5d:01:0c:53:66:ab:89:e3:
         b3:95:83:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----