Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS203843/0/326131323a646434373a383034373a3a2f34382d3438203d3e20323033383433.roa
File:                     326131323a646434373a383034373a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          WpX5Px/w8AfOQ2WJYc++RvBgYLZccmvtA4ziGBESXZc=
Subject key identifier:   49:22:CA:A7:55:0D:D9:87:E9:2D:8D:C0:6A:0D:E4:33:58:BE:90:68
Certificate issuer:       /CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
Certificate serial:       650828731AA96DBE14EDAAE28284903D66A234D5
Authority key identifier: CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
Authority info access:    rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
Subject info access:      rsync://rpki.co/repo/AS203843/0/326131323a646434373a383034373a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Wed 20 Mar 2024 13:14:29 +0000
ROA not before:           Wed 20 Mar 2024 13:09:29 +0000
ROA not after:            Wed 19 Mar 2025 13:14:29 +0000
asID:                     203843
IP address blocks:        2a12:dd47:8047::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:08:28:73:1a:a9:6d:be:14:ed:aa:e2:82:84:90:3d:66:a2:34:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
        Validity
            Not Before: Mar 20 13:09:29 2024 GMT
            Not After : Mar 19 13:14:29 2025 GMT
        Subject: CN=4922CAA7550DD987E92D8DC06A0DE43358BE9068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:f3:f3:a9:d8:12:0c:e7:6d:01:db:72:47:
                    a9:45:77:d6:ac:90:f4:86:16:03:9f:f9:21:d3:60:
                    60:cd:2b:00:ee:18:2b:48:8b:ab:9e:3c:1b:53:43:
                    7b:fd:da:72:68:6e:14:ee:e2:42:56:d4:85:c4:c2:
                    00:e1:10:65:e1:fc:0a:6b:77:69:02:52:d3:86:6d:
                    ca:ea:fa:86:70:54:9e:1b:c3:8f:3f:3b:cd:dc:09:
                    f4:c6:ad:94:94:68:6d:26:21:a0:13:5b:35:5c:29:
                    55:b9:44:cd:23:75:e0:65:0c:68:63:8d:c6:35:54:
                    f7:cb:cc:fe:f7:51:53:74:f7:20:4e:f2:9b:d6:2a:
                    2b:2b:3f:c4:4e:ef:a7:15:f0:30:b0:6d:37:8f:d8:
                    67:ec:0f:d5:61:c8:69:9c:50:ff:ca:24:e0:fe:8e:
                    b0:ef:30:3b:79:6b:0d:33:99:8d:30:dc:50:1c:c9:
                    03:a8:9a:26:8b:6a:f5:d3:82:f0:16:12:07:44:02:
                    9b:76:f6:82:8e:7e:4a:d2:42:c6:64:05:9f:79:8a:
                    7c:55:e6:49:b3:40:39:02:aa:31:08:de:01:2d:26:
                    38:55:90:d4:4e:63:e0:86:0b:f1:13:2e:a7:9a:00:
                    d6:e8:90:b8:d2:cd:88:b9:5b:b5:bd:ec:43:ce:44:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:22:CA:A7:55:0D:D9:87:E9:2D:8D:C0:6A:0D:E4:33:58:BE:90:68
            X509v3 Authority Key Identifier:
                keyid:CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS203843/0/326131323a646434373a383034373a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8047::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:2a:f5:5d:69:44:5b:7c:50:28:8d:27:d5:5b:b9:fc:42:fd:
         0e:89:1b:31:81:04:d0:f6:24:40:f6:54:95:11:70:1d:c1:70:
         15:94:6c:ed:4e:ec:55:24:60:50:cd:ca:0c:1c:f5:bf:a1:e9:
         6f:15:53:4d:b2:f4:d0:b1:a0:ef:2e:46:78:f0:95:d7:c1:4e:
         1a:bc:7c:ef:45:cf:a2:69:4d:39:22:35:22:ea:ba:fd:7d:5d:
         4c:43:33:8d:92:bf:45:59:56:ba:1a:6f:cf:6f:87:59:a4:13:
         c1:ea:03:4c:77:d8:7d:8b:05:4b:6f:a2:3c:60:4c:9f:2a:16:
         46:f8:f2:b6:ed:79:62:65:0f:36:d4:ff:6a:d6:d5:cb:da:46:
         3f:b0:04:8c:68:85:1b:fb:df:ee:d5:09:54:c4:60:a1:0f:39:
         8c:6e:bf:5e:27:6c:94:c5:67:d7:ac:95:b6:4c:79:56:be:92:
         3c:e6:92:0a:78:66:ee:eb:ed:09:34:03:e0:49:fd:ed:8a:14:
         7b:ae:f7:e3:d1:85:16:35:80:30:ba:ce:e0:9b:cd:8c:44:13:
         5c:af:4b:e2:0a:5b:aa:b5:16:45:91:56:f5:f7:e6:4c:4b:1c:
         a5:27:90:38:b8:9a:a8:81:c2:f9:67:b0:19:8d:dc:9a:b2:48:
         76:0b:7b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----