Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430383a3a2f34382d3438203d3e20323136343732.roa
File:                     326131323a646434373a336430383a3a2f34382d3438203d3e20323136343732.roa (raw, json)
Hash identifier:          Ymh/dsADEXKJEqTR4Es/yAQ/OEFNQ2HT/3IRuMbSq7I=
Subject key identifier:   C5:17:0A:0B:0A:9B:FE:AA:F6:EA:DA:57:05:E5:21:6E:F2:EB:ED:CA
Certificate issuer:       /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial:       6CC049777FB68BB3F15CABF7026C19558E92D485
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access:    rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access:      rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430383a3a2f34382d3438203d3e20323136343732.roa
Signing time:             Mon 03 Jun 2024 02:02:34 +0000
ROA not before:           Mon 03 Jun 2024 01:57:34 +0000
ROA not after:            Mon 02 Jun 2025 02:02:34 +0000
asID:                     216472
IP address blocks:        2a12:dd47:3d08::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c0:49:77:7f:b6:8b:b3:f1:5c:ab:f7:02:6c:19:55:8e:92:d4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Validity
            Not Before: Jun  3 01:57:34 2024 GMT
            Not After : Jun  2 02:02:34 2025 GMT
        Subject: CN=C5170A0B0A9BFEAAF6EADA5705E5216EF2EBEDCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:64:ee:2f:43:ea:f9:c6:75:24:36:58:4a:
                    cf:7d:e4:b4:82:a0:4b:25:a5:ab:23:35:ff:90:56:
                    4a:56:f1:3c:f6:d4:7e:51:70:17:c6:e3:4f:00:cf:
                    ca:06:4e:28:76:1b:06:f7:f1:d3:d1:56:30:cf:b3:
                    60:fb:54:a6:90:06:6e:dd:41:09:35:ea:89:f1:af:
                    6a:bf:cd:fb:7f:9c:c8:25:2d:eb:b7:bd:c6:62:b0:
                    12:f2:85:ee:ad:1d:40:53:c3:7b:43:a5:f3:d6:1b:
                    9e:34:a0:75:2c:7b:69:08:0e:4c:86:6e:64:33:8c:
                    06:68:d9:26:c5:bb:ec:ae:42:0a:4c:1f:15:77:19:
                    97:b2:b6:a2:bf:53:96:15:30:49:79:1c:69:29:ac:
                    8b:af:b9:2a:19:0b:47:87:5d:d2:85:f4:d4:3e:6c:
                    c5:46:d2:83:33:2c:89:60:85:ae:5e:25:2f:cd:5c:
                    1b:a8:9f:88:fe:99:1c:b4:46:3a:69:12:6e:ec:88:
                    b3:4e:da:29:42:32:cc:4d:14:49:ed:2f:0c:96:63:
                    58:f1:4f:7f:44:4b:ed:66:ba:0c:7c:bc:be:e6:58:
                    7f:2f:d3:76:99:bd:75:2e:6f:d9:f8:e6:47:ab:b5:
                    01:25:b4:9a:77:5b:a3:26:99:b2:ca:a0:6f:f9:63:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:17:0A:0B:0A:9B:FE:AA:F6:EA:DA:57:05:E5:21:6E:F2:EB:ED:CA
            X509v3 Authority Key Identifier:
                keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430383a3a2f34382d3438203d3e20323136343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3d08::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:c2:79:42:61:a1:24:8a:e6:dd:2e:1e:ea:df:be:b2:21:8d:
         0e:69:8f:ad:5e:c2:71:f9:7c:b8:ca:7c:66:00:79:a7:97:38:
         22:2f:be:86:8a:b6:a7:0a:e8:27:bf:9b:54:4c:8b:a2:75:63:
         90:4d:77:15:8d:b1:90:93:34:e8:71:ae:5c:90:cb:ad:d2:ce:
         06:09:9e:c9:01:96:65:da:f8:bf:a8:6d:79:ac:16:06:60:c4:
         ed:93:8c:9b:c6:1f:b0:a9:03:02:37:b5:a2:fc:fa:d2:d2:65:
         f0:ef:84:fa:6d:ef:eb:60:39:04:10:07:c8:15:93:e0:3d:a1:
         de:f5:f3:a7:a7:1b:70:7c:45:de:cd:3a:2a:e2:7e:5a:9d:96:
         fd:eb:2c:5f:d2:7e:69:2d:38:10:13:8f:7b:b1:88:c5:fe:4f:
         7c:d3:b1:3e:d1:29:9a:e4:d1:77:d0:3c:4a:fe:9c:0e:e1:f8:
         fc:64:c6:1b:5e:83:de:8d:8f:61:97:c0:73:84:30:21:26:61:
         25:fe:21:8a:29:a1:51:2a:10:19:9e:80:67:7f:33:a4:fe:5f:
         b5:a3:12:d1:a6:16:39:b3:9c:62:a6:c3:ac:c6:6e:71:34:bd:
         aa:42:6d:6f:22:cd:5a:21:29:1a:1a:0a:cb:70:ad:f4:16:17:
         1a:bf:d1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----