Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa
File:                     326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier:          KfjEnOqLxlmHC0rtFNfQrNj9q2ihrHR8t9My+xjgGzI=
Subject key identifier:   8A:F7:B7:20:FA:24:65:B8:27:D8:A7:48:C3:72:D0:71:D3:CB:E9:F9
Certificate issuer:       /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial:       1FF3FB6BD577970ACE9B89BF1D7018DA952FE6BA
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access:    rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access:      rsync://rpki.co/repo/AS211604/1/326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa
Signing time:             Mon 18 Mar 2024 01:14:25 +0000
ROA not before:           Mon 18 Mar 2024 01:09:25 +0000
ROA not after:            Mon 17 Mar 2025 01:14:25 +0000
asID:                     211604
IP address blocks:        2a12:dd47:3daa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f3:fb:6b:d5:77:97:0a:ce:9b:89:bf:1d:70:18:da:95:2f:e6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Validity
            Not Before: Mar 18 01:09:25 2024 GMT
            Not After : Mar 17 01:14:25 2025 GMT
        Subject: CN=8AF7B720FA2465B827D8A748C372D071D3CBE9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:b1:f8:07:cb:32:ab:e6:53:56:37:f3:13:
                    66:ba:1f:f4:8e:b5:f7:9a:7c:3a:d0:a4:98:01:7e:
                    39:ce:b0:45:35:09:78:af:61:ac:73:bf:2f:02:66:
                    a0:5f:54:cd:30:c7:75:21:37:d5:d7:c5:55:53:a0:
                    20:da:cc:72:46:30:81:c6:7e:06:d6:29:80:30:75:
                    7e:3f:b7:94:71:00:ee:69:86:b6:bc:76:d1:23:e3:
                    d9:52:72:30:2c:18:a4:56:1c:e2:cf:a5:c9:bf:b2:
                    06:a9:59:35:29:38:56:18:d4:8a:22:fd:85:82:94:
                    b8:58:30:a3:b2:36:a7:9d:34:92:d7:bb:23:8f:e5:
                    25:6c:c5:c9:b9:df:22:4c:58:5b:40:ea:34:5d:cd:
                    bf:9a:fa:cb:10:e2:26:c2:c7:fe:2d:3b:5f:f9:aa:
                    50:5e:93:09:15:54:c0:ec:64:aa:ec:16:69:39:d1:
                    b3:ca:99:d9:10:99:88:cc:28:81:7d:02:65:df:ca:
                    bf:62:cd:1b:34:91:77:a2:06:3d:8f:fc:a1:78:6b:
                    ed:07:67:a2:cd:25:47:47:70:16:6f:3d:f5:6f:44:
                    9d:ad:45:ef:8c:e0:50:07:1e:a8:d8:ae:ab:49:4e:
                    37:6a:66:fd:fe:6a:32:67:4a:cf:79:36:02:6e:73:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F7:B7:20:FA:24:65:B8:27:D8:A7:48:C3:72:D0:71:D3:CB:E9:F9
            X509v3 Authority Key Identifier:
                keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336461613a3a2f34382d3438203d3e20323131363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3daa::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:ae:e6:cd:a8:d5:42:2c:e6:e4:50:a4:c7:65:ef:77:5b:80:
         5e:2b:a5:a7:94:49:b8:9f:ff:9b:d1:c3:12:31:10:26:2f:ea:
         f7:a0:1a:85:f1:41:de:38:97:1b:8f:47:e2:2c:25:a9:4d:69:
         75:76:6f:b1:07:34:e3:c5:1b:8c:3e:a6:93:8d:2f:59:e3:66:
         9b:7f:7e:f8:44:8b:96:a4:e6:86:48:8d:86:1b:d9:5b:ea:76:
         9f:aa:0f:ea:a4:ae:7e:b0:fa:95:b0:74:f1:e2:9d:4b:27:60:
         75:14:ce:9e:43:4f:ae:41:73:c6:40:e9:9d:3e:4e:58:69:62:
         67:bf:66:5d:11:37:29:d5:ab:e4:86:3c:53:83:83:00:1d:5a:
         73:aa:14:57:9b:05:bb:13:fa:96:ba:2d:fd:9f:00:0c:6f:bc:
         0e:79:f9:18:4b:d2:07:04:9c:e7:06:4e:a8:e3:13:55:c4:fc:
         6c:b1:77:7d:50:ca:4d:08:33:ff:25:2f:ec:7c:31:7c:1b:98:
         72:33:b2:fa:fa:44:26:91:78:c2:01:79:c7:0c:a5:5c:79:cd:
         a1:0f:b8:18:a5:aa:e1:06:a2:3c:e7:4a:e1:b8:4a:28:b1:7b:
         6d:46:e2:e9:6e:90:78:da:15:05:bc:ed:26:67:df:91:b0:ad:
         d6:23:4e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----