Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS151338.roa
File:                     AS151338.roa (raw, json)
Hash identifier:          k9Z+bOUn7x4mAPRnyTOGmlpHk6nx4tFWbcznTcTTtD8=
Subject key identifier:   B0:BF:A4:41:34:2E:51:17:E1:FB:5F:7C:DA:88:BE:22:35:D5:D8:C3
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5E710D045BBE482A02D4FF20FB1E49BE0F8E061C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS151338.roa
Signing time:             Thu 18 May 2023 10:45:29 +0000
ROA not before:           Thu 18 May 2023 10:40:29 +0000
ROA not after:            Thu 16 May 2024 10:45:29 +0000
asID:                     151338
IP address blocks:        2a12:dd47:200::/40 maxlen: 48
                          2a12:dd47:8370::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:71:0d:04:5b:be:48:2a:02:d4:ff:20:fb:1e:49:be:0f:8e:06:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: May 18 10:40:29 2023 GMT
            Not After : May 16 10:45:29 2024 GMT
        Subject: CN=B0BFA441342E5117E1FB5F7CDA88BE2235D5D8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:98:04:52:e8:ee:7b:19:8f:ed:97:77:3d:
                    43:7a:94:a0:44:eb:a5:6a:27:83:de:63:dc:0f:c7:
                    03:cb:cf:f3:1e:44:c8:0a:e1:e1:eb:2f:71:c8:7b:
                    f4:08:70:2c:e6:8f:5a:26:12:36:c0:57:d1:87:e1:
                    7a:af:0e:7a:0b:b4:40:57:48:24:31:5f:dc:68:2b:
                    94:08:ec:a7:06:52:5f:a0:26:74:47:f6:f8:da:79:
                    8c:2c:5e:b9:da:7a:6d:e1:62:a4:87:a3:c0:14:67:
                    ab:f6:26:5a:4c:c0:b4:8c:1e:be:71:28:ea:5c:c3:
                    ca:84:75:fb:c1:d1:96:e7:eb:6c:93:96:3e:2d:00:
                    7a:04:67:de:ba:a4:31:02:1e:ee:b7:a6:ca:19:54:
                    ff:4b:2d:83:d1:a9:ae:9c:85:e4:61:23:38:dc:23:
                    60:01:69:8e:91:6d:95:96:53:8c:a0:28:30:b1:3b:
                    77:12:9c:4d:85:8e:6d:92:91:ea:d5:10:c3:9c:af:
                    3c:e6:c2:7e:40:48:7f:b9:ef:d7:15:fa:78:45:00:
                    56:71:c3:11:dc:5b:f8:a6:0e:2b:3d:fd:f0:7b:41:
                    26:88:9f:0b:21:a0:8e:24:48:7c:8b:2f:e7:84:c9:
                    6f:03:44:63:bd:1b:4e:7a:23:4a:9d:46:c7:b2:7b:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BF:A4:41:34:2E:51:17:E1:FB:5F:7C:DA:88:BE:22:35:D5:D8:C3
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS151338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:200::/40
                  2a12:dd47:8370::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:42:47:fe:2c:10:8b:be:bb:62:c5:37:39:ff:51:11:c5:04:
         cd:12:54:91:7a:b5:cf:f3:ed:ac:9e:49:6d:ac:d9:55:97:2e:
         a9:c5:55:b9:b2:74:58:e5:fd:6c:be:79:ec:1a:74:a8:a4:d4:
         92:2f:0d:32:ed:1f:bf:0e:96:54:f9:a5:c3:4e:44:d6:7d:ee:
         e5:c2:ff:ee:7a:e4:75:b1:f1:a9:80:d2:e6:67:0c:15:19:28:
         01:a4:68:39:21:73:26:5a:d6:8a:61:bd:b5:e3:0b:93:ea:e3:
         57:67:2b:cf:ff:93:c8:c7:24:c9:d4:3f:8c:9d:11:67:88:49:
         ed:ef:fe:99:99:a2:66:6c:06:5a:54:9c:26:2f:da:ee:40:1c:
         6b:bb:70:6d:d8:a2:e0:6b:59:c5:7c:47:10:f3:9b:0a:c9:d4:
         a2:00:5a:48:d5:fc:19:84:05:e9:63:c2:bc:5b:4d:a9:2f:e9:
         05:5d:b9:54:bc:95:b5:a8:12:94:44:b9:12:08:f7:71:57:1a:
         a6:f7:68:19:95:96:62:57:ed:2c:0b:89:8a:90:04:12:0b:ad:
         ed:0c:d2:fe:38:f3:df:eb:37:b1:14:78:ae:20:b3:38:31:b3:
         49:ee:78:4e:6a:c0:43:f2:bf:eb:46:4d:a5:a7:b0:9d:38:47:
         c6:6f:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----