Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          qc11G75Kh/YWOTf1IIvZzucMAJQ+Kw9Re1pIqHqULmc=
Subject key identifier:   12:B6:7E:C7:A6:D8:27:62:D0:09:53:3B:59:12:60:9A:8F:A6:FC:E5
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4A685BE8F82EFF3B763F938F37C8DC631105E525
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS16509.roa
Signing time:             Fri 14 Jul 2023 15:08:56 +0000
ROA not before:           Fri 14 Jul 2023 15:03:56 +0000
ROA not after:            Fri 12 Jul 2024 15:08:56 +0000
asID:                     16509
IP address blocks:        2a12:dd47:3c00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:68:5b:e8:f8:2e:ff:3b:76:3f:93:8f:37:c8:dc:63:11:05:e5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Jul 14 15:03:56 2023 GMT
            Not After : Jul 12 15:08:56 2024 GMT
        Subject: CN=12B67EC7A6D82762D009533B5912609A8FA6FCE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:ab:a3:8d:0d:32:92:1b:5f:a9:53:eb:19:
                    49:5a:ba:98:9f:42:13:3b:9b:6b:6e:88:97:0b:41:
                    f6:8e:09:aa:24:95:c8:4a:af:36:8f:cc:87:3d:f0:
                    89:c9:8a:75:00:54:8c:cc:69:c5:3f:dc:44:ea:e9:
                    3e:c2:2d:b4:48:da:81:31:d3:d8:b6:7c:88:bb:0d:
                    6c:70:32:2e:93:69:58:da:e3:47:c0:3d:b1:b5:74:
                    16:0e:45:62:70:1d:14:3f:7b:57:28:8d:70:e6:60:
                    24:cc:30:de:ae:db:37:3a:84:62:40:9d:b8:95:ef:
                    f6:44:59:0f:97:ff:8f:05:9a:a2:bf:96:12:a1:8e:
                    b2:6b:53:a2:45:f2:9e:2b:76:e0:f2:26:10:01:00:
                    5a:ea:1a:d5:21:0d:18:60:fd:dc:7b:70:a0:c3:6d:
                    19:d8:fa:3b:34:b3:94:5e:a9:14:0e:df:f8:b3:ee:
                    66:5d:b2:c6:62:3c:a2:ff:06:00:b4:c6:02:5d:b6:
                    74:26:00:12:0c:92:68:c3:2b:d8:7d:75:e8:24:97:
                    e5:79:db:79:dd:32:97:00:eb:b7:11:e3:f3:4c:8e:
                    74:9c:11:aa:92:94:fc:77:70:55:cc:46:cb:9c:d2:
                    02:a9:32:cb:b7:62:ca:77:61:73:52:62:26:00:dc:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B6:7E:C7:A6:D8:27:62:D0:09:53:3B:59:12:60:9A:8F:A6:FC:E5
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:24:e7:fd:15:b6:d1:71:3f:4a:06:47:6e:54:e7:5d:9e:db:
         5b:23:ce:c4:9a:34:8f:23:50:a8:77:1b:2e:a6:9d:59:f5:33:
         51:a0:6b:27:f4:b0:70:74:9d:49:84:3b:a2:fa:90:83:15:3e:
         d7:e0:09:27:77:c4:c1:8b:77:5e:fb:c8:89:57:f3:0f:c0:f8:
         f1:8e:1c:dd:96:da:0c:de:04:02:6b:dc:94:58:b3:15:5c:4b:
         c7:24:5c:b2:73:c6:9b:05:17:e3:fe:a4:27:a9:04:97:29:d5:
         da:bd:cf:cf:86:b1:6e:dd:80:3f:ae:27:ab:3b:a6:f0:7d:b2:
         9c:12:a8:36:6f:91:e4:36:65:0f:90:25:6a:f0:66:03:e1:47:
         e1:e2:ce:7f:ed:d4:5a:6f:6f:8b:0a:81:31:05:45:2b:0d:b9:
         c8:7c:e3:6b:ed:0a:31:e5:a6:b1:ec:a3:a9:8e:47:66:32:9e:
         93:95:32:67:a0:82:1a:01:f7:cb:2e:68:99:e1:a2:11:92:44:
         87:c5:e5:60:58:f0:8c:bf:00:32:86:94:b3:57:25:88:c1:4c:
         18:4e:29:59:a4:58:68:97:95:88:20:53:18:a6:00:26:df:6f:
         d4:99:d2:55:28:30:41:43:73:ea:23:38:1b:31:96:f9:48:26:
         23:fd:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----