Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS197609.roa
File:                     AS197609.roa (raw, json)
Hash identifier:          AZwUS1zZz72pnhQapqFIH8iv5Ffm/weFBwylCGj02d8=
Subject key identifier:   7A:E0:1A:50:E3:17:6C:6B:7B:86:7F:F0:C8:CC:9B:F8:BC:DC:13:03
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       71694A18D4E5177A29A585915E74CDBB47C20D42
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS197609.roa
Signing time:             Fri 28 Jul 2023 01:24:07 +0000
ROA not before:           Fri 28 Jul 2023 01:19:07 +0000
ROA not after:            Fri 26 Jul 2024 01:24:07 +0000
asID:                     197609
IP address blocks:        2a12:dd47:100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:69:4a:18:d4:e5:17:7a:29:a5:85:91:5e:74:cd:bb:47:c2:0d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Jul 28 01:19:07 2023 GMT
            Not After : Jul 26 01:24:07 2024 GMT
        Subject: CN=7AE01A50E3176C6B7B867FF0C8CC9BF8BCDC1303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:b9:96:d2:ed:a3:9b:a9:75:fe:7c:04:37:
                    43:51:4b:d0:8c:92:87:f1:42:28:8f:89:1d:86:ab:
                    93:cc:ea:ac:21:74:c2:55:7a:82:b1:89:6e:96:a7:
                    b7:ba:56:87:8f:02:04:8b:aa:99:04:82:27:c3:dd:
                    ea:10:15:1b:92:d5:38:d2:0c:4d:02:99:19:d9:b7:
                    ae:1a:82:79:cb:78:38:88:80:8e:46:9d:9a:a1:62:
                    e3:36:50:be:1b:8c:db:0c:a5:9a:a7:f6:3d:6c:50:
                    58:36:2c:c5:47:cb:db:5b:59:54:0b:fa:ed:09:ef:
                    11:0a:83:bf:85:eb:a1:55:38:76:38:17:5f:15:10:
                    7c:52:b1:97:93:8a:08:67:ae:39:6d:8c:d1:17:6e:
                    6e:a7:52:b7:b7:9c:64:ff:ce:65:8b:24:8d:51:77:
                    08:49:ea:4a:01:ba:66:e7:46:6a:61:a9:99:d9:89:
                    f0:80:76:bf:fd:e5:a3:9a:26:07:00:1a:49:46:70:
                    8a:19:99:13:35:dd:3d:69:6f:25:4d:e8:f8:c0:f2:
                    47:9a:74:b3:62:63:70:62:ac:62:a9:ac:aa:70:28:
                    97:d1:33:2c:4f:80:a5:5a:0b:c2:86:52:91:bd:47:
                    a1:ab:8e:04:50:ad:8f:36:c7:26:eb:ad:a5:08:07:
                    99:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:1A:50:E3:17:6C:6B:7B:86:7F:F0:C8:CC:9B:F8:BC:DC:13:03
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS197609.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:7e:82:d3:5f:6b:9b:47:64:10:7c:54:93:dd:22:62:84:e0:
         b3:a3:71:15:21:04:b3:b4:28:71:ec:6a:03:8c:97:81:73:f2:
         7a:9a:73:16:dc:31:58:1f:d2:d7:b4:2a:90:ba:ef:8d:7c:b7:
         fd:26:f1:20:dc:57:37:01:ea:eb:b8:86:14:5e:fe:be:2d:9c:
         b4:2a:b1:c3:d3:a5:e8:13:14:f7:0e:f9:a8:06:38:f8:bd:e6:
         df:af:a1:bb:a2:81:93:ff:70:8f:c2:84:1f:4d:98:ba:ed:c9:
         64:52:9e:72:f8:5a:6b:6e:c5:d0:9e:68:a1:8d:cf:12:6d:2e:
         c2:41:ca:c1:9b:a2:95:a4:6d:1a:e2:2b:ad:0f:b8:89:4b:c0:
         40:91:d6:d7:9c:43:74:58:df:e9:97:d3:11:69:68:89:f5:ba:
         9a:86:b9:3d:49:fa:08:ae:bb:65:d9:a5:5e:9b:02:6a:a1:d5:
         27:3c:b8:21:e6:7b:85:c3:47:ac:c2:0d:52:f4:79:66:0b:02:
         3f:73:b2:9e:7f:25:9b:dc:20:51:73:71:02:93:1f:a1:c5:b4:
         61:62:c3:a3:c3:a9:19:d3:17:02:f8:54:d2:9f:f9:34:6d:50:
         55:8b:8e:af:cb:99:89:5b:27:92:b5:5b:e4:1b:1c:7d:85:c7:
         a3:ff:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----