Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199331.roa
File:                     AS199331.roa (raw, json)
Hash identifier:          +6Rr5GJI5PnYci7pJu/k04NfPqbduXS6589p5o+JCI0=
Subject key identifier:   2D:5D:FE:9C:F5:14:C7:C9:48:41:99:A2:75:09:F2:5D:49:9D:CD:9F
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       63ACCFC30A58F6A4855A77ED6B4453CA53D7A0BD
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199331.roa
Signing time:             Mon 10 Apr 2023 03:31:52 +0000
ROA not before:           Mon 10 Apr 2023 03:26:52 +0000
ROA not after:            Mon 08 Apr 2024 03:31:52 +0000
asID:                     199331
IP address blocks:        2a12:dd47:3100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ac:cf:c3:0a:58:f6:a4:85:5a:77:ed:6b:44:53:ca:53:d7:a0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:52 2023 GMT
            Not After : Apr  8 03:31:52 2024 GMT
        Subject: CN=2D5DFE9CF514C7C9484199A27509F25D499DCD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:71:22:4f:89:1a:a0:18:55:b3:2e:24:7e:
                    1c:fa:27:ca:ec:83:81:81:9a:e6:a9:85:29:b5:48:
                    56:cf:ed:88:bb:f4:76:a6:39:7d:2b:ca:4e:c1:87:
                    8c:3d:30:76:9e:6f:8e:6f:75:d6:66:94:41:16:2a:
                    6f:02:91:43:85:b1:e8:b6:49:cf:06:02:4f:c3:bb:
                    d4:93:62:2f:07:2e:e2:e8:6e:45:79:a3:18:be:d3:
                    91:3e:70:f3:40:ad:9a:d7:7b:c2:0d:4a:11:58:36:
                    4d:3c:7e:5e:e6:84:61:c8:ca:fa:d5:d3:69:86:32:
                    63:91:65:8f:8c:f2:b1:68:69:b4:c5:ba:f4:2b:b9:
                    ca:26:a5:2a:fa:73:f2:d4:54:80:ab:86:c7:7e:f1:
                    ac:62:d9:51:ab:9e:0a:88:39:95:55:74:32:d9:58:
                    ba:78:c2:fb:2f:20:84:a3:ff:78:f3:e4:60:53:c4:
                    6a:57:9d:0d:b5:d4:1e:66:49:96:8e:90:4b:fa:6c:
                    c2:cb:83:fa:19:69:9b:d4:03:d8:58:f2:c4:eb:db:
                    88:3f:64:a2:5f:9b:90:c9:6b:7e:f3:e2:fe:a3:3b:
                    b2:ff:b9:cb:8c:8c:38:29:af:d6:14:57:a0:c8:37:
                    96:fe:f8:af:36:80:d3:02:99:ab:2f:db:b0:9a:3b:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5D:FE:9C:F5:14:C7:C9:48:41:99:A2:75:09:F2:5D:49:9D:CD:9F
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:8c:c6:b8:76:28:8f:72:63:90:5d:27:5b:c7:ae:cb:d6:00:
         58:01:3c:95:53:a1:f8:8c:f7:1c:b3:35:5a:e2:f5:81:39:50:
         66:55:c3:95:de:d6:0c:e0:cc:ef:55:95:ad:ed:db:40:cc:61:
         db:73:44:6f:be:ff:61:7c:07:40:8f:3d:7d:d0:8d:d5:2c:f8:
         17:ca:14:11:fe:c9:cb:db:f6:73:a4:5e:54:24:37:ed:56:65:
         75:87:2c:42:dd:f9:84:ad:4d:f1:a5:5b:cf:94:dd:84:72:cc:
         25:3c:5d:31:a1:91:49:24:d2:9f:0d:45:23:1a:32:5e:51:2d:
         da:f3:30:5f:88:d5:6d:08:4e:1f:af:e6:2a:0d:e6:bd:66:c6:
         b4:04:e9:55:a4:d6:17:69:41:92:15:14:a4:48:ff:65:0f:ea:
         0c:c7:79:a5:bb:36:9a:5d:90:ea:dd:99:bf:9e:ed:0a:8e:c7:
         62:6f:70:5b:af:78:46:f3:7b:0d:bc:d6:01:18:90:ed:1b:27:
         18:a9:13:45:06:f9:f1:d4:40:a8:b6:62:dc:67:77:6e:19:94:
         0a:08:ad:24:af:17:cb:7f:76:cf:ce:2c:1c:19:a2:71:e7:f6:
         ce:c2:a2:7d:f8:c8:3b:43:bc:03:f4:2d:4a:32:be:ea:6d:df:
         6b:1a:7c:b6
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUY6zPwwpY9qSFWnfta0RTylPXoL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NTJaFw0yNDA0MDgwMzMxNTJaMDMxMTAvBgNV
BAMTKDJENURGRTlDRjUxNEM3Qzk0ODQxOTlBMjc1MDlGMjVENDk5RENEOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5J3EiT4kaoBhVsy4kfhz6J8rs
g4GBmuaphSm1SFbP7Yi79HamOX0ryk7Bh4w9MHaeb45vddZmlEEWKm8CkUOFsei2
Sc8GAk/Du9STYi8HLuLobkV5oxi+05E+cPNArZrXe8INShFYNk08fl7mhGHIyvrV
02mGMmORZY+M8rFoabTFuvQrucompSr6c/LUVICrhsd+8axi2VGrngqIOZVVdDLZ
WLp4wvsvIISj/3jz5GBTxGpXnQ211B5mSZaOkEv6bMLLg/oZaZvUA9hY8sTr24g/
ZKJfm5DJa37z4v6jO7L/ucuMjDgpr9YUV6DIN5b++K82gNMCmasv27CaO8rVAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQULV3+nPUUx8lIQZmidQnyXUmdzZ8wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMxOTkzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1HMTANBgkqhkiG9w0BAQsF
AAOCAQEAaIzGuHYoj3JjkF0nW8euy9YAWAE8lVOh+Iz3HLM1WuL1gTlQZlXDld7W
DODM71WVre3bQMxh23NEb77/YXwHQI89fdCN1Sz4F8oUEf7Jy9v2c6ReVCQ37VZl
dYcsQt35hK1N8aVbz5TdhHLMJTxdMaGRSSTSnw1FIxoyXlEt2vMwX4jVbQhOH6/m
Kg3mvWbGtATpVaTWF2lBkhUUpEj/ZQ/qDMd5pbs2ml2Q6t2Zv57tCo7HYm9wW694
RvN7DbzWARiQ7RsnGKkTRQb58dRAqLZi3Gd3bhmUCgitJK8Xy392z84sHBmicef2
zsKiffjIO0O8A/QtSjK+6m3faxp8tg==
-----END CERTIFICATE-----