Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199582.roa
File:                     AS199582.roa (raw, json)
Hash identifier:          Bz5cSpeq0Su26fRVayLtejPuDEY/9zvs8j0xEtsb+cs=
Subject key identifier:   5C:FE:19:78:4B:9B:70:AB:58:AF:0C:52:75:61:6B:1B:69:98:24:CE
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       7FF38D95A551A156720F5AFAFC4164B49C422139
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199582.roa
Signing time:             Mon 10 Apr 2023 03:31:45 +0000
ROA not before:           Mon 10 Apr 2023 03:26:45 +0000
ROA not after:            Mon 08 Apr 2024 03:31:45 +0000
asID:                     199582
IP address blocks:        2a12:dd47:80e6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f3:8d:95:a5:51:a1:56:72:0f:5a:fa:fc:41:64:b4:9c:42:21:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:45 2023 GMT
            Not After : Apr  8 03:31:45 2024 GMT
        Subject: CN=5CFE19784B9B70AB58AF0C5275616B1B699824CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:64:8a:4b:4f:a9:97:f2:e3:ea:a7:57:82:
                    b1:9b:0c:56:23:52:c2:27:d4:f5:2b:96:df:07:ce:
                    03:8d:9d:5d:de:44:80:da:62:57:16:d4:60:7b:a6:
                    63:00:d0:94:f9:d4:96:fb:2f:09:fc:ed:68:0b:f4:
                    cb:31:f9:5c:37:d2:ea:91:f3:cf:b2:7b:fe:20:d9:
                    5f:2b:a0:39:a4:f2:a6:3c:4f:91:9b:dd:9b:38:58:
                    2e:74:4a:5a:87:d9:b1:8f:6f:27:d5:84:c3:59:ac:
                    b3:40:91:90:04:a1:a4:d7:1b:6d:b9:eb:18:6e:b1:
                    08:d4:6a:bf:12:ba:13:d3:02:fa:ec:27:a1:9c:15:
                    76:3c:0c:fc:a1:0d:20:11:81:c2:dd:46:a9:be:c4:
                    92:72:c4:4d:13:d2:5e:36:05:75:3f:8f:8e:77:8d:
                    10:b7:c9:36:b3:2f:f6:a4:e2:4c:9b:2d:05:5e:6b:
                    77:3c:c7:39:48:3d:ea:12:42:61:2c:67:34:6a:fa:
                    cc:df:d9:c5:df:32:b0:5c:51:a3:2e:59:78:c0:f1:
                    74:80:c3:52:82:a4:e5:e4:b8:28:f4:d1:ca:c5:2e:
                    31:f9:89:69:36:f6:e0:2d:4d:a9:29:0b:c4:ef:b4:
                    d1:ae:a9:ff:04:29:b7:fd:05:c7:2d:c8:19:5c:b0:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FE:19:78:4B:9B:70:AB:58:AF:0C:52:75:61:6B:1B:69:98:24:CE
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199582.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e6::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:4a:21:56:7f:c0:52:22:6c:64:1f:7f:c4:19:d8:67:df:ec:
         d5:da:49:d1:f2:cc:72:ae:75:23:fd:c3:c2:de:d0:b7:89:5b:
         f1:c8:ad:f0:14:fb:6f:4e:8c:b9:60:1d:82:c0:68:16:b1:bc:
         00:15:69:ba:d2:f9:ef:fc:2b:43:28:e6:98:89:4e:eb:9d:bb:
         b7:36:ad:ed:03:6a:5a:40:90:be:25:ad:59:f3:a1:27:2b:ab:
         a8:30:1e:ba:c5:25:ea:1c:71:c3:8f:c5:c1:8d:a2:c7:18:86:
         80:b8:7f:3e:2a:ce:12:08:c8:de:38:68:a8:49:bd:d9:1a:15:
         c7:2a:6c:d4:8f:21:f1:80:ba:ac:7e:3d:bb:4f:7b:35:11:b6:
         f3:8a:67:c8:ef:fe:0f:12:7d:90:2d:38:79:69:bd:ad:69:e5:
         e9:a3:41:f6:fd:b9:ec:af:6d:24:0f:53:8a:69:03:4d:35:21:
         59:ad:ef:c8:53:9d:42:93:e4:bc:f2:b7:86:2b:38:e5:e1:c3:
         40:45:21:c6:fa:d0:f9:75:f8:38:d4:82:a7:26:58:9b:5b:c3:
         04:7a:2d:cb:07:c4:3f:aa:0b:13:b8:a2:5d:9e:41:69:c6:42:
         51:c8:9c:ca:0e:4e:81:0e:be:0a:5c:4e:4e:a0:d0:16:d4:e6:
         cb:4a:aa:1e
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUf/ONlaVRoVZyD1r6/EFktJxCITkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NDVaFw0yNDA0MDgwMzMxNDVaMDMxMTAvBgNV
BAMTKDVDRkUxOTc4NEI5QjcwQUI1OEFGMEM1Mjc1NjE2QjFCNjk5ODI0Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJmSKS0+pl/Lj6qdXgrGbDFYj
UsIn1PUrlt8HzgONnV3eRIDaYlcW1GB7pmMA0JT51Jb7Lwn87WgL9Msx+Vw30uqR
88+ye/4g2V8roDmk8qY8T5Gb3Zs4WC50SlqH2bGPbyfVhMNZrLNAkZAEoaTXG225
6xhusQjUar8SuhPTAvrsJ6GcFXY8DPyhDSARgcLdRqm+xJJyxE0T0l42BXU/j453
jRC3yTazL/ak4kybLQVea3c8xzlIPeoSQmEsZzRq+szf2cXfMrBcUaMuWXjA8XSA
w1KCpOXkuCj00crFLjH5iWk29uAtTakpC8TvtNGuqf8EKbf9BcctyBlcsBQTAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUXP4ZeEubcKtYrwxSdWFrG2mYJM4wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMxOTk1ODIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgOYwDQYJKoZIhvcNAQEL
BQADggEBABBKIVZ/wFIibGQff8QZ2Gff7NXaSdHyzHKudSP9w8Le0LeJW/HIrfAU
+29OjLlgHYLAaBaxvAAVabrS+e/8K0Mo5piJTuudu7c2re0DalpAkL4lrVnzoScr
q6gwHrrFJeocccOPxcGNoscYhoC4fz4qzhIIyN44aKhJvdkaFccqbNSPIfGAuqx+
PbtPezURtvOKZ8jv/g8SfZAtOHlpva1p5emjQfb9ueyvbSQPU4ppA001IVmt78hT
nUKT5Lzyt4YrOOXhw0BFIcb60Pl1+DjUgqcmWJtbwwR6LcsHxD+qCxO4ol2eQWnG
QlHInMoOToEOvgpcTk6g0BbU5stKqh4=
-----END CERTIFICATE-----