Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199679.roa
File:                     AS199679.roa (raw, json)
Hash identifier:          HjMCkzw2+YWYghQEaOHLRc458nuPF7WZk2IxGsuEI4U=
Subject key identifier:   8B:C1:84:03:C6:D9:EA:D6:26:ED:F6:2B:A6:8E:19:E1:95:D9:5D:E8
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4D3B968F7FB0E0715F2F7942D01F852DBC1587C6
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199679.roa
Signing time:             Wed 17 May 2023 00:34:10 +0000
ROA not before:           Wed 17 May 2023 00:29:10 +0000
ROA not after:            Wed 15 May 2024 00:34:10 +0000
asID:                     199679
IP address blocks:        2a12:dd47:400::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3b:96:8f:7f:b0:e0:71:5f:2f:79:42:d0:1f:85:2d:bc:15:87:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: May 17 00:29:10 2023 GMT
            Not After : May 15 00:34:10 2024 GMT
        Subject: CN=8BC18403C6D9EAD626EDF62BA68E19E195D95DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:9a:fe:0c:cb:3a:4c:93:f8:fe:6e:64:47:
                    ff:1b:41:db:e0:37:73:57:80:7f:fd:67:26:3c:b6:
                    2c:12:e8:29:12:a6:33:e7:63:fc:b4:f1:6a:27:d0:
                    2b:dc:8a:7f:65:9b:5e:ee:03:46:6b:c4:e5:15:57:
                    04:e6:7d:7e:9b:46:02:8b:c3:a5:3e:a7:c5:86:31:
                    8c:fb:86:27:94:98:9c:0f:07:e6:08:2a:99:84:b8:
                    f4:5c:12:66:57:ee:79:db:43:5d:2b:d1:23:02:99:
                    3d:41:ec:35:27:81:a1:a9:f1:79:00:b0:2e:89:71:
                    51:42:ae:8b:69:c6:17:0c:3e:3f:14:b9:28:5c:09:
                    0b:67:7a:f5:be:a5:ac:a6:3d:cd:a7:de:4c:08:aa:
                    aa:74:5b:d5:56:b1:d3:f6:35:41:8d:e4:d4:b0:ca:
                    87:18:04:72:91:81:5a:7a:92:0b:d8:f3:e5:24:68:
                    cc:d3:e1:1d:e4:cc:dc:7d:50:38:85:45:1e:ba:89:
                    04:fd:be:18:e2:d7:51:93:b1:32:e3:6c:00:8d:0a:
                    b3:cc:35:f6:c1:a2:a7:39:01:56:5f:65:38:72:ed:
                    6a:f7:5e:2a:3a:49:70:e4:7d:57:0a:40:87:ac:a8:
                    6c:95:6f:28:eb:70:09:2e:5c:52:5a:ae:08:35:d7:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C1:84:03:C6:D9:EA:D6:26:ED:F6:2B:A6:8E:19:E1:95:D9:5D:E8
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199679.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:400::/39

    Signature Algorithm: sha256WithRSAEncryption
         b5:fb:8d:30:14:63:19:01:ed:8a:a6:89:0d:0c:54:02:a3:bb:
         00:e3:45:df:6b:2d:dd:01:cb:d3:a7:a3:3c:4f:35:26:d5:d1:
         a4:a1:d7:92:2f:23:1a:04:89:e0:f3:ed:e5:d0:2d:aa:3c:c6:
         9a:e0:ad:61:4b:21:f2:b7:0b:b9:ba:90:55:d0:dc:29:4b:64:
         00:c7:18:4f:3c:34:18:f4:2b:a1:3c:a5:0c:36:26:66:4e:d7:
         ec:a0:88:49:b2:df:b7:0c:8c:c1:0c:d7:0d:08:8e:75:c9:a8:
         59:64:70:03:b8:be:77:ef:fe:d2:74:92:5d:d7:62:53:34:e9:
         76:6e:63:a9:89:9d:a5:c3:1f:b3:6d:d9:f1:b6:da:af:cd:6b:
         12:b4:37:54:6b:60:c2:11:07:58:0b:29:98:6b:18:09:b5:4b:
         d7:4f:ab:16:b0:b7:f0:91:79:05:56:8e:ff:5e:69:26:56:bc:
         b0:1d:28:d0:de:6e:62:d1:d6:50:e0:00:fe:84:04:5e:31:d9:
         b5:51:29:68:d3:a1:f1:16:a2:08:e2:0e:83:3e:9e:f4:03:62:
         8c:34:bb:d9:41:7e:1b:01:16:ca:9c:fe:e8:b1:75:34:2a:14:
         99:0f:0e:24:37:ce:c1:31:e8:5d:d0:4b:a9:bf:a1:40:ba:18:
         b0:b8:83:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----