Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199683.roa
File:                     AS199683.roa (raw, json)
Hash identifier:          G2y6J4EwUOH9NEbnw6EL/QWHHq5h0kdLT6ALUmmENEA=
Subject key identifier:   DB:A0:D9:AA:8C:FB:C0:AF:2F:64:47:74:FF:6E:D3:46:A5:9A:30:93
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       66EFBAD3DE7C4BA616C9E6DC17B7606ED974BBC0
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199683.roa
Signing time:             Mon 10 Apr 2023 03:31:36 +0000
ROA not before:           Mon 10 Apr 2023 03:26:36 +0000
ROA not after:            Mon 08 Apr 2024 03:31:36 +0000
asID:                     199683
IP address blocks:        2a12:dd47:8ef0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ef:ba:d3:de:7c:4b:a6:16:c9:e6:dc:17:b7:60:6e:d9:74:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:36 2023 GMT
            Not After : Apr  8 03:31:36 2024 GMT
        Subject: CN=DBA0D9AA8CFBC0AF2F644774FF6ED346A59A3093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:4b:6a:7e:3f:fb:0b:f4:51:61:c8:69:8d:
                    c9:78:91:bb:85:88:85:22:a7:99:8b:87:25:82:75:
                    ca:b4:9e:c2:c4:9f:45:23:b3:4b:84:d5:5a:8e:74:
                    4a:6c:8b:05:de:1f:fc:8e:97:83:26:27:37:4c:b8:
                    2f:8e:9a:58:c6:ca:0f:69:7f:4a:82:2f:d6:6d:1b:
                    ab:7a:38:f6:fd:58:3f:2c:9c:3d:ab:d3:98:4a:7b:
                    a8:a1:a1:3c:9b:69:9e:8e:b1:d4:ed:6e:08:4b:2d:
                    27:f1:3d:96:57:15:22:d1:22:f8:eb:41:c5:b4:8d:
                    7f:72:fa:5a:50:c0:7e:6c:0a:ac:9e:fd:9f:56:0c:
                    9b:f2:d5:39:94:6f:04:5c:88:a0:c5:a5:98:40:8d:
                    be:4d:87:46:6a:0c:c1:09:b3:b3:a5:67:fd:4c:75:
                    ae:6d:bd:c3:31:0a:32:68:31:ae:a9:4e:e9:6f:24:
                    32:31:b9:e4:70:34:42:53:82:6a:67:4d:8d:71:05:
                    b7:fc:35:74:3c:e0:4a:19:40:b5:10:ec:9b:bb:64:
                    7e:8d:b6:7f:88:d6:31:12:75:69:09:65:b2:d4:91:
                    45:1f:ae:27:94:51:3d:cc:77:90:86:bb:7d:ff:aa:
                    7d:2f:67:a6:aa:6a:18:dc:01:fd:7a:4f:4f:8f:26:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A0:D9:AA:8C:FB:C0:AF:2F:64:47:74:FF:6E:D3:46:A5:9A:30:93
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199683.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ef0::/44

    Signature Algorithm: sha256WithRSAEncryption
         bc:1c:96:4e:2e:61:84:8d:58:ae:40:34:1a:fb:03:a3:57:f1:
         78:32:88:2c:e2:3e:50:e2:23:eb:52:87:37:e4:30:88:b7:81:
         27:7c:43:98:2d:75:cc:19:40:cd:dd:dc:90:68:4f:0b:ab:64:
         57:37:83:ce:38:ff:0c:35:b5:e0:43:94:f6:22:09:e8:9d:26:
         ce:fd:94:10:21:4f:39:f2:de:2f:87:7f:ae:f2:1e:f0:af:6e:
         8c:1e:b7:52:39:f5:5b:4d:91:e3:da:2f:98:1f:3a:df:2e:84:
         be:01:fc:49:91:82:77:37:cf:c3:41:2c:b1:6e:ef:de:b7:dc:
         46:53:ce:5c:82:fb:e8:cf:68:08:21:0c:91:2c:53:56:7a:c7:
         ec:68:e1:9d:8e:95:3d:6b:a9:30:18:62:f6:ff:36:33:e4:be:
         a2:0b:aa:dd:57:2b:05:8e:19:bf:55:26:5e:17:b5:bb:75:3e:
         46:57:41:40:39:ce:02:0d:b5:a2:5c:72:c8:98:32:8a:30:22:
         3b:6c:8f:d4:45:8d:17:81:98:88:15:31:55:66:e8:83:db:70:
         23:9b:b2:1c:cd:cd:59:ec:c7:2d:0b:27:ce:99:d0:72:57:cd:
         dc:1b:47:d0:a5:e3:ee:b7:da:0d:e6:b5:6f:78:d7:70:a6:ac:
         e8:ff:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----