Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201257.roa
File:                     AS201257.roa (raw, json)
Hash identifier:          q/1CNVxWk6t0NlPe1uHVnMCEXRlLctnJnIe/fulwXww=
Subject key identifier:   C8:CD:60:D4:7E:A3:FE:B5:66:3C:A4:DF:41:75:6E:55:9D:8C:4B:CC
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       063619308D13ABAD8D667036B1C80B726DB071D0
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201257.roa
Signing time:             Mon 10 Apr 2023 03:31:32 +0000
ROA not before:           Mon 10 Apr 2023 03:26:32 +0000
ROA not after:            Mon 08 Apr 2024 03:31:32 +0000
asID:                     201257
IP address blocks:        2a12:dd47:80e2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:36:19:30:8d:13:ab:ad:8d:66:70:36:b1:c8:0b:72:6d:b0:71:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:32 2023 GMT
            Not After : Apr  8 03:31:32 2024 GMT
        Subject: CN=C8CD60D47EA3FEB5663CA4DF41756E559D8C4BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:34:32:56:0a:f2:78:cd:6f:06:ba:89:02:
                    a0:b4:59:06:fd:6d:3f:d7:8e:7d:1b:ec:fb:f0:49:
                    6b:2a:a0:1c:95:d3:9a:f8:95:ad:c1:26:64:26:d7:
                    69:71:f3:16:1c:16:20:91:00:c9:ac:dd:60:84:ed:
                    20:39:06:84:35:ea:6b:b6:cd:b7:5f:a6:d7:04:a6:
                    26:3d:2d:c9:1f:90:3f:7b:ed:b1:ba:4e:16:46:d4:
                    d6:fc:99:d9:76:6b:06:f0:5e:e2:a4:d5:4f:11:5c:
                    2f:38:92:e4:e6:32:1d:7f:02:5e:0d:c1:e5:ba:32:
                    b8:e6:bd:83:f7:f9:f5:36:fe:7d:28:bd:6c:29:8a:
                    c2:f1:7a:c0:00:20:ff:75:e9:b9:48:ca:ef:b3:39:
                    22:6f:23:85:09:cf:a4:35:a9:dc:19:40:84:a4:d9:
                    7c:1c:9d:62:49:35:bb:b9:0b:1a:24:c3:17:98:46:
                    92:b5:b7:44:0b:30:b6:b3:b2:e9:08:e5:0a:24:d8:
                    cc:14:43:2c:8e:13:32:8a:2d:6e:c1:9f:e8:44:ed:
                    21:6a:80:c6:cd:b7:e5:22:e9:72:8e:5f:78:05:3b:
                    84:f7:09:a8:72:fe:1e:6b:4c:b1:68:e5:d3:39:6b:
                    62:90:f8:48:c1:72:a7:fc:f3:79:41:71:d5:aa:dc:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CD:60:D4:7E:A3:FE:B5:66:3C:A4:DF:41:75:6E:55:9D:8C:4B:CC
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e2::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:5a:63:80:13:fd:80:b6:20:38:4e:dd:46:f3:bc:9c:6f:57:
         de:6c:31:ac:43:9d:66:c6:9c:32:46:6e:46:f9:ee:8a:9e:1c:
         b4:81:f4:d6:16:89:a1:f0:b0:02:28:b4:f7:22:95:68:88:05:
         ee:f2:ec:8f:63:85:d2:f0:b5:32:24:e7:86:97:90:d6:38:5d:
         38:b1:06:00:07:50:0a:79:81:5e:71:bb:8f:ce:7c:ca:2d:e0:
         00:5d:8a:2b:13:c8:c0:91:4b:b1:05:eb:b3:71:a7:fa:5d:36:
         e0:f3:b0:b5:ee:77:18:63:b6:98:fd:aa:63:60:d7:1b:ad:8e:
         9d:01:c6:17:74:d6:bb:ec:ea:04:20:95:6c:9e:34:41:71:45:
         8f:0b:1c:fd:2d:a6:42:87:89:3e:0f:04:58:19:7f:00:57:41:
         f8:c2:01:3f:07:8b:ff:20:6a:9d:33:62:62:3b:08:95:86:03:
         7a:05:c9:4e:7b:52:76:75:23:4c:3d:19:10:b5:aa:3e:1b:b5:
         8a:9a:d9:ac:1d:4a:07:33:5e:31:41:7a:e6:e0:06:fa:2d:8b:
         15:cf:ce:16:d0:aa:a9:09:e1:46:53:e6:46:3b:86:19:4d:ab:
         15:cb:c3:65:38:1b:2b:23:89:54:e9:5d:18:e8:ab:2b:5f:72:
         03:0c:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----