Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201445.roa
File:                     AS201445.roa (raw, json)
Hash identifier:          Kbg2YEVG1I/WI5Y18OYoAo/ZNZp0IY/ZIu04Xmo+Rj0=
Subject key identifier:   8E:80:BE:A9:6D:9E:92:83:94:31:40:2E:CA:C1:D5:21:2B:E5:E8:AB
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       4F2D0F78B7AD3815D73A56A8D3134488686E322D
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201445.roa
Signing time:             Mon 10 Apr 2023 03:31:47 +0000
ROA not before:           Mon 10 Apr 2023 03:26:47 +0000
ROA not after:            Mon 08 Apr 2024 03:31:47 +0000
asID:                     201445
IP address blocks:        2a12:dd47:816f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2d:0f:78:b7:ad:38:15:d7:3a:56:a8:d3:13:44:88:68:6e:32:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:47 2023 GMT
            Not After : Apr  8 03:31:47 2024 GMT
        Subject: CN=8E80BEA96D9E92839431402ECAC1D5212BE5E8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:58:18:48:ec:f6:27:62:fa:82:8a:a0:6f:
                    83:a9:24:f4:b2:c5:b6:28:ee:fa:9d:4f:07:42:b5:
                    2e:dd:03:05:79:0a:80:e3:3b:0b:03:18:60:41:76:
                    f1:67:0b:fa:97:2c:6e:73:58:f1:be:7a:64:47:30:
                    c8:ff:65:ff:98:e6:70:bf:a4:e7:a5:a6:91:e9:e1:
                    98:90:59:61:c2:38:3d:b2:aa:b6:fb:05:7c:08:3b:
                    0f:5a:0a:1d:ef:42:b8:bb:60:68:f2:a7:a7:2b:bb:
                    f9:7f:79:7b:7f:23:b3:a8:3e:cb:83:f3:31:d3:dd:
                    ef:11:6c:bb:92:f9:16:f9:57:3f:6d:d4:c2:88:62:
                    c5:9c:10:0b:c9:60:d9:9e:b0:e2:d5:09:f8:91:f0:
                    03:cb:55:54:4c:e6:94:7a:7c:ac:3c:b6:a0:64:3b:
                    df:39:5f:42:00:f0:b2:a2:42:97:29:38:d0:f8:bf:
                    5a:64:48:f6:2e:e2:ba:06:6c:bf:c6:58:a7:7f:ca:
                    13:67:ef:5a:83:6b:f4:34:c0:91:1e:66:50:4c:8e:
                    5d:37:9e:1b:ed:d5:21:23:96:65:ef:a5:1b:70:35:
                    fe:55:27:7b:88:bc:1c:c9:c7:36:0e:c9:f9:13:a9:
                    16:ea:d3:41:68:b1:66:28:9b:61:05:5c:51:be:49:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:80:BE:A9:6D:9E:92:83:94:31:40:2E:CA:C1:D5:21:2B:E5:E8:AB
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816f::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:e4:ec:d9:5c:b1:c1:aa:b1:f7:c6:2e:75:8c:37:b9:bd:be:
         b3:47:40:9e:a9:20:b1:8c:a5:2d:fd:0b:67:94:b2:96:22:7f:
         d4:44:2a:3c:c9:ae:75:66:21:47:38:0d:3e:56:51:4d:be:b2:
         6f:49:82:de:ac:b0:76:92:19:06:cf:bc:99:b8:5c:44:01:28:
         b3:52:6c:4e:34:8b:da:4d:70:f8:ce:f7:c6:62:be:d8:63:f3:
         a3:37:28:e7:6f:25:ba:e9:98:16:7c:42:ab:1f:fa:d9:6e:57:
         fc:a4:b8:4f:40:fd:8b:dd:c3:43:91:c2:57:5a:61:47:3c:8d:
         2d:3c:dd:5b:b2:ca:fd:66:ee:d1:c1:33:2e:a2:2b:25:b6:2c:
         3e:1c:08:15:64:a8:dd:64:af:77:6b:6a:bf:3c:47:2c:41:22:
         42:5b:8e:fe:c5:39:a7:8c:76:5f:44:4a:be:05:4b:61:f1:73:
         aa:48:39:70:f0:fc:38:93:d9:fb:6d:70:ce:36:48:2c:04:78:
         e7:e5:43:7a:a3:28:f6:3b:b3:07:9e:5d:56:2d:eb:a3:0b:fe:
         d7:27:b2:60:d6:01:27:33:ab:3a:01:c9:6c:a7:10:80:b2:6f:
         d5:a7:39:08:ee:84:1c:90:84:8f:eb:17:09:ac:ba:7b:6a:12:
         9a:61:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----