Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201938.roa
File:                     AS201938.roa (raw, json)
Hash identifier:          iBdVpsN34poUBhbXrnwEuHz5SdAeusU5XNfMi4bppWA=
Subject key identifier:   28:C7:C3:01:4C:0C:18:6A:4A:19:22:E3:0E:50:91:84:25:81:C7:33
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       62F0207AC9C7D5A1B601EFF946BFDA7445646C4A
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201938.roa
Signing time:             Sun 07 May 2023 04:30:32 +0000
ROA not before:           Sun 07 May 2023 04:25:32 +0000
ROA not after:            Sun 05 May 2024 04:30:32 +0000
asID:                     201938
IP address blocks:        2a12:dd47:8e50::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f0:20:7a:c9:c7:d5:a1:b6:01:ef:f9:46:bf:da:74:45:64:6c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: May  7 04:25:32 2023 GMT
            Not After : May  5 04:30:32 2024 GMT
        Subject: CN=28C7C3014C0C186A4A1922E30E5091842581C733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:cd:aa:20:8c:f7:47:05:e0:c0:1a:f4:3a:
                    3a:71:0a:a5:80:09:66:98:68:bb:a1:54:d3:9b:db:
                    c6:62:1d:83:63:60:76:d2:2e:30:98:71:d6:b1:b4:
                    64:12:8e:37:9a:e8:cb:f4:3c:8d:e4:4e:96:2a:ec:
                    58:91:ba:d6:a0:d1:5c:54:c6:f5:10:6c:0e:73:c6:
                    7d:59:de:dc:ed:52:23:cb:25:b2:1e:a9:55:04:05:
                    34:b0:42:82:6c:92:b7:82:a6:67:29:a9:f0:a9:b5:
                    2c:70:a1:62:c1:5f:4c:1c:71:85:a5:a2:e5:47:47:
                    89:f6:6d:c2:0b:46:52:40:46:9d:8b:66:44:43:e5:
                    e5:4f:41:d4:8e:a2:04:08:51:02:03:0f:a0:04:d4:
                    c2:1c:a3:4c:3f:9c:cc:7b:75:e9:18:17:23:47:ce:
                    33:2f:45:6c:21:7e:66:f9:3b:b7:7d:1c:be:47:55:
                    77:d7:7e:e2:0b:ed:91:c1:a2:96:fd:c3:38:95:f6:
                    b8:26:3b:3e:1b:d2:23:53:bb:22:1b:75:b5:fe:af:
                    b1:8b:bd:0e:7e:90:2d:59:90:14:ba:7a:fe:15:02:
                    79:62:f6:1e:78:81:2f:29:9d:6d:28:65:21:d1:b1:
                    be:1d:3f:bb:f3:aa:f8:36:db:e5:a5:c9:ff:6b:26:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C7:C3:01:4C:0C:18:6A:4A:19:22:E3:0E:50:91:84:25:81:C7:33
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e50::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:3f:4d:61:29:3d:a1:0e:ec:33:db:0f:e9:be:f4:20:8b:
         08:bf:f9:28:eb:f4:70:20:47:eb:d4:8e:05:03:8d:cf:ee:af:
         c7:29:f2:e5:2c:08:4f:82:fe:b2:9f:eb:8f:0e:f2:e4:2d:8b:
         16:b9:55:a0:be:45:44:cf:c1:f1:84:67:7e:6a:a3:69:07:1a:
         73:a7:c0:ad:a9:13:ad:43:dc:64:1d:29:2c:87:05:5c:61:71:
         72:bf:bc:f5:66:41:40:3b:fc:82:cd:0d:1a:b0:15:2d:6b:36:
         f3:e8:7c:cf:a3:ec:8d:85:b8:db:b0:e5:99:00:40:e7:bb:b5:
         e6:f8:eb:5e:10:c3:fa:cc:5f:45:78:64:f3:ea:26:cf:b9:de:
         51:3a:11:e2:d6:aa:b4:d9:36:26:32:6d:b7:3e:df:8b:43:84:
         fd:dd:00:78:f7:65:e1:21:67:63:68:07:b8:e9:bc:55:ae:ca:
         dd:61:80:f1:74:36:13:93:23:6c:62:5d:2b:bf:d0:a3:20:67:
         32:07:38:6a:72:8c:ef:25:61:a2:d6:f3:50:2d:34:f2:33:c6:
         64:1c:21:1a:8a:97:3c:87:0b:9a:b4:75:31:ed:32:61:f2:60:
         88:3b:c2:b3:af:8e:04:ab:2b:b5:de:b4:79:f5:89:89:bd:9d:
         bb:04:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----