Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202222.roa
File:                     AS202222.roa (raw, json)
Hash identifier:          SA3W8f60ExtSIGv2AS18WEmGA3kyAicCTh7x4jHsVmg=
Subject key identifier:   63:D9:BB:4F:65:42:C9:B4:C7:FE:4F:14:7A:15:74:8C:2C:96:76:B3
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       40D50821DC3A6087B4CB5A57C44CC19098FE079E
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202222.roa
Signing time:             Mon 10 Apr 2023 03:31:41 +0000
ROA not before:           Mon 10 Apr 2023 03:26:41 +0000
ROA not after:            Mon 08 Apr 2024 03:31:41 +0000
asID:                     202222
IP address blocks:        2a12:dd47:8166::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d5:08:21:dc:3a:60:87:b4:cb:5a:57:c4:4c:c1:90:98:fe:07:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:41 2023 GMT
            Not After : Apr  8 03:31:41 2024 GMT
        Subject: CN=63D9BB4F6542C9B4C7FE4F147A15748C2C9676B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:9e:5e:49:a9:ef:24:fa:04:89:c1:8e:c1:
                    24:bc:ec:0c:1b:05:59:dc:9c:3a:fb:80:56:da:be:
                    d9:77:eb:73:e2:5b:b9:5c:e8:ea:ba:66:c5:7d:43:
                    1e:fd:35:05:50:e0:05:82:9e:ff:eb:d9:e7:cc:88:
                    59:32:17:79:25:21:54:22:d5:43:d6:1d:79:fe:1e:
                    00:ff:74:c3:e8:24:26:6e:8c:25:79:69:67:ec:09:
                    a6:49:bc:d7:2a:fe:cb:71:e4:89:e2:b8:3c:58:1d:
                    bf:f1:38:1c:63:8d:94:c1:c3:7c:81:ef:40:5c:6d:
                    3a:79:17:2b:4a:45:73:1d:04:e5:58:d6:9c:d2:20:
                    19:80:0d:70:18:e2:62:3d:9e:16:d3:c6:eb:ee:49:
                    d6:b8:b1:51:78:b8:f4:00:5c:85:b1:76:d3:8e:29:
                    a3:21:fb:57:08:cd:cc:f0:89:7d:18:2d:20:b9:a3:
                    a0:6b:7f:8f:f7:e2:9b:97:68:95:f5:52:92:16:82:
                    6b:44:f2:8a:c1:64:4f:79:c0:e1:6c:b1:3b:7a:ca:
                    06:cf:56:8c:c6:32:93:95:b9:24:35:fc:82:2c:e7:
                    c7:1d:dd:a0:42:e4:53:c1:c3:15:57:13:12:ab:75:
                    9b:96:89:92:37:9e:b7:c2:2a:3d:7c:b0:de:c6:5e:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D9:BB:4F:65:42:C9:B4:C7:FE:4F:14:7A:15:74:8C:2C:96:76:B3
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202222.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8166::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:de:e3:03:1b:2a:ef:20:9a:5b:ea:0c:a5:92:d8:86:d8:64:
         5e:c5:a8:dc:92:8b:48:f7:18:f6:eb:60:bd:70:0e:1b:57:38:
         9a:2d:a6:c4:57:71:80:48:96:04:15:4e:78:d8:61:8c:61:71:
         ea:8d:1f:82:74:d6:b6:fe:6a:65:e9:66:61:15:c7:a4:7c:ae:
         73:4b:60:fc:7b:8f:73:cb:b8:47:33:62:ee:32:82:6c:0d:32:
         3e:6b:f7:ba:17:fa:4c:0a:af:15:9a:dd:33:ca:63:c9:ce:25:
         80:18:c7:85:ff:18:e3:ac:8e:52:6e:bb:95:54:74:04:a9:e3:
         61:96:3c:ea:ba:28:ab:45:bf:95:47:03:96:70:8d:34:ec:bc:
         d6:df:6e:9c:0a:a8:92:e9:ef:bf:1b:48:f1:f6:bd:6a:02:2f:
         44:e9:ff:5c:c9:51:87:55:8f:3c:49:d2:dd:a3:6a:41:46:db:
         a2:5e:df:8c:ce:9c:03:ae:10:4a:c0:67:35:2b:dd:2a:b0:32:
         6f:a4:b9:10:af:fc:dd:69:e4:57:8e:ba:a7:bd:3c:de:5f:06:
         a3:db:93:9a:42:c0:d9:10:76:dd:d1:64:88:19:49:9e:b6:3f:
         c3:b4:26:91:e7:f6:51:67:34:9d:09:ca:c7:d0:3f:ce:5f:8f:
         0c:c5:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----