Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202573.roa
File:                     AS202573.roa (raw, json)
Hash identifier:          IVFHuvOLLr4C28+2vSAbgBKUq46kJAPE1xQAcNOmzwQ=
Subject key identifier:   B6:42:E5:A9:D0:CC:01:C1:F4:9C:04:D1:C0:6F:92:D7:52:3E:9D:C7
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       520CC2DC24A4867C36DACF0BBBB5D277E32FA373
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202573.roa
Signing time:             Mon 10 Apr 2023 03:31:51 +0000
ROA not before:           Mon 10 Apr 2023 03:26:51 +0000
ROA not after:            Mon 08 Apr 2024 03:31:51 +0000
asID:                     202573
IP address blocks:        2a12:dd47:f800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0c:c2:dc:24:a4:86:7c:36:da:cf:0b:bb:b5:d2:77:e3:2f:a3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:51 2023 GMT
            Not After : Apr  8 03:31:51 2024 GMT
        Subject: CN=B642E5A9D0CC01C1F49C04D1C06F92D7523E9DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:b1:69:2a:e9:e1:95:3f:16:f7:d1:a9:26:
                    30:39:0c:aa:bc:2e:59:fe:20:d7:a0:00:eb:4d:cf:
                    15:9a:57:8f:8e:13:bd:8f:0b:cf:71:5c:63:5d:39:
                    8c:fe:4f:dc:36:d5:e1:cf:17:43:33:a9:98:67:40:
                    d1:36:a3:d1:e9:3c:a4:af:7c:87:19:36:f0:02:20:
                    5e:e3:c9:57:e3:41:a1:e1:9a:f1:88:de:8a:73:c1:
                    9a:0a:4e:af:ad:56:10:20:8a:c7:67:51:76:ca:78:
                    ee:f3:84:68:e3:46:9b:20:e3:e9:c5:e8:cb:09:d4:
                    01:f1:70:87:a3:28:df:df:83:26:31:fa:aa:f8:35:
                    45:7a:93:66:9d:42:01:99:e3:dc:65:61:dc:09:4d:
                    50:61:aa:92:2d:76:cb:65:20:86:44:ed:44:34:e4:
                    f8:06:f5:cc:06:78:23:cf:10:4b:f6:10:62:f1:ed:
                    d0:31:31:3f:73:16:36:8f:40:19:ea:9f:be:49:ca:
                    5c:be:7c:36:77:bd:1d:6b:df:09:b6:7a:9e:5b:6b:
                    41:4c:c4:67:39:06:29:7a:65:31:03:de:dc:7b:85:
                    b6:3d:90:e5:89:b2:f5:85:32:50:c7:f6:35:79:1f:
                    19:d8:68:d8:e5:79:26:0f:ed:1a:50:f6:60:fb:ed:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:42:E5:A9:D0:CC:01:C1:F4:9C:04:D1:C0:6F:92:D7:52:3E:9D:C7
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202573.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:ed:84:14:40:79:48:ab:dc:d8:a3:d8:78:c6:80:56:04:83:
         36:bd:46:d0:f1:64:f8:93:42:98:a4:f2:2d:fb:ac:1e:e3:70:
         7b:17:06:68:72:e8:2a:0a:0f:4b:b1:96:b3:95:4b:6d:19:31:
         f1:79:49:54:f4:90:db:ec:e0:6a:89:1b:fe:b1:88:1b:c5:96:
         d0:b0:69:97:fb:c4:03:76:2c:d2:16:e7:e2:55:c1:83:9c:a7:
         ef:78:d2:14:cf:e8:2c:24:62:71:55:c5:4c:b2:89:d5:25:0f:
         e2:d3:c4:80:2e:29:31:97:b2:64:52:32:87:fd:f9:5f:09:2d:
         04:18:53:c7:bf:16:f0:b0:58:b2:7a:ab:a8:83:6a:bf:dc:8a:
         26:72:ae:c4:ba:62:53:bb:8f:72:c9:59:d4:6d:f8:c2:d4:88:
         03:94:6a:4d:62:45:22:51:34:17:53:c4:30:2d:17:92:18:43:
         f9:50:6d:98:e9:f0:53:81:4d:7e:f2:ee:cc:b3:27:a2:99:fb:
         84:53:bb:1d:5c:f3:90:90:6f:62:9c:a8:b9:9a:21:95:3c:db:
         7c:ab:27:ca:a0:d6:59:26:45:35:56:3d:48:8e:65:e7:8b:24:
         35:54:86:9a:42:d6:4d:0f:31:be:ac:d1:3d:e8:4c:9e:4b:4e:
         22:69:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----