Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202685.roa
File:                     AS202685.roa (raw, json)
Hash identifier:          ohwoUZiYsDTltGvEWQ5QmzCDKdbKdDGUrjMPALmclEs=
Subject key identifier:   A2:B7:8F:6C:88:5E:E1:C6:EA:1B:E2:47:FA:B9:CA:ED:23:92:A9:7B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5FA5055F9AB683C71BE2FB52BB7ACA37F44D15CC
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202685.roa
Signing time:             Mon 10 Apr 2023 03:31:40 +0000
ROA not before:           Mon 10 Apr 2023 03:26:40 +0000
ROA not after:            Mon 08 Apr 2024 03:31:40 +0000
asID:                     202685
IP address blocks:        2a12:dd47:8500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a5:05:5f:9a:b6:83:c7:1b:e2:fb:52:bb:7a:ca:37:f4:4d:15:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:40 2023 GMT
            Not After : Apr  8 03:31:40 2024 GMT
        Subject: CN=A2B78F6C885EE1C6EA1BE247FAB9CAED2392A97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:3b:2e:e9:64:f3:56:8c:99:cc:be:22:d4:
                    b3:ec:3f:88:ec:95:d9:cc:35:6b:3d:37:29:2d:fb:
                    98:d3:30:5d:10:e5:05:45:6a:60:84:19:64:97:57:
                    a5:67:1f:61:02:9e:f5:4f:63:ba:db:0e:8a:0b:80:
                    88:46:d4:c2:d9:70:ac:8b:a3:f1:64:70:d3:cd:68:
                    cc:40:74:9a:88:e0:2b:90:52:db:d8:70:10:fe:69:
                    f1:6d:c7:44:ea:12:ec:2f:6a:20:34:98:c1:5e:6a:
                    d5:1e:59:95:b5:98:ce:e5:5d:70:26:66:df:06:1b:
                    9d:53:4c:d5:af:45:0c:a2:f3:74:1e:dd:2b:e4:9b:
                    b7:14:db:4f:80:da:a8:e4:68:78:04:5c:b7:a0:fa:
                    2f:5c:df:9e:bb:ea:54:a4:f6:4a:32:bc:9e:64:8e:
                    88:80:87:80:82:9e:fd:65:26:9a:e5:c8:52:2a:58:
                    8d:1d:14:78:cf:24:8a:c6:b8:76:44:04:1c:ad:8f:
                    89:c2:03:27:7d:ef:7b:29:57:ab:d1:34:b3:57:42:
                    c8:55:f6:41:25:d0:a2:b5:f3:4d:e0:f8:7a:3b:cb:
                    d2:34:5d:b7:58:e8:c1:0d:e5:56:fe:f4:34:4a:da:
                    bc:6e:cb:4f:a3:66:47:8f:c7:a7:9f:26:1c:74:9b:
                    bb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B7:8F:6C:88:5E:E1:C6:EA:1B:E2:47:FA:B9:CA:ED:23:92:A9:7B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202685.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:60:5e:01:e6:5c:99:e7:5d:a6:80:85:40:ff:40:d9:39:1f:
         9e:a1:6e:9b:f5:96:42:eb:08:ab:7f:87:74:2c:5a:52:c0:76:
         21:16:45:8f:38:fd:37:1b:c1:b1:56:90:40:7f:37:bc:68:e0:
         1d:a5:82:fd:cd:62:d8:7b:03:f4:d1:08:4c:eb:08:eb:39:60:
         c6:8f:f0:25:d5:d6:80:00:29:2d:d6:e3:d7:75:4b:79:11:42:
         60:95:1c:4b:27:39:17:78:98:ad:28:52:bc:a3:b5:0d:57:40:
         b5:ef:6c:bf:4e:91:41:a5:4b:42:81:72:18:a4:7c:2a:56:6f:
         09:d2:19:f4:9a:2a:6f:4e:1e:96:07:0c:12:6a:e7:b8:37:d0:
         f0:d3:48:7c:c1:21:3a:0f:83:2a:9f:f9:57:5b:d9:c5:52:4f:
         70:24:ca:b1:46:2b:94:93:0d:91:65:3c:d4:88:70:3c:64:62:
         f7:6d:50:9a:1c:b2:86:08:f1:56:3f:de:71:ec:81:c2:af:0d:
         13:45:84:d6:e9:c0:20:6d:f3:c9:4e:f7:7a:40:56:33:52:e2:
         bc:a6:9d:7e:26:47:4b:f4:24:c1:d4:8a:c4:db:5c:2d:68:7e:
         84:a8:95:f2:bc:90:0f:48:c4:2c:19:87:90:31:9d:fe:cc:3b:
         0e:c6:40:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----