Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202828.roa
File:                     AS202828.roa (raw, json)
Hash identifier:          psqhIrM5AzrS8m63prd5R0AkmHlnI7Dh5iY8t51KANU=
Subject key identifier:   E4:B6:46:3E:19:AB:31:DD:1C:2D:BD:5C:2B:24:12:49:C3:11:E2:C4
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       54E88BE04281BAF4CD135C824388C8213533E181
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202828.roa
Signing time:             Mon 10 Apr 2023 03:31:52 +0000
ROA not before:           Mon 10 Apr 2023 03:26:52 +0000
ROA not after:            Mon 08 Apr 2024 03:31:52 +0000
asID:                     202828
IP address blocks:        2a12:dd47:804c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e8:8b:e0:42:81:ba:f4:cd:13:5c:82:43:88:c8:21:35:33:e1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:52 2023 GMT
            Not After : Apr  8 03:31:52 2024 GMT
        Subject: CN=E4B6463E19AB31DD1C2DBD5C2B241249C311E2C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:db:55:38:e1:d0:d7:b0:43:99:74:6b:07:
                    80:41:64:3e:e8:40:fa:2f:89:ea:e9:58:ec:f3:d8:
                    16:9e:d6:a4:82:98:30:fd:f1:93:c6:a6:74:f9:8d:
                    b6:c7:af:b6:9d:5d:04:50:82:23:3e:b8:9d:5e:90:
                    4f:20:c7:6f:ce:aa:56:67:ff:a7:0c:69:d5:50:d7:
                    12:e9:0b:2f:8a:bb:99:5f:80:b9:c8:43:85:94:ee:
                    27:97:2b:fa:bb:c1:94:5b:22:fa:cf:f7:c4:49:99:
                    02:70:ef:40:ee:e7:3b:c7:5a:4b:79:7b:e8:0e:6d:
                    c5:6a:61:92:4f:5f:46:cd:22:48:88:68:8d:3c:ea:
                    92:cc:ac:d4:91:e0:57:da:06:1a:89:04:7e:4c:7f:
                    be:55:56:95:8e:42:9f:10:2d:c9:24:36:21:6b:dd:
                    90:5d:5e:91:cc:82:fb:99:c4:57:02:ae:47:56:45:
                    c8:48:4c:69:8c:e1:b1:d8:bd:25:68:e0:50:b4:4e:
                    37:8a:c4:35:47:76:54:b0:25:62:31:63:7d:49:15:
                    9c:06:08:04:29:b8:20:7d:47:68:b6:ad:94:39:11:
                    df:1f:88:ed:61:79:0e:a0:3b:13:05:2c:e5:4e:7a:
                    25:9d:49:55:a6:56:3a:dd:14:ce:35:a9:0a:c7:48:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B6:46:3E:19:AB:31:DD:1C:2D:BD:5C:2B:24:12:49:C3:11:E2:C4
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202828.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804c::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:0d:69:7d:fc:76:21:75:f5:8f:ea:11:a6:52:ce:85:f2:6a:
         57:1d:b4:f9:45:9f:34:33:4a:f1:68:45:8d:60:ba:e6:20:d6:
         43:92:09:5c:20:76:de:f2:83:a7:76:80:97:82:44:04:3f:b5:
         85:b0:6c:0d:ef:f2:07:16:95:e7:80:97:c8:14:08:90:5e:ee:
         9b:c1:b2:0b:4d:6d:e5:75:85:70:3d:f4:ce:c2:34:61:5f:69:
         e8:ad:4f:a9:df:71:fc:2e:10:9c:9a:ec:25:29:02:6a:bf:d4:
         43:43:18:4e:e5:b9:d4:c4:b4:41:c4:a1:3e:69:9f:c4:86:8c:
         d7:5e:00:cf:a0:b6:13:c1:71:19:a6:2f:b9:56:44:73:83:13:
         d2:14:a4:cf:ad:8d:8f:24:d7:50:6f:4a:37:99:92:78:aa:9e:
         a2:4f:f4:e7:08:27:ae:df:70:80:23:56:a1:11:f7:87:dc:bf:
         79:d4:7f:09:da:ef:b8:e8:f8:a3:c0:c2:b1:f1:26:1a:f2:05:
         ef:45:ee:12:0a:97:5f:04:ed:31:75:d2:ce:2c:e1:18:f6:f4:
         47:40:74:a8:05:f7:4b:52:27:2c:f4:a8:5a:b0:65:97:73:17:
         bc:60:2a:d1:99:b9:49:03:8f:e7:b5:ff:06:d8:51:57:1e:dc:
         3b:31:04:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----