Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203062.roa
File:                     AS203062.roa (raw, json)
Hash identifier:          hOLhfhDhFl/13VzQ4DlaCQrDXmlIIrPzdYycui47eoI=
Subject key identifier:   5C:AA:98:57:E7:AE:C6:59:E6:5B:25:E4:C0:75:5E:FC:9B:C4:87:41
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       391F813A63827EEFBE6BDD8EFACF370677564172
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203062.roa
Signing time:             Mon 10 Apr 2023 03:31:36 +0000
ROA not before:           Mon 10 Apr 2023 03:26:36 +0000
ROA not after:            Mon 08 Apr 2024 03:31:36 +0000
asID:                     203062
IP address blocks:        2a12:dd47:802a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1f:81:3a:63:82:7e:ef:be:6b:dd:8e:fa:cf:37:06:77:56:41:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:36 2023 GMT
            Not After : Apr  8 03:31:36 2024 GMT
        Subject: CN=5CAA9857E7AEC659E65B25E4C0755EFC9BC48741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:61:b0:b1:67:15:c8:4d:d0:cb:71:d0:af:
                    28:c0:c6:ae:c3:d3:75:d1:33:be:c5:42:33:ca:1a:
                    3b:c4:b6:2a:b1:d3:0b:16:ec:c6:99:f5:95:56:e5:
                    77:8f:fd:58:c6:89:10:f5:98:3d:bb:fc:4e:fa:58:
                    5b:47:73:91:55:ab:1e:6a:b7:15:30:d8:14:ee:c6:
                    a3:3a:74:ed:2a:14:4b:f3:c4:6f:e3:cd:4a:47:3e:
                    10:44:d5:0f:29:52:4c:70:1b:0a:a7:ff:96:29:8e:
                    86:44:f2:0f:b4:7b:b2:61:d3:63:fb:64:d1:9a:f6:
                    d6:93:ce:c3:e4:d4:3b:bf:dc:a8:4d:4f:62:aa:1f:
                    53:31:b7:6f:ef:88:ab:7b:c0:7b:cf:25:4f:e1:f7:
                    1a:d4:d1:e7:29:84:49:c6:67:36:13:2a:dd:0f:9d:
                    38:52:ec:0c:cf:5a:f3:af:c6:46:d3:1d:23:a5:a3:
                    c8:59:62:ae:ac:ff:7f:f3:c1:30:8d:44:c0:f3:23:
                    01:be:9c:c4:a1:5d:2b:c3:f4:93:f6:b8:5d:2c:2c:
                    b9:34:e5:d7:61:ac:f3:c6:21:fe:83:85:ba:3e:95:
                    bb:ee:aa:f0:a2:dc:70:5f:dc:11:2b:a2:df:19:c2:
                    ac:70:40:45:33:4f:86:85:31:86:da:ec:30:f8:3e:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AA:98:57:E7:AE:C6:59:E6:5B:25:E4:C0:75:5E:FC:9B:C4:87:41
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802a::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:45:80:03:fc:39:53:a3:65:8d:1d:05:77:03:98:4d:57:94:
         ce:4a:33:f1:29:9c:e4:1d:99:54:bd:b1:5a:ea:f4:88:77:d2:
         03:22:79:19:8f:c2:fe:e9:dc:e2:1c:63:5c:7a:92:02:91:1b:
         ac:42:ca:f9:88:40:8e:25:18:4b:68:cb:66:3b:5c:70:3b:ca:
         c3:7e:32:44:1a:ee:8c:80:7e:a5:c9:8a:3c:2a:32:64:9c:bd:
         24:4e:ca:fb:71:90:63:d9:c4:ed:0f:00:4f:11:49:9d:fc:09:
         2e:d3:74:e9:c8:a9:7e:f0:60:17:4f:3d:db:70:c6:a4:52:b4:
         93:fc:18:33:c2:26:67:72:ce:7c:f8:75:5c:1b:c2:a3:2e:12:
         86:7b:be:18:fb:40:c6:1a:1f:a8:0b:ee:79:ea:54:06:ea:01:
         0f:79:81:a9:6e:a2:92:0b:a0:91:78:f0:10:58:f9:13:52:2d:
         5b:b1:2c:9a:55:71:df:3f:96:b1:66:ff:c8:e1:6c:57:6c:bd:
         23:21:12:9b:68:5b:8a:f0:d9:b0:b7:38:2f:05:37:2f:ab:ca:
         17:e3:c7:a6:5b:01:01:96:40:50:e8:fd:08:c1:f4:45:90:80:
         77:04:15:b6:d2:c7:99:e9:18:de:a3:0e:4e:1a:2d:70:4c:5c:
         ef:35:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----