Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203145.roa
File:                     AS203145.roa (raw, json)
Hash identifier:          twcX+Hl63Fs/uKFPyA9TRj55Yp1FQULy6yENfAFU1Zw=
Subject key identifier:   1E:6A:44:C9:36:4E:93:07:50:5A:54:27:3B:F0:64:D3:CF:9A:E8:8B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       05DFFAE9EB2CFADB7420C1A3295661406A4AAD0E
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203145.roa
Signing time:             Mon 10 Apr 2023 03:31:50 +0000
ROA not before:           Mon 10 Apr 2023 03:26:50 +0000
ROA not after:            Mon 08 Apr 2024 03:31:50 +0000
asID:                     203145
IP address blocks:        2a12:dd47:8120::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:df:fa:e9:eb:2c:fa:db:74:20:c1:a3:29:56:61:40:6a:4a:ad:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:50 2023 GMT
            Not After : Apr  8 03:31:50 2024 GMT
        Subject: CN=1E6A44C9364E9307505A54273BF064D3CF9AE88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:03:66:c0:d9:f2:10:15:09:c2:c3:ae:35:
                    c1:cd:75:c5:62:7e:1c:d2:06:1d:27:05:b3:00:89:
                    9f:7a:66:3f:c0:7f:e0:97:a1:51:a1:16:3e:70:f0:
                    d3:df:b5:f2:df:52:8b:97:04:03:9f:6f:8d:4c:0d:
                    a4:cc:1e:c4:d0:91:82:d9:3a:b6:8f:67:c2:7d:5b:
                    39:a1:cf:eb:4c:2b:f4:28:b7:53:24:09:65:c0:27:
                    63:d1:f3:db:c9:3d:c8:21:f0:76:e1:8e:fa:44:7e:
                    99:06:90:b2:0f:aa:69:e5:2c:4b:b1:20:35:fb:18:
                    be:fb:db:9a:0a:6b:29:cf:5b:b6:49:1d:88:d0:fb:
                    3c:ea:25:9f:57:ed:c7:d1:0d:0f:f1:89:1d:fc:53:
                    19:8e:c5:aa:e1:af:2c:8e:c1:11:5f:a5:26:10:1a:
                    c9:6f:5d:76:57:dc:96:03:ff:b7:ca:d6:07:d9:b0:
                    bb:03:40:cd:f8:27:b0:48:8d:08:6e:ff:4a:7b:26:
                    80:7c:52:98:39:2f:3f:be:0a:5d:e2:b3:b8:8c:9a:
                    02:62:06:0d:28:47:b6:7f:2b:6d:5d:e7:4a:73:76:
                    4b:12:bf:63:b2:e0:78:6f:74:4b:99:18:eb:82:d0:
                    a0:a4:83:d2:f4:73:43:5f:21:15:96:b8:93:e9:8a:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6A:44:C9:36:4E:93:07:50:5A:54:27:3B:F0:64:D3:CF:9A:E8:8B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203145.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8120::/44

    Signature Algorithm: sha256WithRSAEncryption
         12:33:e9:4f:ff:7b:c0:3c:d6:ac:c1:01:c2:59:23:14:d6:fe:
         1d:2b:97:de:f9:a7:12:10:a0:a2:cc:93:89:68:a5:89:44:35:
         a0:ba:91:1d:27:fe:93:7e:53:51:4f:8c:1c:33:6f:42:0b:23:
         b6:af:65:82:7d:1b:df:e1:b4:39:ef:b2:b8:e7:27:89:27:e6:
         0b:de:7f:00:86:25:d7:b7:24:13:10:0f:76:1d:9b:80:d8:40:
         33:7b:5a:90:e9:04:a4:a4:65:20:68:76:44:31:17:e6:22:da:
         1b:2a:31:26:81:6a:c7:58:b8:d0:cb:e8:4f:81:f9:95:a2:75:
         da:dd:cd:c7:70:80:ca:70:63:f3:14:84:c5:be:96:5f:6a:6a:
         7e:a5:92:ff:90:06:a3:c5:ef:60:ba:80:57:15:08:1a:e8:dd:
         dc:17:4e:6c:a8:db:75:12:c8:3e:5e:e5:47:43:0c:15:c3:48:
         25:2f:03:bf:10:d2:fc:fc:72:5e:49:cb:c6:e4:c8:b2:8f:64:
         cb:28:75:2d:da:cf:e7:45:69:f7:fa:bc:d0:88:38:61:84:14:
         bf:3e:46:4f:9f:04:95:b6:89:81:fa:f6:ae:20:7a:7a:ce:8a:
         c8:31:72:08:cc:26:2f:d4:ab:57:8a:07:62:43:ee:cb:7e:48:
         a1:30:b9:9d
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUBd/66ess+tt0IMGjKVZhQGpKrQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NTBaFw0yNDA0MDgwMzMxNTBaMDMxMTAvBgNV
BAMTKDFFNkE0NEM5MzY0RTkzMDc1MDVBNTQyNzNCRjA2NEQzQ0Y5QUU4OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtGwNmwNnyEBUJwsOuNcHNdcVi
fhzSBh0nBbMAiZ96Zj/Af+CXoVGhFj5w8NPftfLfUouXBAOfb41MDaTMHsTQkYLZ
OraPZ8J9Wzmhz+tMK/Qot1MkCWXAJ2PR89vJPcgh8HbhjvpEfpkGkLIPqmnlLEux
IDX7GL7725oKaynPW7ZJHYjQ+zzqJZ9X7cfRDQ/xiR38UxmOxarhryyOwRFfpSYQ
GslvXXZX3JYD/7fK1gfZsLsDQM34J7BIjQhu/0p7JoB8Upg5Lz++Cl3is7iMmgJi
Bg0oR7Z/K21d50pzdksSv2Oy4HhvdEuZGOuC0KCkg9L0c0NfIRWWuJPpiiA/AgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUHmpEyTZOkwdQWlQnO/Bk08+a6IswHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDMxNDUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HgSAwDQYJKoZIhvcNAQEL
BQADggEBABIz6U//e8A81qzBAcJZIxTW/h0rl975pxIQoKLMk4lopYlENaC6kR0n
/pN+U1FPjBwzb0ILI7avZYJ9G9/htDnvsrjnJ4kn5gvefwCGJde3JBMQD3Ydm4DY
QDN7WpDpBKSkZSBodkQxF+Yi2hsqMSaBasdYuNDL6E+B+ZWiddrdzcdwgMpwY/MU
hMW+ll9qan6lkv+QBqPF72C6gFcVCBro3dwXTmyo23USyD5e5UdDDBXDSCUvA78Q
0vz8cl5Jy8bkyLKPZMsodS3az+dFaff6vNCIOGGEFL8+Rk+fBJW2iYH69q4genrO
isgxcgjMJi/Uq1eKB2JD7st+SKEwuZ0=
-----END CERTIFICATE-----