Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203577.roa
File:                     AS203577.roa (raw, json)
Hash identifier:          y0DnkarvC7GkB7nxxWOtIMtGn4wYSr7ffPSco8orHT8=
Subject key identifier:   D1:61:E4:FF:5A:98:7C:68:C8:55:69:58:44:6C:66:5A:12:BB:62:A7
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       510259C483C878D5855B47610C1509E4D05A27B0
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203577.roa
Signing time:             Mon 10 Apr 2023 03:31:42 +0000
ROA not before:           Mon 10 Apr 2023 03:26:42 +0000
ROA not after:            Mon 08 Apr 2024 03:31:42 +0000
asID:                     203577
IP address blocks:        2a12:dd47:81e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:02:59:c4:83:c8:78:d5:85:5b:47:61:0c:15:09:e4:d0:5a:27:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:42 2023 GMT
            Not After : Apr  8 03:31:42 2024 GMT
        Subject: CN=D161E4FF5A987C68C8556958446C665A12BB62A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:f9:78:06:b0:40:58:80:19:88:fa:a5:fa:
                    80:fc:c9:a0:9e:90:da:4e:7a:1b:6e:be:ba:56:f3:
                    93:07:74:38:d0:3b:fb:1a:14:eb:86:cf:cc:1a:6f:
                    2e:26:87:b9:eb:2e:46:9a:e5:92:f8:d4:bf:aa:45:
                    ea:43:af:d4:75:51:80:f3:57:b4:d2:91:15:8e:4a:
                    ac:7f:11:08:51:30:68:6d:f7:d5:21:5d:0f:38:2e:
                    9a:1d:37:00:4a:33:98:e0:bb:9e:d2:ba:55:5b:25:
                    6f:36:63:3e:21:5a:44:38:22:16:29:0b:3d:33:25:
                    6e:5f:95:f9:cc:fd:30:d1:16:43:5d:84:86:7a:4c:
                    bc:10:fa:fd:33:c3:ff:9d:0c:df:43:85:da:e9:98:
                    d6:6c:1c:5c:bf:d6:57:04:eb:f2:52:76:9c:c0:1a:
                    ca:31:d0:07:42:60:6a:9e:fd:1e:ef:ad:e4:83:68:
                    c5:b7:9c:66:67:a5:98:f0:ca:47:fc:e6:10:41:bb:
                    ef:ef:bc:1b:96:56:4f:85:1d:cd:bc:8d:d5:55:12:
                    62:9e:0e:6b:c7:a9:57:5f:05:c4:94:fa:1c:0a:ca:
                    5b:60:12:13:45:01:a3:1c:8d:19:b9:15:c0:c7:0c:
                    2f:a9:ab:e1:c4:de:7b:81:d4:13:68:78:ae:1c:48:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:61:E4:FF:5A:98:7C:68:C8:55:69:58:44:6C:66:5A:12:BB:62:A7
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:df:8d:d4:68:c7:07:70:51:cf:96:e1:e5:f9:e9:1f:8f:02:
         65:78:9a:ef:ef:12:df:c7:c0:ea:ed:7d:d5:14:01:93:4b:ee:
         cc:22:a4:fe:c0:8e:97:a3:fc:2b:d4:d0:ed:d8:07:b2:83:0f:
         92:88:c1:64:fd:3c:cf:1f:da:4f:3b:c4:4b:6c:25:84:cd:89:
         17:88:c0:c7:5a:42:7c:4e:65:c5:f4:7f:29:77:8c:16:1f:7d:
         79:cc:3e:c3:c1:db:b2:9a:df:91:f1:68:53:6e:8f:53:1d:87:
         65:d2:8f:14:44:18:df:06:b8:0e:44:8b:b8:94:fb:3a:bc:3e:
         ac:57:a7:f7:f2:1c:f8:0c:2f:0c:bd:a6:ee:f1:a7:f5:c3:54:
         57:ce:ae:a0:dc:ee:81:e9:2c:e2:31:1a:5d:70:53:1d:04:56:
         31:e8:09:9a:1f:40:9b:71:24:58:d3:f5:18:4f:68:7d:aa:2f:
         a9:6d:5f:cb:b6:a7:0d:80:47:40:ed:4c:74:4d:ca:89:87:35:
         81:59:d9:c4:1c:4d:9e:77:19:d3:68:9d:0e:fd:af:42:88:80:
         28:8f:fa:5b:20:0c:77:0e:1d:0c:d2:28:9e:7a:47:4b:86:ca:
         4b:df:1a:c1:50:68:57:d3:c0:a5:e6:eb:89:fd:ce:cb:f8:5b:
         ef:1e:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----