Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203635.roa
File:                     AS203635.roa (raw, json)
Hash identifier:          uwOs2yVJ+5u80OxnExEt4T/ZjhPzreJjv0ilKptv4kk=
Subject key identifier:   AD:9B:50:02:32:B4:89:0F:26:1B:85:FA:57:F9:B0:F4:01:14:EF:45
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5BCE3D1E7889085DCFC5DC469A0FF45999054AF6
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203635.roa
Signing time:             Mon 10 Apr 2023 03:31:32 +0000
ROA not before:           Mon 10 Apr 2023 03:26:32 +0000
ROA not after:            Mon 08 Apr 2024 03:31:32 +0000
asID:                     203635
IP address blocks:        2a12:dd47:8079::/48 maxlen: 48
                          2a12:dd47:81f0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ce:3d:1e:78:89:08:5d:cf:c5:dc:46:9a:0f:f4:59:99:05:4a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:32 2023 GMT
            Not After : Apr  8 03:31:32 2024 GMT
        Subject: CN=AD9B500232B4890F261B85FA57F9B0F40114EF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:84:11:27:54:7d:cb:3c:10:48:26:22:34:44:
                    b7:89:09:9d:6a:6f:de:f7:96:72:33:23:1a:4f:b4:
                    32:c5:5e:79:9e:8d:7d:0c:59:b7:00:7d:38:e1:d1:
                    53:6a:d9:e0:53:67:69:56:37:dd:0d:97:e2:b5:8c:
                    b8:56:c3:78:fe:03:3e:c2:92:58:d1:47:d8:8c:3f:
                    d7:d7:18:df:f0:87:6d:cf:60:c0:ff:33:11:a8:d8:
                    06:da:5f:dc:4c:5a:8f:6c:de:92:4f:35:1b:0e:21:
                    fc:5c:11:b0:e9:0e:c3:26:e2:09:b2:3a:84:d3:88:
                    99:26:1f:d9:14:43:1f:3a:d9:1b:dd:24:e1:13:eb:
                    9e:bf:e2:6f:ad:eb:cd:0e:b2:7e:f5:d1:42:2c:d5:
                    42:93:1c:06:05:c0:0c:f7:23:bc:e3:36:a4:35:2d:
                    d7:ff:0d:ae:78:cf:a5:d8:ae:5c:12:a3:0f:bf:c5:
                    83:ff:73:91:f1:47:87:99:3d:44:67:3f:60:40:7d:
                    57:c6:3b:94:33:19:3d:79:51:55:e5:8f:1e:4d:36:
                    9b:53:46:e9:f9:7a:69:1f:e5:77:e6:08:84:6d:2a:
                    93:04:cf:9b:1e:6a:b1:36:ce:78:3c:79:ef:aa:72:
                    0a:72:78:f7:36:bb:2c:f4:bf:a4:ca:dc:ee:83:a7:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9B:50:02:32:B4:89:0F:26:1B:85:FA:57:F9:B0:F4:01:14:EF:45
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8079::/48
                  2a12:dd47:81f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:02:76:50:00:aa:c2:75:db:c4:ad:3d:f2:f6:ab:f7:c0:7a:
         fa:25:da:13:db:28:25:2a:ee:d1:e2:20:18:79:21:af:d1:ce:
         32:43:3d:bb:94:0a:9d:3c:54:60:fc:26:fc:1d:e8:f7:11:84:
         59:4c:80:2a:ea:6c:6b:ba:a2:f6:bc:eb:46:85:3d:9e:99:a0:
         8e:bd:49:0d:84:77:94:f6:91:f8:29:5b:92:01:c8:15:72:73:
         26:67:0d:20:c5:c8:3f:60:3b:25:51:e5:fb:d0:17:9b:49:f8:
         ac:27:69:40:a0:6a:8d:d9:42:de:a1:8c:1a:2b:8b:57:00:24:
         e5:b8:e2:1e:f6:22:87:fc:b8:90:67:de:95:6e:b8:a5:a6:ae:
         c5:13:2a:82:59:d4:48:63:2c:e1:e8:7d:7d:2d:5f:cb:3d:70:
         a0:5c:74:5e:24:08:c0:06:bb:4b:19:d0:b3:2c:71:73:c9:1a:
         77:ad:cb:3c:6b:9e:82:53:b2:3b:21:f7:7d:21:b3:d8:2c:11:
         70:72:f1:a9:3e:6a:9d:1f:f0:d3:4f:3c:f8:46:33:37:29:63:
         a2:36:6c:a4:69:81:20:d5:52:5f:44:83:cf:a0:a1:ea:dd:14:
         77:58:20:64:52:38:44:b3:e2:09:26:16:77:64:1b:d1:70:71:
         59:74:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----