Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203913.roa
File:                     AS203913.roa (raw, json)
Hash identifier:          vndMpBXyCgR3Vua1FkjS1J1FJZGGzuw3260EFsazoqs=
Subject key identifier:   36:40:A7:2E:56:FE:E5:C3:64:E5:02:27:38:C0:54:90:A7:65:69:98
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5F67C27991D92A76B043CE408CA3A9CDA91EE417
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203913.roa
Signing time:             Mon 10 Apr 2023 03:31:46 +0000
ROA not before:           Mon 10 Apr 2023 03:26:46 +0000
ROA not after:            Mon 08 Apr 2024 03:31:46 +0000
asID:                     203913
IP address blocks:        2a12:dd47:8045::/48 maxlen: 48
                          2a12:dd47:8800::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:67:c2:79:91:d9:2a:76:b0:43:ce:40:8c:a3:a9:cd:a9:1e:e4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:46 2023 GMT
            Not After : Apr  8 03:31:46 2024 GMT
        Subject: CN=3640A72E56FEE5C364E5022738C05490A7656998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:ff:f9:11:72:84:8e:cf:3d:bf:77:7a:f3:
                    58:28:58:1c:2a:df:47:b7:99:d1:ab:d7:2c:bc:a8:
                    61:dc:75:d6:91:36:61:88:bd:dd:eb:5f:b6:0b:48:
                    7b:fe:f0:16:c3:6b:64:a2:2c:2d:6f:70:71:19:60:
                    34:d1:d7:1d:fb:a0:17:94:11:b4:e3:7c:6f:11:48:
                    56:d0:f2:cc:f3:c3:20:19:62:43:f9:a1:58:19:a2:
                    64:66:9e:d7:fc:5a:1c:9c:0d:7a:73:57:a1:4e:6a:
                    35:c1:96:02:a1:65:53:20:a1:ff:45:f7:f7:c2:0a:
                    8e:0f:5a:9b:05:55:88:f4:52:1d:5f:2a:02:eb:22:
                    47:e9:b0:c7:d0:5c:6b:fa:75:b9:e5:24:03:37:54:
                    73:eb:1b:d1:ef:6d:b8:09:02:af:15:f2:5e:e4:24:
                    b6:e6:a0:b1:12:78:c7:9d:68:87:f8:d3:71:43:44:
                    41:7b:13:92:38:09:a0:3c:cf:46:c1:50:10:7d:5c:
                    49:ba:37:41:48:c0:ad:19:d2:d4:a8:38:0a:73:0a:
                    92:f7:94:65:55:14:a7:66:9f:a7:21:1a:62:0f:e4:
                    dd:ad:a8:c9:00:9b:8e:7b:6e:03:cd:15:83:c9:0e:
                    4e:6a:1a:4c:52:3d:d1:44:3a:2d:30:ba:a0:80:1f:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:40:A7:2E:56:FE:E5:C3:64:E5:02:27:38:C0:54:90:A7:65:69:98
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8045::/48
                  2a12:dd47:8800::/39

    Signature Algorithm: sha256WithRSAEncryption
         73:09:c7:fd:f9:0a:3d:f7:aa:59:3f:47:ff:27:09:e7:e9:2a:
         4b:ab:57:e1:be:ec:84:a4:89:f4:64:06:05:1b:8d:1f:28:ee:
         4d:3a:07:5f:ec:ec:17:7d:ea:a9:69:c2:23:e6:6f:5f:91:4e:
         d4:75:c8:d3:da:2c:4d:c5:7c:6d:1c:01:4b:a0:69:88:88:75:
         32:37:7f:dc:ac:20:70:19:0c:3e:a9:5f:7a:66:a0:94:94:88:
         25:be:ac:1d:eb:f5:d1:3a:91:77:9d:28:38:9d:16:8b:84:7f:
         75:72:7e:f6:be:9e:d3:ab:f4:78:f9:b0:b4:b1:ca:5a:8c:b1:
         55:c7:58:ba:77:00:a9:f3:80:ac:33:f7:6b:fc:5c:cd:1e:a0:
         ab:67:a9:25:48:d4:2a:de:2a:87:89:d4:f8:9c:b3:5d:48:fb:
         2a:10:b8:6a:75:e3:28:50:37:9f:fa:0f:cb:5c:ee:e8:e3:52:
         27:e0:22:40:ad:d5:bb:f2:96:95:f4:3e:42:f9:ac:6c:ff:43:
         3d:4d:19:09:1a:3a:9d:61:e7:d5:fb:f3:55:8a:ae:9a:e0:d1:
         cd:61:3a:1f:1a:35:35:3a:67:8f:7c:b3:13:36:ed:8b:f7:66:
         db:ab:2f:fb:46:07:c5:fc:98:69:e5:70:d2:4c:7e:f9:1d:67:
         50:b2:f0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----