Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS204375.roa
File:                     AS204375.roa (raw, json)
Hash identifier:          WTj3r/66TIpopAJe+p5XF6k/InNyGbjwJ9UDD1sSTk8=
Subject key identifier:   2B:33:D7:20:2C:5C:E7:71:FD:5C:B2:F9:96:19:CC:E2:8D:DF:AF:C4
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       1652B8F47DF61C459ED2C71FF3D0BAC825D5BA9A
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS204375.roa
Signing time:             Mon 10 Apr 2023 03:31:34 +0000
ROA not before:           Mon 10 Apr 2023 03:26:34 +0000
ROA not after:            Mon 08 Apr 2024 03:31:34 +0000
asID:                     204375
IP address blocks:        2a12:dd47:8043::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:52:b8:f4:7d:f6:1c:45:9e:d2:c7:1f:f3:d0:ba:c8:25:d5:ba:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:34 2023 GMT
            Not After : Apr  8 03:31:34 2024 GMT
        Subject: CN=2B33D7202C5CE771FD5CB2F99619CCE28DDFAFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:f5:3c:b1:a8:e3:90:60:6f:8a:5f:01:87:
                    87:b8:13:8b:11:f3:38:9c:ba:f6:8d:c5:ff:3e:a8:
                    5d:e0:74:53:ab:8b:3d:70:d7:0e:e8:30:06:2b:17:
                    98:48:ac:05:13:f1:a4:9a:7b:31:0e:0f:d1:58:cb:
                    ec:5e:e6:2f:bd:9a:4a:7b:20:08:71:f4:5a:12:8b:
                    cf:2d:7c:57:ad:73:89:40:8b:fe:8a:09:b7:20:c3:
                    42:c2:8b:b4:6a:4a:3f:1b:b4:63:55:70:14:a0:62:
                    26:10:b5:5f:34:5f:bb:6e:b5:51:c5:43:56:23:e9:
                    ce:5f:62:d7:fe:31:4b:c4:65:fb:65:28:7e:a1:db:
                    f6:61:98:bd:13:db:c3:05:92:3d:34:f0:d3:58:af:
                    02:e1:71:f4:66:4c:13:74:cf:34:d5:9d:91:c3:ef:
                    9e:f5:fa:6d:7f:9a:e9:43:6e:5a:a4:65:ff:fb:18:
                    d3:2f:cd:c7:db:17:50:99:e5:87:51:fd:b9:2b:c0:
                    fa:9d:be:f3:8b:78:84:1f:8d:e0:65:74:2a:ef:8a:
                    c4:8b:49:c7:12:30:19:2f:31:1d:30:96:26:fc:f1:
                    03:d5:bb:a8:7b:c0:8a:69:d6:10:99:3e:09:26:72:
                    7c:40:a0:06:32:32:95:04:3c:67:68:6c:cc:17:5e:
                    50:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:33:D7:20:2C:5C:E7:71:FD:5C:B2:F9:96:19:CC:E2:8D:DF:AF:C4
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS204375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8043::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:e3:b3:8d:c1:3a:45:65:37:df:ae:99:29:47:51:20:3d:30:
         c5:62:57:56:81:c9:c1:a8:0d:31:ab:62:5a:68:b3:7d:14:30:
         8d:fc:43:57:00:db:9f:09:c2:05:73:3f:47:9b:2e:93:be:a6:
         f2:22:58:f1:b5:10:3d:20:c7:ff:66:69:63:77:aa:ee:43:d3:
         55:2d:bb:f2:31:05:7d:12:b6:15:cb:2c:4f:2b:55:c6:18:af:
         ff:60:85:a2:25:52:ea:34:73:7b:f4:20:b6:41:cb:00:19:33:
         09:d3:c5:29:10:65:c9:42:c4:0d:3b:43:0c:a4:41:38:bf:4c:
         27:54:e4:05:49:61:75:5e:d0:f7:04:97:4c:23:85:f8:a4:8e:
         44:3c:19:ec:5b:52:b4:21:98:51:6e:d1:72:a4:52:3e:78:43:
         20:b5:af:e9:fd:65:84:99:74:6d:46:21:18:95:db:ed:65:2f:
         4a:bc:cd:02:ad:b9:0a:ea:a4:78:f3:e9:3c:6a:1b:c3:6e:87:
         06:2f:d1:92:86:28:29:f3:6a:40:5c:d7:68:ff:1b:e0:a8:73:
         28:97:88:66:09:92:9a:f7:41:29:f0:27:6d:98:63:f6:db:70:
         58:e6:a0:9b:c9:73:21:6a:3b:1d:a6:67:cf:a3:70:58:af:53:
         48:a9:6c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----