Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS204611.roa
File:                     AS204611.roa (raw, json)
Hash identifier:          y73qAwrzuNcst/JD7lo+Wcw8GXXw778ZpOvCfP1mc18=
Subject key identifier:   79:DC:62:ED:F9:83:1A:F9:BB:CE:A6:21:CF:39:E7:75:E8:B9:FF:17
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       1F042A207A6BE5B625E4D40F81A235DEFA689E59
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS204611.roa
Signing time:             Mon 10 Apr 2023 03:31:38 +0000
ROA not before:           Mon 10 Apr 2023 03:26:38 +0000
ROA not after:            Mon 08 Apr 2024 03:31:38 +0000
asID:                     204611
IP address blocks:        2a12:dd47:83f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:04:2a:20:7a:6b:e5:b6:25:e4:d4:0f:81:a2:35:de:fa:68:9e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:38 2023 GMT
            Not After : Apr  8 03:31:38 2024 GMT
        Subject: CN=79DC62EDF9831AF9BBCEA621CF39E775E8B9FF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:fb:70:4c:2b:77:1c:fa:3d:81:2f:0a:cb:
                    08:ed:b5:4d:3f:88:18:22:be:8a:f3:72:bf:f7:92:
                    c1:60:a8:e6:b7:65:ef:bd:39:85:57:58:67:ce:10:
                    25:16:4e:df:31:0b:4e:5c:b1:88:11:4d:f1:84:13:
                    39:bc:57:8b:81:ee:c0:f7:e1:47:40:2d:3c:ce:ed:
                    39:c9:e7:27:a1:51:c8:97:a9:a1:da:23:f9:ed:f4:
                    f1:15:a9:fe:a7:75:a8:1e:34:cb:a4:9e:30:42:c8:
                    3a:f1:86:28:51:22:9b:ea:a6:17:76:35:bc:53:84:
                    8d:e2:95:84:da:c3:b0:90:a6:0f:e5:ad:2f:4f:1b:
                    34:7b:af:fe:01:77:8f:11:73:83:db:a1:e6:2d:18:
                    54:63:6f:35:d0:6c:9b:c4:aa:2a:2d:40:ef:a1:35:
                    44:ff:bc:35:0a:a2:f0:0d:44:1d:b2:d4:62:82:de:
                    41:67:3f:59:51:05:4a:74:36:38:80:7a:59:0d:43:
                    de:dc:38:d7:d7:5a:7c:11:4d:89:e3:bc:f1:0e:52:
                    03:6e:23:db:de:31:51:7b:66:4c:52:53:80:42:3e:
                    85:73:11:6e:08:f6:b2:69:86:e3:ce:35:ad:0b:59:
                    a8:5b:99:fe:49:ec:44:d3:bc:04:9a:93:6f:1a:62:
                    04:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DC:62:ED:F9:83:1A:F9:BB:CE:A6:21:CF:39:E7:75:E8:B9:FF:17
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS204611.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:59:d4:31:c9:94:d2:a4:8f:a1:c2:23:bd:a6:14:bd:2d:a4:
         83:00:1f:98:e7:9e:ab:72:be:d4:30:da:45:d4:54:17:c9:dd:
         b3:6d:a3:45:6c:37:b7:8a:93:09:2a:c1:c4:a5:af:8d:fe:64:
         79:fc:4e:d1:6d:85:c2:96:63:19:61:b0:ff:68:6c:47:0f:9a:
         ee:58:69:e7:29:6d:c7:1d:67:f4:ec:eb:05:4e:b1:fa:79:46:
         ed:bd:b1:33:95:47:a7:88:52:d9:86:43:6c:0e:e3:a9:02:f2:
         03:36:ed:07:d4:f8:d7:27:a3:08:51:a0:9c:4b:79:97:02:30:
         d5:5a:17:ca:d1:8b:ab:26:74:f3:c0:3d:94:53:c3:ca:4b:c2:
         22:a3:dd:58:f0:d3:f5:80:8e:c1:a0:c2:77:2a:0e:9a:11:3c:
         82:30:74:41:49:83:70:83:f9:19:fc:73:17:84:f0:8e:c1:ab:
         ab:bb:ad:3f:73:d0:c8:40:50:5c:12:9e:eb:e7:88:b9:d5:f8:
         c6:32:40:48:55:75:1a:ee:ee:3e:6f:d6:b0:da:9d:de:3e:a9:
         0f:16:72:d7:a0:6c:c1:11:61:57:eb:81:a1:47:16:0e:c5:39:
         00:4e:63:1f:68:c2:5b:46:d4:f5:a6:18:11:1a:3e:3c:19:a9:
         30:36:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----