Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          rtf69Avzn+i5YUTQTCYupujicRQB7grt2SDuWu/jn+M=
Subject key identifier:   53:8D:23:27:2F:57:E5:CC:14:9D:0A:94:68:92:90:FD:11:B7:E6:67
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       189732292BC994265AE629D2120BE38921CFF901
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS20473.roa
Signing time:             Sat 13 May 2023 03:59:55 +0000
ROA not before:           Sat 13 May 2023 03:54:55 +0000
ROA not after:            Sat 11 May 2024 03:59:55 +0000
asID:                     20473
IP address blocks:        2a12:dd47:1000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:97:32:29:2b:c9:94:26:5a:e6:29:d2:12:0b:e3:89:21:cf:f9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: May 13 03:54:55 2023 GMT
            Not After : May 11 03:59:55 2024 GMT
        Subject: CN=538D23272F57E5CC149D0A94689290FD11B7E667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:ae:1f:e2:f6:d8:f5:e0:e5:77:94:8d:ef:
                    76:9b:23:cf:45:a0:53:21:3e:e8:58:9c:30:7c:99:
                    c5:96:6e:b5:72:2f:7f:e1:c0:26:51:18:1e:0b:5d:
                    e1:49:6d:79:24:8a:70:69:d1:a4:ef:96:3d:02:35:
                    ce:2f:8c:70:d7:93:e3:47:91:a2:78:7f:ca:20:7b:
                    bf:31:25:f8:90:03:83:4b:03:33:3b:03:49:81:41:
                    9f:82:f4:7d:78:86:20:d6:50:9d:96:71:e7:39:5f:
                    ab:f6:32:de:25:d5:f8:dc:e7:c0:aa:7e:5d:49:f8:
                    bc:0f:06:e0:27:2e:84:4e:0a:3d:23:1f:a3:54:1f:
                    b8:ca:98:0b:f0:3a:fb:7f:c6:5d:1c:11:9f:5d:89:
                    1d:89:ff:05:0f:39:11:4b:d1:98:34:7c:70:24:55:
                    67:a2:a2:ae:6c:75:54:be:be:df:a0:51:0a:2d:7b:
                    b8:ae:1a:c7:e4:37:33:16:51:97:15:4c:38:a2:3b:
                    f0:0d:2a:3f:49:be:f3:49:89:58:3f:b2:f4:86:da:
                    7b:f0:c6:fd:d3:49:09:86:d2:f2:19:cf:cc:85:30:
                    a6:68:17:1d:4f:4a:1e:2f:e4:e4:9c:fe:e9:43:c6:
                    86:50:6e:d3:61:29:4d:d7:20:8f:77:99:3d:84:fd:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8D:23:27:2F:57:E5:CC:14:9D:0A:94:68:92:90:FD:11:B7:E6:67
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:cd:25:83:4c:4b:76:bc:7f:c4:7c:66:91:74:dc:99:ef:50:
         24:fd:93:94:2c:23:37:32:4f:64:3d:7d:26:1d:bf:6f:a0:e3:
         fe:98:c7:dd:5e:da:bf:5e:48:6d:5c:b7:37:78:a6:95:a6:81:
         2d:84:97:1f:2a:74:8e:48:70:1c:75:ab:58:dd:f6:eb:ef:b9:
         21:da:18:b9:a2:26:b8:b9:62:47:82:f5:5a:be:36:28:c3:41:
         d7:3e:86:37:d1:7b:ba:f1:eb:88:13:54:a6:de:f7:3a:5b:fd:
         7a:a0:cb:9a:8d:59:6c:39:0f:55:13:2b:d2:b2:86:33:be:79:
         a5:ed:44:b3:71:00:9d:60:08:e3:4f:36:15:5d:45:fc:7d:e7:
         89:bf:61:48:89:35:7a:77:77:b3:40:74:aa:31:82:f3:f7:08:
         29:e8:10:7c:53:08:9c:43:09:55:5f:8e:8f:ae:a8:3a:a6:2c:
         c6:9f:a5:8f:fd:bd:2b:49:df:88:d7:80:38:69:3f:3f:52:33:
         fb:77:dc:e2:16:a1:52:b5:de:cf:44:09:d8:ac:a4:92:e5:d6:
         63:1e:2b:81:08:e5:1d:4b:65:1a:0c:17:6d:e8:9a:cd:b1:a1:
         79:a8:f0:a9:0e:98:82:ef:39:53:cf:9f:c9:10:42:fc:f5:a7:
         1a:5e:b4:59
-----BEGIN CERTIFICATE-----
MIIEkTCCA3mgAwIBAgIUGJcyKSvJlCZa5inSEgvjiSHP+QEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA1MTMwMzU0NTVaFw0yNDA1MTEwMzU5NTVaMDMxMTAvBgNV
BAMTKDUzOEQyMzI3MkY1N0U1Q0MxNDlEMEE5NDY4OTI5MEZEMTFCN0U2NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZPK4f4vbY9eDld5SN73abI89F
oFMhPuhYnDB8mcWWbrVyL3/hwCZRGB4LXeFJbXkkinBp0aTvlj0CNc4vjHDXk+NH
kaJ4f8oge78xJfiQA4NLAzM7A0mBQZ+C9H14hiDWUJ2Wcec5X6v2Mt4l1fjc58Cq
fl1J+LwPBuAnLoROCj0jH6NUH7jKmAvwOvt/xl0cEZ9diR2J/wUPORFL0Zg0fHAk
VWeioq5sdVS+vt+gUQote7iuGsfkNzMWUZcVTDiiO/ANKj9JvvNJiVg/svSG2nvw
xv3TSQmG0vIZz8yFMKZoFx1PSh4v5OSc/ulDxoZQbtNhKU3XII93mT2E/ejbAgMB
AAGjggGbMIIBlzAdBgNVHQ4EFgQUU40jJy9X5cwUnQqUaJKQ/RG35mcwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBE
BggrBgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDQ3My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoS3UcQMA0GCSqGSIb3DQEBCwUA
A4IBAQAFzSWDTEt2vH/EfGaRdNyZ71Ak/ZOULCM3Mk9kPX0mHb9voOP+mMfdXtq/
XkhtXLc3eKaVpoEthJcfKnSOSHAcdatY3fbr77kh2hi5oia4uWJHgvVavjYow0HX
PoY30Xu68euIE1Sm3vc6W/16oMuajVlsOQ9VEyvSsoYzvnml7USzcQCdYAjjTzYV
XUX8feeJv2FIiTV6d3ezQHSqMYLz9wgp6BB8UwicQwlVX46Prqg6pizGn6WP/b0r
Sd+I14A4aT8/UjP7d9ziFqFStd7PRAnYrKSS5dZjHiuBCOUdS2UaDBdt6JrNsaF5
qPCpDpiC7zlTz5/JEEL89acaXrRZ
-----END CERTIFICATE-----