Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS204876.roa
File:                     AS204876.roa (raw, json)
Hash identifier:          gx6fJVn0MyEZ7jlfEbaiinbzfyFau4VVgNsKZCd79rY=
Subject key identifier:   72:49:DE:86:4C:EC:7A:83:3B:35:E8:C5:94:69:B8:D9:97:1D:B1:99
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       0F7F5BD99BC7DB9104EA71692F63A5B0DAB82935
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS204876.roa
Signing time:             Mon 10 Apr 2023 03:31:49 +0000
ROA not before:           Mon 10 Apr 2023 03:26:49 +0000
ROA not after:            Mon 08 Apr 2024 03:31:49 +0000
asID:                     204876
IP address blocks:        2a12:dd47:8008::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7f:5b:d9:9b:c7:db:91:04:ea:71:69:2f:63:a5:b0:da:b8:29:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:49 2023 GMT
            Not After : Apr  8 03:31:49 2024 GMT
        Subject: CN=7249DE864CEC7A833B35E8C59469B8D9971DB199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:50:26:6c:bc:7b:a6:1f:e4:47:2a:b0:ec:
                    fd:8f:95:a1:a7:77:70:94:42:cb:ff:c5:bb:fb:08:
                    b0:0c:d5:9a:5e:6a:26:54:39:2c:d5:67:f2:04:46:
                    6e:de:a2:47:ae:f9:28:3c:9b:dc:28:63:37:f8:07:
                    18:36:cc:6d:e4:88:be:c0:23:77:c2:a6:8a:0f:12:
                    2e:38:10:72:bc:18:b6:cb:1c:ca:00:87:db:d1:79:
                    2e:3f:90:63:7a:7e:64:33:05:44:f6:3b:30:8d:60:
                    af:32:41:7b:c2:c8:14:81:b2:1d:62:16:69:08:83:
                    91:3a:0a:f4:e0:0b:84:be:9e:3c:40:31:63:e3:01:
                    be:74:a9:47:02:8a:f5:60:21:92:8d:fa:3e:41:94:
                    24:98:b0:40:a9:b9:00:2f:63:0d:58:41:22:ab:12:
                    45:b1:47:20:04:e5:ad:af:4c:55:3d:be:95:c5:11:
                    a5:ba:ec:59:54:1a:77:54:ae:f0:9c:4c:d1:60:8e:
                    f8:fb:14:fd:46:fb:73:87:b7:0d:e4:d7:80:91:c1:
                    2c:ed:32:7f:13:ac:26:48:71:8a:66:78:72:0e:31:
                    fd:72:0a:78:60:f4:02:5a:13:db:34:e7:1a:2c:43:
                    80:0a:66:ff:4b:21:01:24:0e:7c:95:f6:8a:0f:b1:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:49:DE:86:4C:EC:7A:83:3B:35:E8:C5:94:69:B8:D9:97:1D:B1:99
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS204876.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8008::/45

    Signature Algorithm: sha256WithRSAEncryption
         36:5c:61:79:e0:42:f1:16:93:70:57:08:52:13:7c:a9:06:ee:
         e3:0e:64:09:2d:89:28:f3:45:6f:9a:d6:e8:06:d9:3b:83:ad:
         98:27:f3:d3:27:43:b3:a2:02:70:d3:50:f6:f9:a0:fd:34:45:
         17:f2:53:75:01:1f:21:2c:27:c3:48:a7:2f:b5:8e:17:9a:37:
         f6:2c:22:a0:ce:08:1a:62:30:d5:78:51:f2:ce:a7:f2:b0:80:
         e8:d9:ec:90:a4:cb:dd:1f:a5:f6:8f:29:82:60:ea:6b:b4:d5:
         8b:85:e8:54:ef:bf:64:20:c5:f9:19:e6:a6:c8:1b:8e:1c:57:
         44:18:e6:55:f9:77:e5:64:80:c7:b2:c6:59:6a:24:86:c6:62:
         27:ab:23:97:99:33:f3:f5:55:79:58:30:4b:37:28:1d:fa:ba:
         f7:c2:02:75:89:f8:2b:ac:03:63:a2:cf:53:69:24:d4:8e:dd:
         dc:03:82:c5:a4:a4:8e:9b:8c:de:3a:37:31:d5:ad:68:a1:a9:
         76:54:6b:9d:14:88:8d:3d:f5:1a:23:56:15:85:63:f6:77:7e:
         e5:5f:fb:dc:b0:75:47:aa:5f:2e:91:0b:07:1d:83:ef:64:fa:
         f9:c5:57:23:26:64:0e:98:af:7f:d6:7d:f8:43:61:be:b9:38:
         44:ea:cc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----