Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS205421.roa
File:                     AS205421.roa (raw, json)
Hash identifier:          B5azVUlZZeGZGQ+Q/pUX2rTsIh05YXz0THvEEPFLYCg=
Subject key identifier:   52:D3:42:F9:F4:35:6B:CA:1B:B8:73:59:77:1D:1E:3A:72:E5:F4:11
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       44AD52F6BACB60DAE5C71C353118FA931A25209B
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS205421.roa
Signing time:             Mon 10 Apr 2023 03:31:39 +0000
ROA not before:           Mon 10 Apr 2023 03:26:39 +0000
ROA not after:            Mon 08 Apr 2024 03:31:39 +0000
asID:                     205421
IP address blocks:        2a12:dd47:8220::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ad:52:f6:ba:cb:60:da:e5:c7:1c:35:31:18:fa:93:1a:25:20:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:39 2023 GMT
            Not After : Apr  8 03:31:39 2024 GMT
        Subject: CN=52D342F9F4356BCA1BB87359771D1E3A72E5F411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:9c:97:a0:7c:c7:bd:5e:c5:9b:c1:9e:89:
                    df:45:78:2b:96:58:01:0c:26:ca:db:80:4b:97:df:
                    ad:fc:35:ba:05:45:5e:64:cf:89:f6:b8:47:ee:de:
                    66:78:97:2a:0b:f1:99:22:1b:29:43:57:b7:a7:f8:
                    01:1a:08:1a:5c:7d:c9:65:07:66:10:ed:a4:fd:92:
                    8b:4d:ce:ed:5c:9d:f7:62:ce:bb:73:cb:a0:55:4d:
                    44:6d:47:a2:c2:a4:3b:f6:34:34:48:5f:d1:6e:64:
                    c8:15:a3:48:38:3d:c9:3b:bc:d6:57:a9:16:cf:c2:
                    60:66:42:39:29:d8:96:07:21:26:4d:49:c6:cc:4e:
                    ce:eb:29:d3:ed:34:21:40:ca:f2:e3:f0:15:96:02:
                    5a:db:08:46:8b:e2:86:11:13:c7:d6:f6:76:9e:62:
                    51:ac:f4:93:15:1b:12:6e:21:23:86:f6:1d:55:a4:
                    c2:f2:fb:16:73:10:1f:06:07:19:17:af:e9:5f:44:
                    f4:75:d0:58:3b:b8:b6:ab:bc:e4:6a:e9:bf:f7:49:
                    07:75:37:a4:bb:32:83:3c:3a:26:4b:47:78:9f:53:
                    87:28:08:cc:bf:66:55:6d:e2:d3:b5:fd:a7:32:59:
                    9f:57:ae:ee:23:ad:4e:2d:ad:72:a3:a8:29:5f:88:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D3:42:F9:F4:35:6B:CA:1B:B8:73:59:77:1D:1E:3A:72:E5:F4:11
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS205421.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8220::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:9e:a7:2f:93:77:61:e0:3b:0e:1f:8b:53:32:ee:3d:71:
         3b:84:93:bd:83:d8:0b:3e:4e:d2:d5:1b:c8:0c:16:48:84:2b:
         63:c4:67:c5:f1:81:70:59:b8:e0:48:18:4c:8b:3a:b1:0f:77:
         b6:b7:c2:2f:32:0e:4d:8d:1d:5f:32:af:eb:75:01:52:94:46:
         8d:f9:29:eb:d7:40:4a:de:13:3c:25:7b:af:eb:75:df:9f:58:
         fe:14:67:7b:6b:fd:a7:29:63:fb:ea:79:1b:9d:a2:96:c1:9f:
         18:0f:40:3d:56:03:3f:8f:3b:7a:c5:5a:70:b3:39:12:83:9d:
         e5:11:97:11:dd:f6:15:94:eb:3c:bb:8b:2b:a3:be:8f:6f:fd:
         d3:79:6c:8a:b5:99:8e:24:db:2a:32:72:ac:a8:9d:0b:ac:6a:
         ba:45:c9:31:80:9d:52:a8:b2:f6:62:3e:2e:7b:1d:eb:1a:5e:
         8a:b9:30:79:2c:bc:cd:fb:1a:78:ba:e9:8e:f9:20:1b:c2:01:
         94:64:57:88:d0:1f:30:f2:12:10:21:d5:07:d0:69:71:d8:40:
         c1:0c:46:7a:67:69:5d:72:7e:be:a8:5f:9e:7d:5f:a1:1b:f3:
         71:fb:bb:48:4b:eb:db:ed:5b:a7:e1:8b:02:1d:fd:ae:2f:7d:
         b7:f7:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----