Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS205431.roa
File:                     AS205431.roa (raw, json)
Hash identifier:          LO/lyBqEyNhbd9ZNIIomzIk9HV3Ur+8apcRehruYc5k=
Subject key identifier:   27:A0:ED:44:F2:6A:4F:FF:B5:91:C6:6E:FB:AC:B6:42:61:9D:8F:11
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       53AF006286364EFA0E9F2E48B54BE61375433F14
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS205431.roa
Signing time:             Mon 10 Apr 2023 03:31:50 +0000
ROA not before:           Mon 10 Apr 2023 03:26:50 +0000
ROA not after:            Mon 08 Apr 2024 03:31:50 +0000
asID:                     205431
IP address blocks:        2a12:dd40::/31 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:af:00:62:86:36:4e:fa:0e:9f:2e:48:b5:4b:e6:13:75:43:3f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:50 2023 GMT
            Not After : Apr  8 03:31:50 2024 GMT
        Subject: CN=27A0ED44F26A4FFFB591C66EFBACB642619D8F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:3a:7b:5a:6e:60:96:41:d7:40:54:09:d1:
                    89:70:34:23:63:21:a6:c9:5e:4b:a1:18:d2:dc:97:
                    44:d8:d3:cd:28:3e:b5:9c:72:8f:7c:80:9e:e1:a2:
                    d5:bd:1f:55:9d:66:02:b9:5f:20:08:8c:5c:14:28:
                    fd:07:81:14:71:16:52:e4:5f:fe:57:b9:15:4f:cb:
                    b5:38:1e:5a:50:13:fa:9a:f9:7d:5c:8a:d2:a9:a3:
                    88:29:1b:49:f8:38:df:a9:bb:f2:19:61:86:f4:ae:
                    2c:29:f5:d5:7e:0b:70:8d:09:e6:a4:c3:07:d9:0f:
                    2c:65:3c:b8:39:eb:f3:43:fa:fa:9b:2e:51:d4:e5:
                    0c:98:51:a6:d7:9f:be:0d:bb:86:e3:b7:b4:95:a3:
                    96:b9:f3:02:5c:2b:15:16:ee:80:c0:a7:fd:4e:0f:
                    d9:b8:e6:14:61:7e:34:9a:e5:f7:87:97:7b:92:ba:
                    f3:dc:1d:34:12:24:e9:cd:22:cf:37:47:f6:7b:c0:
                    8d:49:e2:10:ef:25:47:51:89:06:df:77:98:bc:b3:
                    ea:34:34:24:db:de:60:cf:52:13:73:62:b7:4e:fc:
                    2b:aa:62:19:d8:13:29:fb:a6:b2:5e:a5:0b:53:e8:
                    8d:75:17:b0:67:e5:cb:d2:a0:fc:75:01:d6:5f:11:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A0:ED:44:F2:6A:4F:FF:B5:91:C6:6E:FB:AC:B6:42:61:9D:8F:11
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS205431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd40::/31

    Signature Algorithm: sha256WithRSAEncryption
         94:71:73:9a:67:2f:8a:73:f7:21:a0:de:55:11:17:fa:91:c5:
         ce:6f:d8:36:9a:39:d2:c6:9f:d8:d6:9a:7a:42:e8:73:1d:b3:
         6c:eb:08:a0:40:72:0a:5e:84:b6:96:dd:1d:85:f8:6a:b8:88:
         3d:a7:f4:a1:14:e2:ec:7f:39:4a:33:00:40:54:b3:91:3f:35:
         83:35:55:b1:c3:b2:0b:a9:b5:ff:31:59:b4:ca:8b:e8:ee:ab:
         e2:cb:23:00:75:b9:95:56:d2:f3:da:c5:ae:4e:a8:f9:27:84:
         7c:3b:20:9c:eb:7a:b4:db:8d:2a:49:15:f8:26:c6:ed:42:42:
         ad:a7:a9:89:31:75:cc:6b:0f:cd:71:c5:f9:9f:c6:e8:4b:77:
         5b:f8:ee:16:27:6b:62:04:34:5c:95:f0:c1:b7:71:8b:c6:bb:
         df:d1:6b:18:80:8d:ff:7f:db:cb:75:df:11:cc:0d:5d:16:b7:
         82:f8:cf:43:a7:5f:d4:f5:3a:da:2c:f3:4c:58:60:49:78:cb:
         3a:9c:f6:d2:62:9a:3f:58:e2:1e:3c:b8:97:cd:77:ba:95:6b:
         33:ed:09:fc:ed:8a:c0:35:06:8e:46:a2:13:d6:fb:6c:de:c0:
         2b:b4:4b:80:61:46:35:15:9b:89:88:fb:8a:44:78:81:9c:4d:
         69:90:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----