Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS206016.roa
File:                     AS206016.roa (raw, json)
Hash identifier:          jLNwpTvW0wCZSvc8BzXe7Y1giij5uMbs+aha462r3hs=
Subject key identifier:   32:0B:10:24:6E:DE:AD:3F:FE:87:AB:44:6B:CA:BD:8F:26:9A:14:74
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       0CAE37D8BEB65A8A3F9F7049A15254E6F5CFC503
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS206016.roa
Signing time:             Mon 10 Apr 2023 03:31:34 +0000
ROA not before:           Mon 10 Apr 2023 03:26:34 +0000
ROA not after:            Mon 08 Apr 2024 03:31:34 +0000
asID:                     206016
IP address blocks:        2a12:dd47:8006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ae:37:d8:be:b6:5a:8a:3f:9f:70:49:a1:52:54:e6:f5:cf:c5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:34 2023 GMT
            Not After : Apr  8 03:31:34 2024 GMT
        Subject: CN=320B10246EDEAD3FFE87AB446BCABD8F269A1474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:59:69:2c:ec:d1:98:c2:92:31:af:dd:56:e2:
                    b0:76:36:79:fc:80:94:30:f5:3a:ee:6a:f2:bd:68:
                    82:18:69:ee:fd:c7:d6:bb:7e:9a:14:3d:f4:90:3f:
                    5e:0f:17:91:3b:ef:dc:f4:33:2a:12:9c:32:4e:25:
                    cb:c7:59:43:e9:71:a7:3a:5e:9d:ee:0b:13:8e:1d:
                    8f:60:32:ce:d7:f5:52:17:0e:52:0a:71:60:84:1f:
                    fd:74:dd:26:d0:bd:16:1e:5a:5a:13:30:b4:fa:a7:
                    0f:bf:23:75:1d:84:02:81:46:fb:36:99:d2:5c:17:
                    38:24:06:29:0f:14:98:9a:38:b2:2d:53:c4:49:60:
                    1d:f1:62:bf:07:a0:1c:e9:5c:c3:e0:6e:c0:76:df:
                    25:dc:a6:ac:5a:8e:71:69:ad:4d:3c:c4:52:88:ef:
                    82:79:73:da:30:f7:8d:2f:0b:7c:b5:7d:22:b4:8e:
                    6b:11:c5:7d:4a:72:82:27:85:6f:d9:c4:9f:8c:24:
                    2c:d6:64:03:ad:bc:81:23:5a:7c:90:3d:23:1d:1d:
                    48:6a:a4:ad:6c:48:fe:51:47:98:56:da:cc:2a:b4:
                    f2:c9:19:07:42:92:c9:ed:27:fd:7f:be:8f:93:de:
                    5e:55:69:2d:d1:aa:e4:e4:56:46:ea:2b:a7:cb:a9:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0B:10:24:6E:DE:AD:3F:FE:87:AB:44:6B:CA:BD:8F:26:9A:14:74
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS206016.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8006::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:2d:5c:de:1d:e9:e0:2c:f8:ea:9c:6f:f7:a9:7c:02:53:5e:
         68:e0:26:d4:bd:78:97:00:9c:ef:c5:43:92:a0:98:a0:aa:ef:
         96:f1:a7:e8:27:c1:b3:b9:c8:91:46:24:22:45:c7:c4:f0:0c:
         f0:4d:20:5f:03:ec:89:53:7c:06:4b:3a:c6:6f:fc:b1:c1:b8:
         42:56:bc:c2:60:c6:0f:7a:10:53:33:36:02:81:77:01:52:9a:
         0d:69:33:a0:0a:35:6f:a6:45:65:12:b1:e5:f1:09:87:89:96:
         8f:72:01:2a:b5:19:fb:93:65:71:91:fd:3c:38:86:3c:91:a9:
         dc:71:4f:e5:79:37:cf:b5:ee:97:d2:68:9b:2c:c6:c6:d7:7d:
         45:24:bf:30:49:52:50:cc:1e:f7:b9:28:33:ae:fb:ff:25:5e:
         fc:e9:8f:9a:ef:1c:05:56:26:1a:be:71:d5:a4:e6:86:62:3b:
         59:39:b2:f1:aa:85:a0:76:b9:da:04:03:42:8c:a2:2b:12:49:
         60:08:5b:c7:ec:70:92:77:8c:d9:ff:c5:c8:59:5c:02:26:4f:
         91:95:0f:e6:29:48:2a:13:b4:f8:3a:5f:bb:76:aa:9e:1a:fb:
         66:10:01:cb:93:ef:dd:0c:74:40:d3:e8:15:a1:f0:9a:6c:0f:
         9e:19:ed:8a
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUDK432L62Woo/n3BJoVJU5vXPxQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzRaFw0yNDA0MDgwMzMxMzRaMDMxMTAvBgNV
BAMTKDMyMEIxMDI0NkVERUFEM0ZGRTg3QUI0NDZCQ0FCRDhGMjY5QTE0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiWWks7NGYwpIxr91W4rB2Nnn8
gJQw9TruavK9aIIYae79x9a7fpoUPfSQP14PF5E779z0MyoSnDJOJcvHWUPpcac6
Xp3uCxOOHY9gMs7X9VIXDlIKcWCEH/103SbQvRYeWloTMLT6pw+/I3UdhAKBRvs2
mdJcFzgkBikPFJiaOLItU8RJYB3xYr8HoBzpXMPgbsB23yXcpqxajnFprU08xFKI
74J5c9ow940vC3y1fSK0jmsRxX1KcoInhW/ZxJ+MJCzWZAOtvIEjWnyQPSMdHUhq
pK1sSP5RR5hW2swqtPLJGQdCksntJ/1/vo+T3l5VaS3RquTkVkbqK6fLqR8tAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUMgsQJG7erT/+h6tEa8q9jyaaFHQwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDYwMTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgAYwDQYJKoZIhvcNAQEL
BQADggEBANAtXN4d6eAs+Oqcb/epfAJTXmjgJtS9eJcAnO/FQ5KgmKCq75bxp+gn
wbO5yJFGJCJFx8TwDPBNIF8D7IlTfAZLOsZv/LHBuEJWvMJgxg96EFMzNgKBdwFS
mg1pM6AKNW+mRWUSseXxCYeJlo9yASq1GfuTZXGR/Tw4hjyRqdxxT+V5N8+17pfS
aJssxsbXfUUkvzBJUlDMHve5KDOu+/8lXvzpj5rvHAVWJhq+cdWk5oZiO1k5svGq
haB2udoEA0KMoisSSWAIW8fscJJ3jNn/xchZXAImT5GVD+YpSCoTtPg6X7t2qp4a
+2YQAcuT790MdEDT6BWh8JpsD54Z7Yo=
-----END CERTIFICATE-----