Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS208029.roa
File:                     AS208029.roa (raw, json)
Hash identifier:          /QgWW9VMlNGkor4vBHfrXCEmG8h1xN1Zcuf1pEAbQnk=
Subject key identifier:   A0:71:C7:BE:1D:E8:2D:FC:F0:AF:15:1F:CA:63:85:8C:47:5D:75:EE
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       1A440A885501891330B7349D9C637C165B229E41
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS208029.roa
Signing time:             Mon 10 Apr 2023 03:31:36 +0000
ROA not before:           Mon 10 Apr 2023 03:26:36 +0000
ROA not after:            Mon 08 Apr 2024 03:31:36 +0000
asID:                     208029
IP address blocks:        2a12:dd47:8041::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:44:0a:88:55:01:89:13:30:b7:34:9d:9c:63:7c:16:5b:22:9e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:36 2023 GMT
            Not After : Apr  8 03:31:36 2024 GMT
        Subject: CN=A071C7BE1DE82DFCF0AF151FCA63858C475D75EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:ed:62:08:5a:4a:09:fd:4f:ee:77:e9:41:
                    a4:da:26:17:f7:16:fd:e3:d2:f1:32:6d:1f:f0:a7:
                    e0:b0:92:a8:4f:bd:e2:8b:47:af:0a:7d:ac:cc:26:
                    f8:34:4c:82:d0:54:9f:a2:ec:25:f7:df:72:ac:7b:
                    e4:b8:fb:30:a4:b2:87:50:bc:38:78:db:df:19:e9:
                    de:6e:2c:ba:91:a1:ea:13:7b:d8:9e:bb:6f:b6:88:
                    c4:36:8e:fd:f9:5f:6f:7a:15:ae:af:d9:44:ce:7d:
                    28:cb:73:e4:f8:c9:88:c3:0d:d7:c0:0b:f6:47:57:
                    de:22:3f:e9:d3:40:48:35:5e:e7:6c:65:e9:85:59:
                    c4:1c:50:bf:fc:40:e9:c2:1a:e3:22:ba:22:62:e5:
                    78:21:2d:64:98:ee:fc:a4:ad:85:2d:27:c1:64:4d:
                    ad:2d:54:0a:b0:50:60:84:e9:5e:56:b1:f2:1d:36:
                    c2:aa:17:2c:27:43:f4:9a:da:ed:18:fa:0c:69:2c:
                    ba:ea:4a:14:ed:1a:55:5e:4e:28:30:39:b2:29:56:
                    96:f5:11:74:eb:ea:fd:84:a4:b1:7b:15:47:fc:a4:
                    c8:11:97:9c:94:36:7c:bd:2f:eb:14:ba:7c:3f:c3:
                    64:d1:34:b2:c9:f4:81:b0:0e:5c:fe:9f:d2:56:e5:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:71:C7:BE:1D:E8:2D:FC:F0:AF:15:1F:CA:63:85:8C:47:5D:75:EE
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS208029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8041::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:b3:7c:d3:54:d5:3d:58:29:1e:d1:d1:9c:e5:15:aa:55:c3:
         36:0b:7f:b4:77:60:fa:47:1e:3e:99:b6:03:8a:3e:89:a1:a1:
         dc:d0:48:b3:17:12:d4:d2:cb:c2:ac:01:1b:b6:ff:af:18:55:
         67:00:11:ba:4e:01:1d:e6:c6:55:5b:3a:c9:bc:18:1f:70:dd:
         62:78:41:7e:7a:53:63:a0:8a:a0:39:71:28:5b:1c:59:c0:f9:
         23:be:a6:1d:9f:f5:46:66:b9:69:54:a2:3a:6c:6e:bc:c5:69:
         4d:92:70:fe:41:78:7c:80:e5:e4:38:8c:cd:67:97:ca:69:2c:
         a8:1c:90:24:00:b3:97:55:29:b8:a6:df:1a:ce:3c:1f:0a:46:
         0e:d3:8b:15:7a:06:09:a2:e4:98:65:24:4e:34:89:61:3b:0b:
         c5:c1:38:e2:2a:40:9a:86:ae:2f:41:a9:ad:7f:68:a3:f9:7e:
         9b:61:95:b6:e8:82:5c:b8:b8:2b:ad:a7:50:d4:df:01:21:f0:
         1a:8f:3c:b4:6a:a6:a1:1f:57:d0:e1:df:4e:d1:aa:0d:57:51:
         2e:44:f4:f5:f0:47:ff:50:fc:4b:c2:d5:b8:6a:28:71:81:11:
         66:c3:be:83:3d:4c:c2:03:48:f9:cc:c0:38:ca:b3:69:c0:fa:
         07:c6:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----