Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS209652.roa
File:                     AS209652.roa (raw, json)
Hash identifier:          dlKzEpL+NOD4Xynn8h0a8GZexNk4t8HUVE1LoyogSMw=
Subject key identifier:   6F:BB:D9:22:27:DD:6C:42:7F:78:85:5A:CD:F4:AA:34:2B:BD:6D:30
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       6C68EFA4D516CC0340701E8015355A107BD235B0
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS209652.roa
Signing time:             Mon 10 Apr 2023 03:31:49 +0000
ROA not before:           Mon 10 Apr 2023 03:26:49 +0000
ROA not after:            Mon 08 Apr 2024 03:31:49 +0000
asID:                     209652
IP address blocks:        2a12:dd47:83c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:68:ef:a4:d5:16:cc:03:40:70:1e:80:15:35:5a:10:7b:d2:35:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:49 2023 GMT
            Not After : Apr  8 03:31:49 2024 GMT
        Subject: CN=6FBBD92227DD6C427F78855ACDF4AA342BBD6D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:a6:8a:95:3a:8c:a3:37:28:f0:b6:17:5d:
                    81:ed:8e:77:c4:0b:60:80:c5:71:68:ce:c0:95:1d:
                    69:33:18:6e:bb:33:e0:d3:de:c7:ab:cd:69:9c:82:
                    b8:a9:77:20:c2:49:fc:39:49:70:e8:be:8b:22:c9:
                    1b:85:b8:29:07:43:d0:5b:70:72:74:e3:f8:45:21:
                    7e:17:ac:c0:25:f6:a6:76:d0:b5:69:5e:f8:bb:f1:
                    6a:09:be:5f:d2:f0:d3:06:86:6f:42:bc:2b:f6:a4:
                    06:74:33:f8:5f:49:83:7f:4b:38:fe:13:1f:01:70:
                    29:87:01:33:f3:42:f2:bc:55:99:43:2d:61:b3:69:
                    f5:23:01:3d:4b:f1:6f:5e:31:fa:1a:4c:53:5e:2d:
                    49:f8:87:ed:b7:3d:56:c3:6b:1a:6f:24:4f:55:9d:
                    10:1a:40:ce:f2:5d:bb:7b:92:e6:ea:60:68:96:2a:
                    64:47:df:a6:e6:b5:22:fc:53:c9:bd:b3:2c:84:91:
                    9c:cc:69:d7:56:38:28:cf:31:2b:a3:e6:51:b5:80:
                    85:5c:0d:94:7c:be:7a:94:90:da:7d:40:b4:b8:b9:
                    52:45:b1:a1:21:5f:d3:2a:08:1d:87:f6:69:ed:66:
                    98:93:05:25:b9:4d:be:59:c6:6a:09:cd:ed:57:02:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BB:D9:22:27:DD:6C:42:7F:78:85:5A:CD:F4:AA:34:2B:BD:6D:30
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS209652.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:6b:d1:b8:02:fc:ab:d9:bb:f0:9f:ed:fe:b5:77:3c:32:c1:
         7e:b7:cd:d7:77:71:3c:58:95:48:a7:0a:34:b2:fb:31:a5:9a:
         33:f7:12:52:6a:f4:ee:00:b8:35:47:7f:df:fb:20:de:09:dd:
         e9:9f:ed:27:c9:5f:ac:93:aa:f9:9f:98:c3:87:7e:4a:a5:83:
         d6:49:1b:50:e6:24:b4:85:79:2c:1e:79:b7:bf:c1:b6:c2:56:
         d7:ad:85:f0:b3:e4:f9:22:2a:64:00:ed:80:48:3c:54:3a:f2:
         ed:c7:80:18:cf:89:4f:9c:45:c5:10:9b:9a:96:57:4e:c3:4a:
         7f:e3:8b:91:bb:40:c4:9f:dc:b3:77:db:68:72:c7:da:ee:5b:
         ec:a1:34:db:93:88:c2:2c:cf:72:f0:08:83:f4:4b:bb:53:d8:
         88:1b:9b:68:bc:d9:d7:1f:a5:7e:c0:ab:b9:37:a3:94:a2:4c:
         9f:55:b8:23:32:66:8d:b1:90:4d:d3:82:b2:44:a4:0f:df:cb:
         c2:d1:ff:b0:e0:3a:ab:0d:05:c8:ac:95:34:20:45:ed:b0:57:
         29:09:fc:ed:d7:3b:75:3c:80:fe:40:f4:c5:c0:40:31:02:98:
         ce:a5:f3:3f:b9:dd:85:7b:de:7b:9c:58:9f:f4:58:39:0a:15:
         70:eb:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----