Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS211233.roa
File:                     AS211233.roa (raw, json)
Hash identifier:          rFegexLG4wAqkbEUDNc+GefzA6qxxv2CB1v8VsWJMlk=
Subject key identifier:   32:6D:08:D5:0B:EF:8E:C9:85:78:8D:57:1F:78:27:18:D9:D9:D4:1A
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2AC782551202EA806890EE1BF57DD7279B4A9199
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS211233.roa
Signing time:             Mon 10 Apr 2023 03:31:33 +0000
ROA not before:           Mon 10 Apr 2023 03:26:33 +0000
ROA not after:            Mon 08 Apr 2024 03:31:33 +0000
asID:                     211233
IP address blocks:        2a12:dd47:8050::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c7:82:55:12:02:ea:80:68:90:ee:1b:f5:7d:d7:27:9b:4a:91:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:33 2023 GMT
            Not After : Apr  8 03:31:33 2024 GMT
        Subject: CN=326D08D50BEF8EC985788D571F782718D9D9D41A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:80:1c:a5:5f:58:6f:be:9d:97:e4:68:50:8c:
                    fd:9d:d2:1d:4e:80:b4:55:58:af:62:4f:b2:5c:1a:
                    c7:ce:e2:03:b3:c8:3f:95:99:df:93:46:bd:3d:5e:
                    b4:9e:23:47:6e:06:73:29:94:19:4a:97:72:63:98:
                    27:b6:cb:7c:79:3d:fc:54:76:ed:c1:df:ec:65:e8:
                    64:a1:dd:77:b9:76:14:48:83:13:3c:57:ae:8c:9d:
                    8b:89:27:7a:4a:09:a8:11:20:df:8e:4d:e6:64:1b:
                    6e:d9:90:6d:95:47:77:e1:e9:e0:68:73:13:41:b3:
                    a1:32:7a:84:8e:ab:93:b1:1c:10:7c:2e:4e:41:f9:
                    14:c5:2f:bf:4b:86:e5:4a:40:ef:0d:73:1e:27:bf:
                    86:fa:6d:21:85:b4:2e:59:af:d7:26:47:ec:7b:69:
                    01:2b:5e:24:e7:1c:5e:f5:dd:08:e3:ca:20:4e:dd:
                    74:51:ce:8c:93:08:72:04:56:45:e2:42:97:35:df:
                    44:e0:f7:ae:45:35:7d:60:31:cf:e0:1f:90:4e:ee:
                    c4:fd:95:e0:46:fc:1b:14:a2:74:27:57:93:18:89:
                    1a:e4:89:39:61:69:a2:1e:d9:50:7e:37:50:75:cc:
                    16:0c:45:27:fd:2f:cf:29:8b:36:37:8a:33:f7:47:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6D:08:D5:0B:EF:8E:C9:85:78:8D:57:1F:78:27:18:D9:D9:D4:1A
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS211233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8050::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:31:57:46:6e:bc:af:d3:b8:b1:c8:30:7a:cd:78:1c:22:52:
         bf:2d:d1:bb:15:79:93:01:43:3c:bc:42:1d:05:1c:80:3b:d6:
         29:7a:56:b7:aa:16:68:83:1f:7f:46:62:6f:35:1b:f8:97:a7:
         2a:c7:3b:1d:cb:e4:ce:76:16:c1:7b:d0:f8:9c:59:05:fa:5a:
         5a:66:32:54:fc:53:0a:dc:dd:70:28:dc:b0:95:53:20:67:b7:
         64:4b:0d:c7:a1:ea:76:5c:74:20:a1:20:6e:1c:d5:c5:14:59:
         c2:e2:2a:0b:44:db:9c:3f:ea:79:06:60:a1:4c:16:54:ac:fe:
         d5:7e:fa:c8:22:be:a6:c0:67:b9:e7:d9:24:ca:bd:26:b5:5e:
         a3:dc:00:02:8b:58:5b:36:bf:69:f3:9d:f5:e9:94:a9:59:f0:
         81:e7:d0:6f:d4:b1:8f:67:4c:be:7d:ec:bc:5a:58:db:52:64:
         02:f2:3c:31:e1:ca:d6:f3:36:6d:b1:e1:7c:92:43:42:79:6b:
         61:9b:0d:57:d5:ba:79:0a:a2:a6:f6:e8:38:93:87:a3:ad:1d:
         9d:d7:ff:d6:e7:8d:65:46:2d:27:a9:d3:b7:a3:78:b5:e4:dc:
         b3:5f:86:81:3a:50:d4:f8:3c:37:69:35:97:59:34:c8:0b:28:
         03:ce:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----