Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS211411.roa
File:                     AS211411.roa (raw, json)
Hash identifier:          hBxVjjk/4DDwjUY9y9ltP5JAP9DMkM6ol+j4C4pOR9A=
Subject key identifier:   29:5C:66:22:15:7B:AC:16:D1:BA:E5:4F:B4:8C:62:E5:A0:9B:49:89
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       14509C1518FD496C14C03B965E5C50FE8CCB1252
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS211411.roa
Signing time:             Mon 10 Apr 2023 03:31:43 +0000
ROA not before:           Mon 10 Apr 2023 03:26:43 +0000
ROA not after:            Mon 08 Apr 2024 03:31:43 +0000
asID:                     211411
IP address blocks:        2a12:dd47:8060::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:50:9c:15:18:fd:49:6c:14:c0:3b:96:5e:5c:50:fe:8c:cb:12:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:43 2023 GMT
            Not After : Apr  8 03:31:43 2024 GMT
        Subject: CN=295C6622157BAC16D1BAE54FB48C62E5A09B4989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:02:6a:a8:3e:a3:c1:e4:8a:2f:40:b5:c8:
                    db:39:94:66:ba:84:6b:4c:89:d0:3f:70:51:e2:58:
                    90:80:4b:62:b2:c3:33:7d:8a:15:c2:69:15:0e:cb:
                    a0:c6:6f:0c:c6:ac:2d:2f:c5:5c:29:7e:66:cb:79:
                    e1:96:ff:a8:db:0b:6a:78:1b:c1:d2:2c:ec:ed:d9:
                    f5:fe:8f:17:74:14:e5:fc:8d:9e:22:92:f8:76:3e:
                    e4:15:77:d2:bf:22:13:25:c2:88:9d:b3:7a:47:e9:
                    19:d3:cc:98:19:d4:13:e1:50:a4:93:05:8d:21:be:
                    0e:e0:c3:4f:3e:4d:a2:d7:e7:87:73:52:3f:81:ff:
                    2c:d3:91:35:d0:7f:b5:77:b3:af:2b:48:b5:93:33:
                    c2:f0:8d:02:ae:87:1d:10:1e:aa:76:9d:56:f8:8c:
                    49:e5:b6:b3:87:08:b0:49:2b:b7:8e:5b:15:48:5d:
                    f8:7f:dd:32:35:e2:2b:c7:33:ef:43:6f:77:9e:ca:
                    44:0d:76:fb:84:62:f1:9c:9b:d0:c8:21:a3:cb:3f:
                    fe:16:0c:be:5e:45:a5:6b:6b:fe:ec:ee:a4:10:9f:
                    d9:e7:14:ce:19:d3:80:7f:e5:b8:c3:02:bf:01:33:
                    cc:28:9f:43:ea:3c:81:36:57:b7:e3:8d:51:9d:a4:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:66:22:15:7B:AC:16:D1:BA:E5:4F:B4:8C:62:E5:A0:9B:49:89
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS211411.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8060::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:ee:44:75:d6:0c:68:ba:1a:9f:08:fc:26:44:1d:bd:a1:51:
         3a:c3:aa:94:37:29:bd:a8:74:ad:60:b6:79:03:b6:59:02:5e:
         e6:e8:4c:dc:bd:5c:d8:04:3d:af:aa:d4:72:cf:53:3b:09:cd:
         6c:e6:70:bc:df:2d:c6:6f:8d:bb:df:a8:61:bd:07:22:49:3b:
         44:06:eb:08:9e:74:f8:42:75:a7:82:5d:07:d7:1b:23:d1:bc:
         c9:ac:79:bc:5d:e6:be:01:eb:04:6e:4d:19:4f:07:31:59:14:
         6f:18:77:c4:4a:a0:b2:86:31:78:f6:8c:04:6f:8f:b3:db:53:
         30:56:da:44:80:c4:42:ab:10:31:a5:14:cb:b0:35:67:01:0e:
         19:32:22:a5:48:19:86:0c:0f:dd:e4:6b:6a:d6:6f:e9:12:93:
         69:8e:4f:b0:12:82:e1:c0:1e:cc:3a:2c:6c:83:09:0b:1a:85:
         91:12:2d:ec:28:bd:7a:91:80:03:ee:57:23:d6:54:2d:4d:df:
         9f:2e:47:77:ad:75:52:d4:6e:be:36:97:e7:8e:60:6b:30:7d:
         29:b0:51:03:e7:13:0c:79:66:44:3c:48:9c:9e:f0:5e:60:f3:
         d8:98:24:c9:44:46:79:0a:1b:4f:fb:a1:1a:22:e7:86:48:04:
         24:8b:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----