Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS211877.roa
File:                     AS211877.roa (raw, json)
Hash identifier:          HlItzYT12fH/X1mxUNNKYGx47PLbZtxMmijtdTtONMk=
Subject key identifier:   8F:47:B4:75:6F:08:85:71:E2:C7:EA:6B:C7:98:14:2A:E6:3E:E9:CF
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5B21EEB03B55820754EBF9204565382A283A7511
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS211877.roa
Signing time:             Mon 10 Apr 2023 03:31:50 +0000
ROA not before:           Mon 10 Apr 2023 03:26:50 +0000
ROA not after:            Mon 08 Apr 2024 03:31:50 +0000
asID:                     211877
IP address blocks:        2a12:dd47:fb00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:21:ee:b0:3b:55:82:07:54:eb:f9:20:45:65:38:2a:28:3a:75:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:50 2023 GMT
            Not After : Apr  8 03:31:50 2024 GMT
        Subject: CN=8F47B4756F088571E2C7EA6BC798142AE63EE9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:b5:2f:2c:80:69:27:93:01:e8:40:73:43:
                    01:52:51:a1:f8:18:3c:f7:64:6e:7a:b8:28:42:84:
                    28:23:78:17:d8:ab:40:a1:27:07:3b:fd:f1:42:bf:
                    8d:37:d6:2a:81:42:69:34:6c:1f:88:90:9c:e4:52:
                    2e:a8:40:e3:17:02:cb:de:03:93:ac:f2:58:43:0e:
                    e7:1e:c0:a9:50:18:a5:50:92:a8:8f:da:5f:1a:05:
                    a7:2c:03:52:65:16:65:be:f3:40:a3:49:24:29:33:
                    f4:33:3e:90:61:6e:09:ce:67:86:b5:65:c3:c5:d1:
                    0c:70:13:37:f4:a6:cd:76:d2:85:a9:29:b8:29:17:
                    67:bb:b5:eb:c7:72:17:6b:bb:6b:a5:6a:08:cb:ca:
                    cb:05:28:00:ef:65:1b:cc:3f:d2:33:12:94:3b:e2:
                    07:36:26:ba:ed:3b:5f:b1:4e:5c:52:97:0c:4c:2e:
                    06:3c:29:b8:81:2f:e6:a3:15:9a:4e:5f:b4:89:9f:
                    74:1f:e5:a8:a9:a5:b3:00:78:28:aa:b2:e5:98:31:
                    d9:d5:dd:31:2c:10:4e:4f:5b:4c:5c:d1:e4:c6:e9:
                    3f:b6:01:5a:04:a2:33:5c:10:46:70:d8:53:48:98:
                    66:1c:91:38:ce:7b:bf:00:70:d2:90:48:04:32:e9:
                    51:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:47:B4:75:6F:08:85:71:E2:C7:EA:6B:C7:98:14:2A:E6:3E:E9:CF
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS211877.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:35:2b:06:6d:bd:f9:37:89:f7:30:cf:e4:5b:51:39:ba:
         35:86:4b:9e:89:09:e8:94:84:14:1f:f7:83:03:95:7b:8a:bd:
         74:de:1b:01:65:ef:74:97:ce:76:7a:d5:af:7c:d2:f2:45:aa:
         b5:90:bb:05:aa:4c:a4:7a:7c:5a:26:db:07:0f:c1:91:3a:00:
         69:5f:17:db:df:63:6a:3f:8a:ce:dd:81:ef:8c:43:9f:95:c6:
         b9:61:aa:48:05:c8:44:b1:95:da:99:f7:64:20:c8:76:74:3c:
         3d:dc:2a:22:ce:3a:50:80:49:97:28:05:6a:6f:ca:ce:19:93:
         f1:fe:a6:ca:9f:be:8a:9b:72:3e:fc:90:49:b2:c1:f5:7d:4f:
         6e:63:8d:df:73:e7:74:bc:67:3e:48:e1:38:65:3f:c8:96:6f:
         6b:83:c2:1c:32:b3:a8:19:63:82:de:73:40:ce:92:7a:03:6a:
         c5:22:d0:8f:53:16:fd:74:69:53:c0:6e:1f:c9:67:75:7a:a2:
         b4:c4:37:cc:e8:66:2f:62:d0:19:6b:d9:44:64:79:9a:e9:84:
         8e:f1:2e:fd:7d:8c:1f:47:b0:62:43:2a:24:78:46:f2:23:d6:
         4d:09:81:38:57:19:1b:a8:9f:1a:50:15:d8:8c:21:68:1c:a7:
         13:d9:3e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----