Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS211940.roa
File:                     AS211940.roa (raw, json)
Hash identifier:          Fa0hPmzQooRBJhGlLZ0z7K1mEMTkS+R/Y5Hyx8cEiGM=
Subject key identifier:   06:F0:80:2D:CA:70:23:06:4A:13:04:27:4F:50:B5:47:2A:24:47:8B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       322449DB0984DC1550D07331A444E4BDC29414CE
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS211940.roa
Signing time:             Mon 10 Apr 2023 03:31:51 +0000
ROA not before:           Mon 10 Apr 2023 03:26:51 +0000
ROA not after:            Mon 08 Apr 2024 03:31:51 +0000
asID:                     211940
IP address blocks:        2a12:dd47:5001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:24:49:db:09:84:dc:15:50:d0:73:31:a4:44:e4:bd:c2:94:14:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:51 2023 GMT
            Not After : Apr  8 03:31:51 2024 GMT
        Subject: CN=06F0802DCA7023064A1304274F50B5472A24478B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:53:e7:6d:7b:42:dc:db:e7:26:68:a6:60:
                    6e:45:7f:5e:fc:ce:d6:af:21:50:a0:ca:ba:ad:af:
                    7d:66:1d:cf:a5:7a:97:7b:99:0e:bc:e1:b8:cd:f0:
                    6e:5e:d8:b5:46:9a:d3:a8:49:aa:c7:87:19:98:1f:
                    8e:91:49:4b:27:12:fa:ad:7f:26:d2:02:29:92:45:
                    fd:5a:2a:b3:e6:62:17:bc:84:16:9a:5b:c9:ce:41:
                    c4:82:b3:1f:6e:da:ca:0a:81:8e:ce:b7:0f:14:fb:
                    74:d9:cf:a0:0a:31:9b:4f:c7:6e:87:36:3c:7e:0a:
                    aa:bd:38:4a:9c:33:cd:58:e2:5e:54:0b:1a:5c:a1:
                    94:aa:39:c6:d7:fa:d1:54:ee:4f:90:63:8c:01:a4:
                    ec:5b:eb:ef:b7:cb:9a:e8:57:46:ba:4e:9a:79:25:
                    9f:e2:ae:5d:c0:49:fe:1d:4e:99:2d:8a:0a:f9:30:
                    8c:16:bd:ef:88:04:c0:24:ac:05:88:c2:86:1d:c0:
                    59:69:31:ef:eb:70:59:42:22:2f:14:39:04:cd:72:
                    7d:ff:e2:43:48:19:4f:ec:18:1e:31:a5:a3:37:e7:
                    f1:2b:ae:b2:00:9b:e5:c3:95:d5:92:25:6e:21:38:
                    3e:8b:d2:2e:e1:72:e5:b3:5f:9a:05:a5:e8:10:e1:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:80:2D:CA:70:23:06:4A:13:04:27:4F:50:B5:47:2A:24:47:8B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS211940.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5001::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:c2:96:84:31:9e:d3:b7:8a:46:d1:c9:0d:ca:7a:c8:ad:9c:
         9e:ab:89:a2:ef:f6:2e:c0:80:93:b3:12:58:02:f0:95:0a:2c:
         aa:73:29:58:03:c4:5d:85:f4:54:6a:43:a4:a8:d2:2d:49:75:
         d2:fa:b6:3e:da:bb:b4:a5:7c:d6:32:f8:ff:33:f8:9f:fb:b5:
         fa:47:59:68:97:ae:98:66:d1:1c:2a:00:51:09:4c:aa:61:f0:
         cf:a6:96:09:f0:98:ba:c6:be:c4:2e:db:02:2a:0c:63:12:f4:
         e1:9e:9c:5d:c2:d3:54:bf:12:b0:74:90:3e:9e:d2:68:f4:55:
         dd:f9:2c:57:de:a9:cd:e5:a1:0b:d0:87:ad:be:d9:c6:df:a7:
         8b:56:30:c4:d9:e5:bc:11:7b:64:ff:26:ba:c7:7a:36:cf:c7:
         7d:4a:aa:3c:fe:7f:62:f1:4b:86:d7:7c:db:5a:38:db:0e:f3:
         08:aa:e4:ea:75:fb:d8:b7:4a:6a:17:1d:03:05:b6:cd:bb:1e:
         cd:5e:7b:c6:0f:c1:4a:fb:47:45:3e:f6:1a:d0:5d:e1:52:46:
         83:17:99:7c:82:1b:79:82:c3:78:cc:02:dc:56:b4:42:f2:03:
         41:dc:6a:11:6e:77:4e:27:44:02:5c:4a:84:f8:66:fb:89:8e:
         6c:fd:c9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----