Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS212242.roa
File:                     AS212242.roa (raw, json)
Hash identifier:          ZDb1fSZF878Uif+4W2LNU9jtM2tFC6hHOOJlYFgPTeY=
Subject key identifier:   75:FF:10:38:A7:6D:F1:3A:39:9E:7B:4E:BB:73:78:54:44:AB:75:7B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       42C62E73FE331DDC242170EE13F2871331504290
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS212242.roa
Signing time:             Mon 10 Apr 2023 03:31:46 +0000
ROA not before:           Mon 10 Apr 2023 03:26:46 +0000
ROA not after:            Mon 08 Apr 2024 03:31:46 +0000
asID:                     212242
IP address blocks:        2a12:dd47:80e3::/48 maxlen: 48
                          2a12:dd47:d600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c6:2e:73:fe:33:1d:dc:24:21:70:ee:13:f2:87:13:31:50:42:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:46 2023 GMT
            Not After : Apr  8 03:31:46 2024 GMT
        Subject: CN=75FF1038A76DF13A399E7B4EBB73785444AB757B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:5b:9e:fb:f3:d4:9a:a6:ad:87:5e:72:e3:02:
                    16:15:8a:03:a6:db:d6:3f:d5:1f:ef:e5:e6:8c:93:
                    d5:10:9f:03:1d:34:7f:df:cb:1e:f4:2d:b5:de:be:
                    3e:6b:ac:51:29:06:c0:6f:b8:e9:c5:2e:c5:e6:e1:
                    cc:d0:79:93:0f:f2:2e:17:02:5d:e3:eb:8a:90:fb:
                    b1:c0:f8:e8:c6:cf:69:30:0a:72:df:55:dc:4f:f6:
                    57:2d:12:b2:8c:9a:36:08:5b:a9:c1:58:c2:db:c6:
                    db:7c:15:64:03:aa:7d:e4:a6:3c:f9:89:7f:a3:85:
                    a3:c3:6f:11:ca:9e:a8:33:12:d6:d0:03:aa:1b:dd:
                    c1:10:2c:e8:52:30:9f:3f:9b:dd:51:ee:b6:b2:5d:
                    b0:2d:48:ff:f1:39:41:cd:32:37:ca:e1:a1:55:7c:
                    0f:53:dd:7f:f3:c0:01:05:b5:2a:48:16:fd:9d:27:
                    54:14:d2:db:1d:79:39:48:68:3e:82:71:64:03:ea:
                    57:9f:2c:59:d9:6a:dd:ba:fa:3e:17:f4:dc:0a:67:
                    f8:57:71:12:b6:6f:32:3a:a0:cd:67:1e:b6:ca:c0:
                    fb:c0:df:f6:87:11:77:d3:0a:4d:6e:92:3a:43:af:
                    bf:49:1e:f5:b2:ad:41:81:07:2c:2f:5b:bb:e0:20:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FF:10:38:A7:6D:F1:3A:39:9E:7B:4E:BB:73:78:54:44:AB:75:7B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS212242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e3::/48
                  2a12:dd47:d600::/39

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:d5:f4:9d:45:cc:29:13:f1:e4:d8:f3:de:c8:3a:30:27:
         e8:61:a1:6a:11:23:87:60:e2:01:42:9e:0f:16:43:fe:53:f8:
         24:a9:d6:f2:6a:ac:db:20:9d:c8:85:de:d6:89:8f:0a:12:11:
         3f:cd:ec:45:49:b8:64:15:f8:a6:75:a8:5b:ed:8f:3e:18:d9:
         b7:f5:40:6c:dc:13:be:ff:07:cd:4f:fb:90:3e:39:3e:80:fe:
         74:06:3b:ae:55:28:03:c1:76:7b:24:4b:9f:f8:54:48:9f:f7:
         93:17:38:94:64:3c:3e:b2:0d:80:68:3b:4f:a5:d0:23:43:9f:
         5a:20:28:80:26:be:ef:c8:53:b3:95:d6:fa:7c:63:62:02:d6:
         38:33:e7:6c:98:a3:4d:50:ea:0d:d8:58:72:19:fa:b7:c9:39:
         ff:2e:eb:0d:f6:2c:fa:1c:a8:2d:f0:78:1a:54:20:5e:4d:fc:
         e1:cf:59:7c:1e:e2:16:26:05:98:7d:1c:c1:23:37:40:32:b3:
         d7:71:78:0c:a1:f1:f9:ae:eb:7b:c7:46:83:bd:da:65:a5:ad:
         7d:f0:c4:4f:af:de:49:4d:05:7e:86:ed:16:1c:36:7f:bc:cb:
         9e:49:7a:6b:34:60:ac:cb:58:ae:eb:ed:55:99:66:14:b4:de:
         0b:a3:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----