Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS212294.roa
File:                     AS212294.roa (raw, json)
Hash identifier:          UzP0mw0C5mtKSzfJdMgwEcgAMJqaQi0YnRaHCazLDSA=
Subject key identifier:   8C:C4:B7:11:60:A4:EC:6B:2F:29:50:CD:B9:9B:C7:EA:EA:11:A4:2B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       35101F5D14B82323E9D2F3C73B84C2D9031085AC
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS212294.roa
Signing time:             Mon 10 Apr 2023 03:31:51 +0000
ROA not before:           Mon 10 Apr 2023 03:26:51 +0000
ROA not after:            Mon 08 Apr 2024 03:31:51 +0000
asID:                     212294
IP address blocks:        2a12:dd47:8004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:10:1f:5d:14:b8:23:23:e9:d2:f3:c7:3b:84:c2:d9:03:10:85:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:51 2023 GMT
            Not After : Apr  8 03:31:51 2024 GMT
        Subject: CN=8CC4B71160A4EC6B2F2950CDB99BC7EAEA11A42B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:0d:81:e5:ab:b6:c9:ac:01:c7:33:86:bd:
                    a4:2b:d9:ff:a2:0c:8c:26:68:61:c8:ab:17:13:30:
                    d1:dc:13:d7:15:1d:ac:ac:26:e2:44:47:99:9e:0f:
                    36:95:37:5a:3d:a8:c7:d5:0e:79:a9:2d:73:ee:7d:
                    eb:ba:ba:f8:0b:43:9b:1c:6b:90:64:5a:c2:30:f4:
                    79:77:64:03:4f:08:41:26:9f:1d:62:c2:74:83:a7:
                    e0:1c:8a:b6:c8:63:eb:28:43:76:1d:09:ae:77:e6:
                    5a:c0:23:81:08:ed:f8:a4:fe:2f:95:5f:71:79:18:
                    fa:cb:f3:a8:a4:8e:30:55:6f:7f:af:4a:43:eb:c4:
                    3c:1f:20:97:8b:93:5b:e6:4c:66:47:01:e5:cd:9a:
                    45:b0:95:81:be:c3:b7:0d:dd:8b:9f:a1:8a:44:6d:
                    43:02:58:48:a9:03:ed:f9:7a:ac:92:37:77:82:a2:
                    b2:13:61:6b:59:b0:27:b9:68:dc:0b:4f:3e:5a:da:
                    bb:c7:08:4b:c1:b4:58:f6:c5:7b:0c:35:a8:18:c1:
                    9d:34:95:89:a8:a2:e2:6b:e7:70:31:45:84:d5:d7:
                    d8:ee:f9:a6:14:37:ad:4d:27:fe:27:9b:a0:0d:2c:
                    7d:14:e8:7a:e6:5a:fa:1f:e8:ed:aa:25:e6:46:fa:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C4:B7:11:60:A4:EC:6B:2F:29:50:CD:B9:9B:C7:EA:EA:11:A4:2B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS212294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:41:51:0f:1b:5f:f7:ae:c8:00:0c:24:70:4f:78:26:ba:7f:
         a8:ff:9b:ae:74:2d:54:ad:a5:ce:6b:e0:de:ab:83:94:15:b1:
         79:50:89:40:f7:ef:01:7a:60:64:61:92:19:24:3b:21:47:dd:
         aa:f4:80:c1:fa:bc:3e:2c:37:2e:d4:ca:68:e9:d4:2e:42:ce:
         98:36:ac:17:f4:72:14:34:17:43:e0:92:d2:cb:04:66:f3:79:
         63:ac:85:71:ba:4e:00:ff:40:a5:71:2f:7a:6d:4c:40:63:2c:
         dd:36:13:c3:d8:8a:80:18:57:7b:3a:df:96:fd:13:68:74:8e:
         cb:82:68:82:83:6c:9a:1d:86:29:57:6c:71:d1:bf:5d:6a:ad:
         6d:c4:1f:c5:bb:45:62:f3:f2:1e:6a:53:57:6b:b7:4d:0b:ae:
         46:27:81:94:42:ef:85:15:e2:a4:2f:0b:45:76:54:10:04:85:
         95:ad:a4:b5:b4:62:a8:97:37:b1:22:62:d6:35:c9:25:e8:90:
         b2:c8:e0:8d:d2:6f:20:8a:fd:74:39:94:5b:e9:0a:97:c8:30:
         ce:97:7a:2e:70:21:20:3d:16:8f:b2:b2:c1:d0:4e:84:8f:a0:
         2e:2a:a9:3c:0c:f6:28:8c:7e:7f:b0:7f:cb:13:50:32:80:c5:
         0a:bd:08:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----