Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS212483.roa
File:                     AS212483.roa (raw, json)
Hash identifier:          rWdxk8WbMJBNliDP8z1kYGm/knzdrVgSmooeEawrjy4=
Subject key identifier:   3F:BF:34:CF:2E:7B:96:16:2E:AA:C8:13:26:5D:10:66:7F:77:FE:43
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2A9CADFBB3607C92964EEC3557927BFFF2EB4C13
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS212483.roa
Signing time:             Mon 10 Apr 2023 03:31:33 +0000
ROA not before:           Mon 10 Apr 2023 03:26:33 +0000
ROA not after:            Mon 08 Apr 2024 03:31:33 +0000
asID:                     212483
IP address blocks:        2a12:dd47:80b0::/44 maxlen: 48
                          2a12:dd47:8f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9c:ad:fb:b3:60:7c:92:96:4e:ec:35:57:92:7b:ff:f2:eb:4c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:33 2023 GMT
            Not After : Apr  8 03:31:33 2024 GMT
        Subject: CN=3FBF34CF2E7B96162EAAC813265D10667F77FE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:63:1f:9a:3e:a2:20:db:63:c8:96:6d:5c:
                    86:0b:d9:4d:77:4e:16:e9:21:82:2b:24:b0:23:6a:
                    91:f5:83:e9:5c:7c:6c:2a:5a:5b:78:2a:f4:81:7e:
                    b4:f9:e1:71:23:e4:ef:bf:2d:c8:cc:39:43:af:23:
                    83:fe:ee:10:2f:17:11:ec:ab:e2:87:ca:70:19:6a:
                    6d:da:6a:07:4c:9c:40:c9:2e:ec:35:bf:cc:db:2b:
                    39:ae:6d:07:d7:bc:b8:97:60:31:07:df:06:0f:4a:
                    50:bb:04:8f:4d:b9:37:46:ee:d1:e3:c7:f5:cf:28:
                    45:46:67:52:e8:76:68:35:c8:dc:65:a0:0e:85:b6:
                    3c:2c:63:84:cc:89:1a:02:56:f9:c2:76:4e:10:3c:
                    3e:0a:80:fc:ad:9a:eb:cd:cb:05:fc:a2:13:46:13:
                    e7:84:1a:40:3f:10:ff:0c:b8:a7:b5:7f:40:5e:15:
                    88:a2:09:3d:54:73:53:bb:73:6d:4e:0e:64:2e:9b:
                    66:81:95:16:13:c3:83:5a:b2:93:69:4f:ce:1c:62:
                    2c:4c:9a:ad:2b:b1:d1:12:99:1a:dd:5a:57:df:4c:
                    2c:30:c4:5a:ca:cc:d7:d6:10:10:7d:29:32:bd:ed:
                    73:d4:cb:70:de:dc:3a:ac:69:0a:64:1c:c1:71:ef:
                    a8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BF:34:CF:2E:7B:96:16:2E:AA:C8:13:26:5D:10:66:7F:77:FE:43
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS212483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80b0::/44
                  2a12:dd47:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bc:f9:69:f0:0e:d6:fa:61:a8:b7:d2:89:b6:75:00:9f:33:98:
         65:32:ce:b2:c9:c7:4c:e6:fb:84:21:4e:4e:1c:64:7e:c0:2d:
         42:1f:47:55:02:d4:2b:67:16:a7:49:7d:bc:0b:b8:cf:e3:88:
         7e:07:14:39:c1:d8:6a:bc:76:18:b5:b5:72:e7:8a:86:fe:f0:
         03:42:e3:21:cc:7c:64:15:b3:53:eb:2b:13:f9:ae:17:67:f2:
         98:77:fa:7a:ae:bb:de:6a:e2:ee:a9:49:38:ad:d0:45:dc:e4:
         9b:f2:42:c2:ec:cd:4e:ee:45:da:81:16:17:e0:b1:89:7d:a2:
         73:6e:86:52:30:3f:f2:9e:04:5b:5a:06:7d:dc:9c:09:45:41:
         e5:b8:08:fb:1a:3d:fb:e5:99:15:bc:90:c5:0a:1a:4f:d9:b0:
         e7:93:f6:ec:aa:f1:90:5c:3f:52:21:cb:c5:c4:2c:07:4a:bb:
         67:c0:9f:5a:4e:f9:c5:c4:f8:03:48:58:ce:01:13:b1:d8:e1:
         71:18:94:c0:a5:17:49:24:5f:49:83:6b:64:a6:0a:6d:a9:54:
         1e:82:63:e0:02:16:e5:d3:69:dd:99:31:e3:4b:70:79:7d:c4:
         1e:fb:87:cf:87:08:4a:b2:5d:82:dd:01:88:43:ab:a6:d4:40:
         9e:47:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----