Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS212503.roa
File:                     AS212503.roa (raw, json)
Hash identifier:          peJMNvWgJ9SjF9AUmdLrGcYbi9ZunuL8F63GPaxrFY0=
Subject key identifier:   27:5D:08:FF:86:DD:7E:AA:F8:4D:3F:0F:12:5A:AE:F3:B9:61:E0:FE
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       185DF18F870EBD014EAEEB30E7E737594C5832A6
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS212503.roa
Signing time:             Mon 10 Apr 2023 03:31:39 +0000
ROA not before:           Mon 10 Apr 2023 03:26:39 +0000
ROA not after:            Mon 08 Apr 2024 03:31:39 +0000
asID:                     212503
IP address blocks:        2a12:dd47:8ee0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5d:f1:8f:87:0e:bd:01:4e:ae:eb:30:e7:e7:37:59:4c:58:32:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:39 2023 GMT
            Not After : Apr  8 03:31:39 2024 GMT
        Subject: CN=275D08FF86DD7EAAF84D3F0F125AAEF3B961E0FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:f6:7d:8e:75:6f:96:a7:91:36:45:8b:05:
                    cf:e2:8b:93:68:c0:d9:9b:3f:8a:d9:0e:b8:f4:b2:
                    a7:c1:c8:90:5e:2c:04:4b:9f:91:70:08:80:9a:28:
                    f1:85:34:f7:0b:b0:f8:9d:a5:36:d1:ab:52:ea:66:
                    40:26:d9:9f:87:21:5e:d2:64:18:cd:f8:73:26:84:
                    57:7c:03:d5:26:b4:b7:90:70:95:5f:bf:25:4e:99:
                    f2:5a:dd:a8:dc:c6:2c:e4:d8:12:9c:74:a4:91:e9:
                    79:c1:bb:af:c3:c6:4d:80:9c:39:e9:81:e5:79:97:
                    f2:53:e3:c3:d4:b8:48:60:30:30:61:83:2b:5a:f6:
                    0b:43:bf:7c:41:76:37:44:3f:46:1a:95:a4:20:0d:
                    31:58:ec:9f:d5:2e:3a:96:54:ff:ea:c5:db:09:0b:
                    73:93:37:25:57:e4:38:15:a6:14:48:ea:80:49:84:
                    43:bb:7c:74:83:52:e9:eb:9b:6c:39:60:e5:5d:d5:
                    de:27:1a:08:e2:4b:63:00:c7:a1:92:56:c2:28:16:
                    1d:77:64:86:ac:90:24:28:d3:90:f8:30:4f:f9:ce:
                    19:52:6f:d9:d0:0e:0a:5a:e6:16:5d:61:62:33:03:
                    a4:51:4e:88:c0:53:f2:6f:26:fe:2d:b1:31:0f:c4:
                    bd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5D:08:FF:86:DD:7E:AA:F8:4D:3F:0F:12:5A:AE:F3:B9:61:E0:FE
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS212503.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ee0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b2:f1:8f:e1:64:2d:d6:bb:12:e4:0e:fd:f7:ff:ae:9c:db:a1:
         ba:b3:ef:d3:6a:1f:23:92:c5:63:31:d2:fa:07:b7:84:38:a7:
         0f:3c:b7:c3:16:ac:2b:8e:13:17:4b:1d:b7:f2:97:5d:97:b6:
         04:e4:2f:ee:1b:31:60:fb:32:ee:04:ba:65:e2:da:8a:d3:1f:
         0a:e7:2b:a9:28:23:6e:9d:48:cd:74:57:c1:a5:67:e9:e1:be:
         a3:d0:7a:a6:e1:2f:28:1e:6d:0c:80:57:31:5e:27:2a:1c:ab:
         4e:dd:77:22:2a:4f:7e:90:41:32:5a:50:c1:21:8b:55:d3:0b:
         b6:34:19:6b:c2:e2:8c:9e:0c:db:41:5d:39:74:22:7e:a4:c4:
         5f:85:69:b2:ca:72:57:02:f2:b2:00:6b:e1:15:76:73:43:14:
         cf:8e:d6:4d:8c:f1:3d:45:e0:d3:ef:d2:40:68:1a:ca:9f:53:
         e4:00:c0:2f:b9:81:1f:07:aa:73:aa:c6:c1:fb:39:e0:14:62:
         b8:d1:10:5e:9c:95:8e:ad:5b:8b:e1:0c:4c:d1:b3:f9:c5:99:
         db:8d:f4:2b:a8:25:e2:2c:b4:a1:1f:73:93:e8:02:3a:76:ab:
         04:57:2e:b0:38:04:8e:57:fd:f1:fd:c0:5d:17:78:24:1b:51:
         58:ff:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----