Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS212598.roa
File:                     AS212598.roa (raw, json)
Hash identifier:          xeJ4yQSELyWwU1mAqXnc5McCJsbR6LOfgZd9eYk2980=
Subject key identifier:   46:F1:46:89:8A:FD:C5:63:4F:16:40:80:D3:C0:83:D7:BE:6F:2A:E8
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2D95EA5F0B0EEC1171ABC95F6E48596658002F5F
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS212598.roa
Signing time:             Tue 11 Apr 2023 05:11:17 +0000
ROA not before:           Tue 11 Apr 2023 05:06:17 +0000
ROA not after:            Tue 09 Apr 2024 05:11:17 +0000
asID:                     212598
IP address blocks:        2a12:dd47:8320::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:95:ea:5f:0b:0e:ec:11:71:ab:c9:5f:6e:48:59:66:58:00:2f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 11 05:06:17 2023 GMT
            Not After : Apr  9 05:11:17 2024 GMT
        Subject: CN=46F146898AFDC5634F164080D3C083D7BE6F2AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:9d:5e:f2:0f:bd:41:9e:c2:92:62:31:fe:
                    1c:67:b3:5a:9c:42:2d:a7:14:b8:dd:ab:86:50:41:
                    a2:7e:01:0e:d3:e3:27:60:5a:81:db:b1:3a:80:e7:
                    0f:b9:9f:cb:c4:75:c8:9b:40:bd:c0:ae:5a:41:ff:
                    de:4c:23:00:a6:dc:99:f2:8f:c3:ed:c1:e2:49:ff:
                    c6:3f:e7:aa:df:e0:1a:3d:99:4c:52:bd:84:ed:4b:
                    54:f2:57:f9:9b:9f:8f:b5:45:7b:69:f9:66:5a:e5:
                    d4:ca:33:e8:86:76:43:83:6a:06:50:77:d8:e5:40:
                    ba:cf:7c:dd:dc:2e:35:cf:88:40:f4:40:60:76:0c:
                    38:55:7b:ff:27:d1:35:7f:2f:ae:ef:93:d7:b4:70:
                    4b:1e:4e:be:e7:65:d7:5b:f1:de:f3:c3:c5:a4:80:
                    6e:3d:b0:f8:2a:eb:14:cb:58:d9:90:9f:00:27:08:
                    d1:38:5b:ac:1b:6d:28:e2:99:36:39:2c:54:c1:31:
                    d1:99:dc:11:d1:28:40:c6:18:42:10:82:d0:6a:5c:
                    2f:45:af:e7:37:c3:e6:e3:87:33:ad:25:66:7c:67:
                    39:b4:cd:7f:c9:c8:37:ff:47:eb:ae:bc:81:92:b8:
                    5c:69:e2:77:91:a1:db:1a:27:8a:89:26:76:4e:be:
                    c7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F1:46:89:8A:FD:C5:63:4F:16:40:80:D3:C0:83:D7:BE:6F:2A:E8
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS212598.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8320::/44

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:3b:2a:19:3a:01:98:fa:78:2d:96:d4:4a:e8:14:85:44:
         39:f2:77:fd:76:75:2a:29:f1:94:02:05:2b:d7:2c:87:96:b5:
         7c:21:82:6a:f1:cb:fc:e8:58:42:51:a0:74:80:12:c2:74:5c:
         43:1c:64:61:79:5f:e4:10:ef:a3:be:ba:44:64:a6:71:fc:0e:
         97:e0:84:0c:19:5c:e6:1b:22:12:bb:a0:aa:83:be:58:fa:6a:
         cb:73:31:04:61:a5:18:6e:c0:79:39:25:87:9d:e1:b9:93:31:
         6f:e4:1e:16:b4:8e:2d:0d:cb:4c:0a:a2:9b:ae:a4:c4:54:76:
         d1:f8:26:ab:8e:4c:4e:b6:f9:63:20:90:cb:e2:5e:bd:e6:39:
         c8:a8:0e:c8:02:a1:e2:e7:6b:c9:16:b8:be:f7:80:7b:18:82:
         f4:59:88:86:ad:b1:78:ab:88:5e:81:e7:97:e8:3c:50:0a:5a:
         9d:bf:06:58:3a:31:e6:a0:75:20:6c:bf:e7:fc:b9:6b:de:47:
         b5:a9:08:e2:99:3a:a6:ac:3b:78:37:c9:c7:97:6a:cf:9a:94:
         8e:58:31:a0:a1:f6:07:b4:c1:2e:5a:c5:7d:8a:12:c9:2c:35:
         1c:5d:68:5f:b3:a7:94:00:bd:90:ce:9e:5c:2c:f5:e1:8c:2e:
         ed:f6:f2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----