Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS212817.roa
File:                     AS212817.roa (raw, json)
Hash identifier:          gDh6JQpJVE0zZ+zbE2a5M+JCToXdSp80xShtMXcmIyU=
Subject key identifier:   53:6B:76:11:BC:BD:DB:A5:F9:32:9D:81:B9:ED:56:D2:BF:C9:BE:E4
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2070152E23FE6F64701C4F1EEB0652E4E9FCB444
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS212817.roa
Signing time:             Sun 24 Sep 2023 12:57:18 +0000
ROA not before:           Sun 24 Sep 2023 12:52:18 +0000
ROA not after:            Sun 22 Sep 2024 12:57:18 +0000
asID:                     212817
IP address blocks:        2a12:dd47:600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:70:15:2e:23:fe:6f:64:70:1c:4f:1e:eb:06:52:e4:e9:fc:b4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Sep 24 12:52:18 2023 GMT
            Not After : Sep 22 12:57:18 2024 GMT
        Subject: CN=536B7611BCBDDBA5F9329D81B9ED56D2BFC9BEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:21:e1:aa:8f:70:1f:fa:f5:10:c5:61:e4:
                    f1:fb:48:54:c4:6a:b5:29:c8:65:45:2a:03:41:96:
                    0f:d6:c5:e3:9f:00:f3:fc:4f:2e:9e:72:59:c8:34:
                    ed:16:a4:c1:4b:9b:48:91:cc:d3:f9:c4:0c:dd:e9:
                    30:ea:81:f5:27:a1:d2:c6:b5:48:b4:5c:c5:d7:3c:
                    18:5b:7a:86:dd:de:83:f1:e8:fa:22:7b:2a:2c:11:
                    59:46:4b:5a:5e:96:1a:aa:ac:09:35:f2:dd:79:cb:
                    7a:fa:13:c1:35:1d:7b:a3:76:2f:18:96:43:aa:55:
                    a7:d3:fa:b8:64:1b:1d:0b:c4:cf:ab:7d:0e:b8:e0:
                    9b:ec:b0:be:75:47:f5:d5:8f:cc:2d:f6:f0:67:e1:
                    69:3f:1f:f8:2a:ee:e2:a7:1a:f8:83:cc:fa:e9:13:
                    f7:24:f3:4e:56:5c:10:de:a4:90:9c:66:81:a5:8e:
                    af:2e:8a:ca:9f:c9:f5:0b:d3:d4:60:26:b7:b1:20:
                    36:cf:62:a7:e1:96:c0:d5:8f:dd:59:fc:aa:1b:84:
                    44:e3:10:f3:d6:b5:13:c9:59:35:42:a2:00:d1:2f:
                    92:fe:4d:d5:f3:1f:c5:6a:b4:c6:ff:1e:63:2a:2d:
                    3b:36:58:48:67:30:a8:b9:a2:63:0b:05:b3:59:da:
                    73:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6B:76:11:BC:BD:DB:A5:F9:32:9D:81:B9:ED:56:D2:BF:C9:BE:E4
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS212817.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:4f:45:e1:62:45:ae:0e:aa:45:5c:6f:0f:f5:ab:27:6d:be:
         bc:79:cf:2c:3e:41:30:02:34:e1:a7:2e:07:ae:5d:eb:fe:27:
         a7:ec:de:ca:20:88:33:71:1a:12:83:93:a9:82:12:d7:c6:f8:
         fb:1c:8b:4f:7d:be:d0:8a:b3:3a:f2:16:16:1d:59:71:78:19:
         20:84:c7:c1:e9:5e:2d:46:58:af:25:2a:ea:78:75:08:86:f3:
         38:8a:52:96:6e:40:50:7b:3a:93:b7:e4:9e:67:7c:00:e3:4b:
         f7:c2:2b:1b:8b:57:f0:17:7d:05:16:ee:95:3a:b7:41:a9:f6:
         b7:9d:a4:0f:4f:ab:85:ef:dd:16:03:25:d6:67:ab:1a:28:98:
         2f:66:7f:aa:b9:2b:72:6a:36:d8:fc:4f:03:0d:6f:2e:4c:15:
         c5:69:03:a8:ce:f3:c2:0e:d5:6d:9a:0e:45:b8:89:01:4b:27:
         82:36:bf:44:4a:91:99:33:7e:5e:be:e3:ec:c8:61:6c:7d:62:
         ee:6f:cc:dc:b0:c1:ac:f3:24:7f:e6:b0:04:72:7b:a9:a9:61:
         22:4a:a4:e7:59:61:70:e2:0a:1d:a0:46:ed:0b:85:d0:79:38:
         39:cc:35:08:2d:87:1f:4e:22:da:0a:c9:2e:90:3c:a1:16:ff:
         02:61:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----