Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS213086.roa
File:                     AS213086.roa (raw, json)
Hash identifier:          5BWJcdk71PLbe0LX7OG8nBM+NDdiZ3gbPqI969ICpsk=
Subject key identifier:   C3:0F:84:BA:DE:C5:65:DC:A4:78:92:66:80:BB:AB:71:86:C3:08:63
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       646B16D95F384622ACD108C90DB20CE1AF015511
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS213086.roa
Signing time:             Mon 10 Apr 2023 03:34:05 +0000
ROA not before:           Mon 10 Apr 2023 03:29:05 +0000
ROA not after:            Mon 08 Apr 2024 03:34:05 +0000
asID:                     213086
IP address blocks:        2a12:dd47:d800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6b:16:d9:5f:38:46:22:ac:d1:08:c9:0d:b2:0c:e1:af:01:55:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:29:05 2023 GMT
            Not After : Apr  8 03:34:05 2024 GMT
        Subject: CN=C30F84BADEC565DCA478926680BBAB7186C30863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:77:97:03:23:3b:99:05:9a:f5:b1:87:51:
                    f8:0e:d8:82:ae:98:95:b1:3b:d7:75:4a:10:8e:35:
                    8a:a0:0f:7b:43:36:78:d0:0c:4e:c0:f1:90:2a:f8:
                    ce:1a:00:9e:47:de:d3:f4:a2:f0:b5:6a:0a:c0:52:
                    aa:95:07:90:e7:7e:e4:7f:af:db:d1:17:ac:4b:80:
                    a8:16:4a:e7:3e:b8:8d:60:7e:57:03:9c:7f:c8:d5:
                    55:2a:6b:ed:74:88:e3:df:56:79:15:1c:e3:cd:46:
                    02:a5:a2:f7:00:01:ab:83:ad:66:5e:7a:ee:09:a5:
                    91:fe:3a:5a:ad:d8:e1:19:47:67:49:4c:41:0e:90:
                    9d:2b:c4:5b:05:79:dd:e3:37:e6:c5:25:44:3d:57:
                    30:01:f4:e7:cb:c0:03:0d:e0:66:6a:10:3e:be:ea:
                    a3:df:1b:ef:83:00:79:32:14:d3:0b:90:83:4e:4a:
                    d6:b3:f2:62:08:83:bc:1d:35:d8:8a:49:da:9e:d7:
                    ee:7a:52:cd:d7:35:89:f3:4e:7e:8f:93:0a:28:69:
                    33:6c:15:13:01:06:76:df:5d:87:69:e6:0f:4c:ea:
                    88:55:62:81:c2:9d:ac:95:60:e6:df:c4:5b:12:b0:
                    95:e9:88:30:04:30:91:2b:81:2f:99:2b:0e:9b:8a:
                    55:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0F:84:BA:DE:C5:65:DC:A4:78:92:66:80:BB:AB:71:86:C3:08:63
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS213086.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:31:38:7c:59:fd:ef:8d:ec:bb:7a:c3:c1:18:22:2b:97:95:
         7b:cc:0f:a5:0f:e3:6b:f3:99:08:b0:26:ca:63:3f:d7:2b:58:
         7e:da:12:5f:d4:48:cc:f5:bc:4c:15:5c:31:d6:1f:0e:4d:5d:
         d3:0e:4a:db:aa:31:71:80:80:af:54:a1:05:6f:3c:dd:aa:d3:
         a6:66:e4:9d:c5:f0:8f:87:3b:34:2b:4e:a6:65:cb:79:73:50:
         51:cb:cc:06:38:5d:2a:ff:18:12:48:a0:c1:5b:9d:57:ca:47:
         9c:81:a4:c5:ed:27:3e:1f:49:55:e7:67:54:cb:13:36:e7:3b:
         72:ae:8a:da:2b:19:5f:5c:2c:fd:a2:c2:df:76:41:30:18:68:
         6a:b8:d8:d0:50:ad:87:5e:89:95:49:e6:48:69:b0:50:eb:86:
         7c:7c:73:c7:b3:9f:c8:69:1a:7f:62:7d:cb:5f:73:dc:3c:2b:
         6d:28:e7:e2:3a:9a:c3:bf:38:b5:45:8d:04:9e:ef:bd:1e:15:
         4a:71:6e:53:22:ed:0a:7a:ac:c4:dc:bb:6d:47:0a:18:30:3a:
         23:89:1c:d2:c8:06:d0:d0:a2:36:3c:d9:3d:8c:1f:34:bc:2f:
         73:03:1c:81:8e:3e:82:a3:44:f6:eb:0b:c6:ac:36:83:56:98:
         fd:8d:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----