Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS26533.roa
File:                     AS26533.roa (raw, json)
Hash identifier:          5J80UybhGf4MozyBDQhncQh+ZCV3lT2yZRrB9hEfk7M=
Subject key identifier:   7A:0A:4D:22:CF:93:64:A4:16:E0:13:07:85:D1:CE:F5:6E:C9:D3:A2
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       503CC76F50A7FE5F530794B8EF42E2C7F6A62B5C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS26533.roa
Signing time:             Wed 26 Apr 2023 19:18:16 +0000
ROA not before:           Wed 26 Apr 2023 19:13:16 +0000
ROA not after:            Wed 24 Apr 2024 19:18:16 +0000
asID:                     26533
IP address blocks:        2a12:dd47:f300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3c:c7:6f:50:a7:fe:5f:53:07:94:b8:ef:42:e2:c7:f6:a6:2b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 26 19:13:16 2023 GMT
            Not After : Apr 24 19:18:16 2024 GMT
        Subject: CN=7A0A4D22CF9364A416E0130785D1CEF56EC9D3A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:51:da:d6:f8:76:34:cd:0e:17:a0:6c:bc:6f:
                    7f:1c:af:2e:a1:9a:a1:98:21:dc:36:52:46:ee:2f:
                    72:a8:7d:d4:6e:f4:1a:13:27:37:1c:e6:80:f8:16:
                    39:92:fd:b2:24:d3:27:5b:81:a4:ed:e0:30:e1:2d:
                    4a:57:d8:52:0b:00:6e:25:64:11:bc:e4:76:55:31:
                    97:1e:bc:a9:55:54:91:58:36:3a:37:c6:f4:17:35:
                    04:60:46:06:3b:f7:16:6e:93:f3:10:2d:ec:92:1b:
                    99:6f:e6:98:1f:99:52:e7:e2:45:b4:82:e6:8f:2e:
                    62:98:42:68:ba:ec:02:22:29:e9:bc:4a:ab:88:a7:
                    51:20:55:fd:18:fe:dd:e8:96:1a:80:5f:dd:d4:41:
                    42:27:18:d3:de:7a:cb:0e:68:6e:59:cb:08:f2:01:
                    a8:0f:90:da:26:13:c9:c9:97:16:e8:fa:25:0a:b5:
                    67:11:8e:49:41:f7:3b:54:eb:ac:cb:01:dd:fb:14:
                    44:3a:a4:c6:68:c0:3e:76:db:7c:2e:3c:b0:20:15:
                    8e:3a:f0:55:58:79:59:49:24:f5:6e:39:18:0e:52:
                    72:70:6b:e3:c0:e1:c8:85:be:f1:44:92:67:2a:6a:
                    8a:e3:49:b3:f3:d8:60:3d:0d:59:4e:b5:9c:83:ce:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0A:4D:22:CF:93:64:A4:16:E0:13:07:85:D1:CE:F5:6E:C9:D3:A2
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS26533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f300::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:24:f2:f2:ee:60:c6:2a:05:2d:49:7a:88:7e:4f:89:8c:b8:
         74:f4:73:dd:7d:04:0f:ed:8e:17:fb:de:f5:f5:97:95:7f:7b:
         99:f9:b9:98:a8:1f:18:80:19:4d:41:68:a5:59:67:60:c5:98:
         9c:2e:36:8c:a4:b1:bc:79:26:3f:cd:48:90:62:ca:92:87:31:
         9e:e5:f8:6f:12:a1:02:2c:ed:4f:26:ac:35:e9:27:7d:fe:b9:
         e3:97:ea:7d:c1:7c:3c:e0:23:f4:e4:25:6d:dc:29:17:7f:5b:
         f4:8f:22:aa:22:4d:a8:ef:a8:76:6f:bc:53:84:77:cf:73:62:
         a7:cc:ca:d9:82:57:8a:ee:cc:e8:bc:86:41:d0:16:8d:cd:fb:
         9b:31:e5:40:eb:1b:25:9a:be:19:bf:ab:86:72:99:8b:b7:71:
         69:0b:dc:d5:20:fc:27:2d:be:59:f7:73:8f:e5:9e:80:38:cb:
         0a:31:b8:c6:be:bf:60:cd:1c:03:67:74:dc:f5:8d:b4:d5:50:
         df:45:8f:6a:88:2b:97:87:b6:bb:af:6e:99:a8:62:af:ef:af:
         7f:f2:a9:cd:2d:71:18:58:53:14:07:d8:b4:51:cc:c6:4c:47:
         4b:f0:01:36:45:cb:6c:cd:63:87:5d:e4:3c:09:3c:0f:ed:ef:
         a1:52:0e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----