Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS35913.roa
File:                     AS35913.roa (raw, json)
Hash identifier:          TvY1gFKXXU8JQrbw1rRQtUGZKa07WLQ5RNvZOxdDO2k=
Subject key identifier:   73:5E:16:B5:63:8B:E7:1E:F2:B2:1C:24:B3:22:44:E8:29:21:7F:0B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       49A5146E6B86E48418ED5B1AD5F31440BB55B318
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS35913.roa
Signing time:             Mon 10 Apr 2023 03:31:37 +0000
ROA not before:           Mon 10 Apr 2023 03:26:37 +0000
ROA not after:            Mon 08 Apr 2024 03:31:37 +0000
asID:                     35913
IP address blocks:        2a12:dd47:804b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a5:14:6e:6b:86:e4:84:18:ed:5b:1a:d5:f3:14:40:bb:55:b3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:37 2023 GMT
            Not After : Apr  8 03:31:37 2024 GMT
        Subject: CN=735E16B5638BE71EF2B21C24B32244E829217F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:33:a0:c0:3f:8e:bc:bc:15:ca:21:f2:6a:99:
                    38:1e:04:8e:fc:df:6a:78:41:2c:c6:ac:2a:4f:77:
                    28:62:74:97:ba:45:cb:22:dd:fc:e2:62:64:2d:05:
                    2e:e1:c6:39:ce:ec:21:8f:c4:7f:27:d8:83:eb:78:
                    f8:84:e4:39:1f:f4:71:5f:2c:d7:97:6d:0c:7b:6e:
                    78:58:f8:1c:a9:54:c9:9b:dd:95:d4:bb:82:fe:5b:
                    6b:e4:e1:da:08:50:81:7d:04:cf:9d:2b:e7:2e:d9:
                    e0:43:bb:4f:12:a7:22:ea:3f:d8:12:a0:2d:0a:12:
                    38:b5:19:b6:60:3c:ad:f9:d5:b9:5f:7f:ff:51:ec:
                    79:53:5d:3d:59:13:a9:65:9e:3e:ce:7e:8d:b2:95:
                    3c:c8:e2:f5:9e:7d:18:91:79:19:fb:63:87:9c:eb:
                    cb:40:a8:12:3c:44:8f:9d:bb:6c:f4:83:df:92:5d:
                    58:32:fb:c2:6e:c5:65:e2:f2:5a:74:39:f6:b4:f5:
                    07:e0:2a:f6:3a:20:6e:5e:76:92:f6:7b:8e:47:ac:
                    c1:c1:80:0e:15:44:1c:8b:c7:bc:6e:fc:ca:c0:8a:
                    c6:21:d0:6d:cd:b5:53:c0:5e:bb:a0:28:a9:81:b6:
                    77:12:01:bf:04:56:3b:30:7d:de:58:46:84:2d:b1:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5E:16:B5:63:8B:E7:1E:F2:B2:1C:24:B3:22:44:E8:29:21:7F:0B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS35913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804b::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:85:5d:56:b8:34:03:16:8f:90:48:c1:fe:b2:c1:eb:31:44:
         97:ca:78:6d:fa:87:bf:90:fd:e5:26:e9:1a:0c:94:5b:b3:84:
         f3:77:10:3c:63:f0:33:ae:df:a0:93:e3:94:ba:45:9b:5d:cb:
         eb:5f:0d:86:dc:5c:e7:17:5a:4f:ae:b5:b9:ee:71:c9:b9:fb:
         55:41:7e:0b:5d:49:b7:b4:61:ba:9e:fe:e3:6f:76:31:bd:c2:
         47:89:ab:c0:c7:79:ca:ce:ac:72:99:84:89:7d:51:a2:63:4c:
         19:f6:f9:0c:a9:cf:62:cf:5d:62:01:48:3d:3f:48:38:28:80:
         3c:4d:34:d0:92:98:20:41:cc:d6:45:84:2c:41:f4:5f:99:41:
         3a:c0:81:37:3d:1e:bc:ab:04:e9:7a:79:46:f0:c3:04:43:ec:
         d0:d9:56:4b:1f:4a:6b:a9:67:39:9c:62:bf:e5:af:42:67:b5:
         51:99:04:d0:6f:d1:8d:38:a3:53:9a:1f:ac:08:e2:ac:5c:85:
         ac:f1:c1:bf:80:ce:b3:9d:f7:09:7d:9a:ae:7e:f6:13:8d:76:
         2d:7a:56:46:e8:fc:a4:7f:a8:44:8f:10:3f:c9:1e:84:48:ab:
         54:cb:8a:d3:f5:2d:47:22:e7:5e:c6:2a:58:5e:87:6a:3c:fc:
         e4:67:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----