Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS46138.roa
File:                     AS46138.roa (raw, json)
Hash identifier:          mV+v67KMdlZQ58kBLMcU3lcLe/+XcV9FCcOddayfBr8=
Subject key identifier:   5F:5E:B2:5A:06:D6:F8:49:62:10:46:5F:9F:FF:6E:9B:0C:B1:1B:3E
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       39D7C28E64A07B307242F0D42693AB61674F6453
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS46138.roa
Signing time:             Mon 10 Apr 2023 03:31:47 +0000
ROA not before:           Mon 10 Apr 2023 03:26:47 +0000
ROA not after:            Mon 08 Apr 2024 03:31:47 +0000
asID:                     46138
IP address blocks:        2a12:dd47:8030::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d7:c2:8e:64:a0:7b:30:72:42:f0:d4:26:93:ab:61:67:4f:64:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:47 2023 GMT
            Not After : Apr  8 03:31:47 2024 GMT
        Subject: CN=5F5EB25A06D6F8496210465F9FFF6E9B0CB11B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:ab:57:5b:4f:13:6e:06:af:22:39:65:f7:
                    a9:8b:e1:46:67:22:1d:ea:0c:4b:fe:61:e6:20:33:
                    2b:5e:dc:b4:46:73:10:54:fc:59:b3:73:08:75:c5:
                    14:19:dc:cb:43:33:7b:cb:34:97:4c:8f:2a:1b:ce:
                    c1:28:2b:f5:df:fe:3a:d5:82:55:7e:1b:57:8d:80:
                    2f:ea:f0:94:50:58:8f:aa:bf:8e:78:88:fb:68:6e:
                    dc:5a:db:57:c4:5f:1b:2c:9a:aa:41:62:00:b1:6b:
                    09:d9:7d:8c:92:03:d8:66:f3:d9:c0:68:08:03:14:
                    88:74:a9:fc:7c:63:47:6c:7c:ec:ef:c7:28:a0:a2:
                    07:e1:24:02:61:a0:4d:f5:7c:9b:13:bf:62:2f:ae:
                    f2:62:79:98:d8:e0:a9:11:73:88:3f:d2:fc:ad:b7:
                    20:74:25:54:15:ac:41:b7:ca:d7:af:ac:e6:be:fa:
                    b6:d2:cb:0b:ed:b7:25:8b:98:b9:53:a4:7d:b3:47:
                    f1:47:df:dd:95:c6:51:c1:96:ea:0b:07:0e:a2:43:
                    2e:e8:5d:91:c1:88:f1:3f:c3:ad:ba:25:86:07:51:
                    af:03:89:9b:f9:63:82:2d:42:f0:ec:72:4f:c4:6b:
                    8a:f1:83:26:d1:63:0d:dd:54:4f:2c:20:87:8b:dd:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5E:B2:5A:06:D6:F8:49:62:10:46:5F:9F:FF:6E:9B:0C:B1:1B:3E
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS46138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8030::/44

    Signature Algorithm: sha256WithRSAEncryption
         cd:1b:6e:2f:38:56:b0:ba:71:4c:0d:d2:eb:98:4c:b0:fd:0c:
         cf:5a:2b:f9:53:47:f1:b2:de:dd:de:60:cb:81:f1:17:16:2d:
         50:27:ac:d5:17:88:93:f0:12:cf:4b:c7:8f:84:86:b2:6e:d9:
         98:ec:b7:9b:40:dc:b5:1a:61:da:5d:14:a6:dd:3d:ae:86:68:
         a7:76:0a:6a:8f:13:a2:f6:81:bc:5c:82:e5:4c:eb:9f:a2:63:
         3a:4a:ac:7a:42:b9:2e:52:76:6e:e2:a3:21:48:f6:de:e2:a5:
         04:97:4e:48:87:28:3a:fd:ac:e8:be:93:d0:15:d9:2b:37:e4:
         43:5f:61:2f:79:4e:51:e9:a3:d9:2f:4b:90:db:34:f4:26:2d:
         41:da:23:50:54:09:79:6c:a8:25:d0:10:4e:b4:9c:90:d2:40:
         87:61:1d:f3:fc:ef:ec:c6:45:93:9c:1b:e1:ad:e9:57:e7:97:
         ba:21:d7:2f:08:1f:27:a0:f4:6f:d2:cb:07:d8:15:d7:d8:62:
         c8:7d:8d:c6:fa:41:bc:e5:c4:33:60:44:b3:b3:ca:8a:76:61:
         eb:43:4f:e2:1e:cb:8d:2c:8c:1a:71:eb:50:90:b5:82:74:ff:
         1d:89:6d:98:aa:77:80:dd:35:36:00:a5:ec:65:48:a7:c4:6d:
         19:68:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----