Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS49581.roa
File:                     AS49581.roa (raw, json)
Hash identifier:          QF9XIYJ7OYQGoLSr7kmfcIm+0E5ywZh2lQFXXPDiLm4=
Subject key identifier:   F2:63:88:48:2B:3C:68:E0:D1:65:60:A5:C4:C4:3C:5E:8B:03:8B:3A
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       6F9F7F4FADC2DFEBE2639F5E41A8CCEF0646BD5C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS49581.roa
Signing time:             Mon 10 Apr 2023 03:31:52 +0000
ROA not before:           Mon 10 Apr 2023 03:26:52 +0000
ROA not after:            Mon 08 Apr 2024 03:31:52 +0000
asID:                     49581
IP address blocks:        2a12:dd47:8500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9f:7f:4f:ad:c2:df:eb:e2:63:9f:5e:41:a8:cc:ef:06:46:bd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:52 2023 GMT
            Not After : Apr  8 03:31:52 2024 GMT
        Subject: CN=F26388482B3C68E0D16560A5C4C43C5E8B038B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:62:74:12:cf:62:ec:04:f4:33:19:1c:77:
                    60:3b:1f:a8:15:f8:60:61:a3:43:87:ca:b2:b3:c9:
                    ec:fe:ef:cf:91:af:2f:c3:f7:25:b0:8e:b2:00:1a:
                    0b:28:c6:39:1d:87:c7:1e:9d:bf:91:f3:1e:ec:78:
                    1b:e2:c3:84:56:e5:c9:ba:57:a6:1d:db:f4:5a:d2:
                    c3:af:39:67:eb:80:35:5d:8a:77:f6:7f:41:67:7b:
                    e8:7e:06:86:2d:39:eb:b2:bc:a2:2d:cd:42:4f:50:
                    3a:6b:b4:27:b0:64:af:5e:b5:bc:ae:ea:aa:ed:50:
                    aa:df:70:79:fc:38:3a:3e:83:02:b2:ac:d2:6a:3d:
                    37:be:e6:d6:c4:bc:82:c1:c1:57:2a:be:74:f4:ad:
                    6f:07:d7:ae:8d:bf:ea:b8:37:60:80:94:5c:72:30:
                    8d:4e:58:73:4d:fb:fe:42:fb:33:4e:e7:11:09:1e:
                    71:4b:68:39:9c:a8:5e:22:47:c5:cc:be:ba:7a:02:
                    0a:36:dc:b5:71:e2:95:ad:d9:41:07:16:89:25:50:
                    2c:33:26:84:8a:d4:8c:d1:ed:25:cd:fa:d1:2b:c2:
                    25:d1:1c:3b:ed:e6:98:2a:a9:f2:cb:c1:98:59:9e:
                    cf:06:d8:08:8c:82:fa:a4:81:d9:14:e3:c1:5d:b3:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:63:88:48:2B:3C:68:E0:D1:65:60:A5:C4:C4:3C:5E:8B:03:8B:3A
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS49581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8500::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:b2:86:4f:77:96:6d:cb:18:b1:f2:96:78:10:85:ba:08:97:
         d4:26:69:00:37:d4:cb:5b:e3:57:43:91:a6:d3:e5:ca:b3:8a:
         3a:a6:ba:84:7f:46:06:11:89:fa:05:6d:0f:97:d8:c3:37:a5:
         a8:34:20:b3:1f:dc:61:20:f7:2c:3e:9b:68:7b:d6:da:50:7e:
         19:9b:85:c6:70:3f:d3:c0:10:6b:06:e2:9b:e5:f9:38:eb:d1:
         40:b0:c0:8a:98:1a:02:d1:ab:c5:d0:31:50:9b:e9:be:aa:63:
         05:ea:72:5b:47:5f:87:39:c5:9a:49:61:fa:f4:3f:04:2f:35:
         7e:68:6e:56:fa:c5:bd:1a:cd:ec:4c:4c:59:c2:40:52:b9:ac:
         6a:51:25:3c:00:21:01:84:34:d8:03:33:29:44:ec:91:40:67:
         91:96:8b:d2:04:03:05:68:c2:bd:98:08:aa:c3:51:35:73:4d:
         26:7d:96:b5:fb:a5:7b:1a:31:f6:08:d7:49:74:ca:d4:31:bc:
         1f:1e:59:c7:73:ee:b9:ce:1d:7b:5c:7c:09:bd:f4:52:e6:e4:
         65:29:48:b0:3e:3a:d6:93:c2:a1:d0:0d:7a:6f:8d:2d:e7:fd:
         8d:a8:84:a6:e5:8f:53:1c:62:af:6f:95:fb:6a:1b:1d:5f:75:
         47:36:fe:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----