Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS56731.roa
File:                     AS56731.roa (raw, json)
Hash identifier:          HeeN6boHaYsN+3+4Y7PMcfyh3qE8t/yHDNAteQnnB+0=
Subject key identifier:   62:85:46:F6:F2:52:02:4A:68:BB:75:96:DE:4D:90:02:98:64:64:F8
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       24E220B1B63F263E5503F43CE1879825A8A6859C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS56731.roa
Signing time:             Mon 10 Apr 2023 03:31:42 +0000
ROA not before:           Mon 10 Apr 2023 03:26:42 +0000
ROA not after:            Mon 08 Apr 2024 03:31:42 +0000
asID:                     56731
IP address blocks:        2a12:dd47:8e20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e2:20:b1:b6:3f:26:3e:55:03:f4:3c:e1:87:98:25:a8:a6:85:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:42 2023 GMT
            Not After : Apr  8 03:31:42 2024 GMT
        Subject: CN=628546F6F252024A68BB7596DE4D9002986464F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:c5:4d:3b:3a:f7:ce:00:a4:b2:df:b1:5d:
                    56:3c:02:39:ac:6a:cd:7a:c0:bd:f5:16:b6:1a:fc:
                    bc:c3:c5:d1:67:9c:86:c9:a4:aa:23:d7:7a:bd:86:
                    cf:73:1f:2d:6f:22:9f:2e:18:75:69:92:71:5d:61:
                    a0:0e:26:e2:67:7f:34:73:1d:c3:6e:50:15:39:66:
                    3f:77:04:81:e4:22:f5:8c:35:60:8f:33:70:8d:7e:
                    f0:86:e4:19:47:cd:fe:03:59:be:01:a6:47:5c:85:
                    07:ff:1b:c4:0c:70:95:ce:4d:c8:99:ce:75:42:b2:
                    9b:40:7a:fd:eb:12:10:3f:c6:0e:cd:cf:f1:ea:fa:
                    1f:07:d1:45:37:c1:12:88:76:88:8c:6c:80:8c:b4:
                    4c:63:16:0c:6b:e8:8f:6c:1a:a0:21:3c:41:c1:a3:
                    05:3d:16:69:36:e7:e6:7a:23:4e:2d:9d:2b:fa:57:
                    a5:22:a4:84:33:e4:dc:3d:2e:8f:6c:de:18:d4:06:
                    3b:18:63:6f:52:e8:0e:3c:55:40:93:32:f1:16:3e:
                    ac:44:9a:73:3e:71:11:41:3f:07:d8:b4:7c:72:58:
                    e8:b0:38:0d:d9:27:1b:fc:d2:3d:80:24:ab:2a:b6:
                    ca:b8:89:54:b8:14:f7:a7:0d:b7:cf:b6:e0:6a:86:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:85:46:F6:F2:52:02:4A:68:BB:75:96:DE:4D:90:02:98:64:64:F8
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS56731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:37:2a:5f:97:da:5b:c0:ad:14:97:77:3e:af:1f:24:88:c5:
         22:03:47:85:6b:af:f1:44:f4:95:49:b2:74:b8:27:5a:25:c6:
         69:c8:31:65:3a:14:bb:4e:8b:1e:c2:2a:e2:a8:d7:11:fe:b8:
         44:65:d0:fb:1b:51:1a:77:8f:16:c3:32:00:89:f6:a5:70:bd:
         12:d0:0e:98:bb:23:2b:b6:03:cc:a5:ce:89:47:3f:c6:f1:b9:
         9f:ba:fa:96:85:f6:48:4f:74:5c:4a:22:dc:49:a0:8c:b1:d8:
         8c:26:f9:3d:09:b2:3c:c4:6b:97:e7:85:ce:c0:82:01:ba:9f:
         97:73:f4:48:d4:75:76:02:7a:fa:df:68:37:d8:4a:b5:a2:29:
         f3:42:69:26:88:85:9c:a8:23:f8:bb:19:f1:80:bf:38:5e:64:
         31:08:e1:49:30:a3:29:01:d1:83:27:dd:56:f5:73:8d:0a:8a:
         a0:26:79:00:16:42:3e:df:34:a0:9a:2d:65:55:4c:28:54:c7:
         3e:e8:f2:dd:27:75:87:5e:63:3f:aa:05:d0:7d:8a:8f:54:9c:
         b3:06:9e:72:9b:52:cf:f6:6e:69:c6:c9:3a:4f:86:85:a2:84:
         dd:81:8b:5a:ff:f1:85:ba:c9:b9:f1:48:1b:18:f8:62:00:4e:
         85:3f:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----