Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa
File:                     326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa (raw, json)
Hash identifier:          0dHaJ4qfvE2oLUQaYskr8kN9r8soA38zu6v8jF1r9PM=
Subject key identifier:   76:6F:3F:3D:7C:CB:1F:81:7A:BC:EF:17:BF:05:0D:C7:4D:11:9E:68
Certificate issuer:       /CN=40C513034911811188EE6887BB01091E1FE7EE0D
Certificate serial:       37AA47902087D2BCDDEA2E721432875F1458E215
Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority info access:    rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject info access:      rsync://rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa
Signing time:             Sun 07 Apr 2024 13:14:50 +0000
ROA not before:           Sun 07 Apr 2024 13:09:50 +0000
ROA not after:            Sun 06 Apr 2025 13:14:50 +0000
asID:                     151188
IP address blocks:        2a12:dd47:f200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:aa:47:90:20:87:d2:bc:dd:ea:2e:72:14:32:87:5f:14:58:e2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D
        Validity
            Not Before: Apr  7 13:09:50 2024 GMT
            Not After : Apr  6 13:14:50 2025 GMT
        Subject: CN=766F3F3D7CCB1F817ABCEF17BF050DC74D119E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:a6:70:d4:84:c0:b7:86:c6:27:93:d2:36:
                    19:fd:0f:c8:8c:99:de:37:63:0a:14:71:3e:5c:2b:
                    ed:7a:40:07:12:e3:72:64:f3:99:7f:39:3c:d5:b4:
                    bc:d6:a1:00:ee:52:34:db:ae:f1:45:ad:e1:8b:67:
                    b6:bb:b8:fb:6f:e8:83:93:32:c8:66:2a:b5:d4:4f:
                    8a:88:7c:07:13:15:d7:43:46:30:49:3f:53:d8:86:
                    fb:c6:99:48:d6:5c:2b:60:17:82:4d:07:13:36:69:
                    b9:a5:12:c7:c2:58:17:d7:04:8b:21:44:07:3b:a1:
                    92:5f:31:79:c5:4b:5b:92:22:85:c7:e3:3e:0e:30:
                    13:a5:10:af:11:b2:3c:b8:9f:c6:a4:d6:3e:f9:1d:
                    86:69:79:ed:3a:a8:9f:d8:b8:eb:6e:52:85:e4:c3:
                    ad:e5:11:81:de:5d:25:1d:f6:b6:b7:6c:81:e5:3f:
                    d3:96:13:9c:33:47:f5:9e:65:29:7d:35:76:2f:65:
                    01:e4:b4:25:24:10:1d:63:93:69:5c:5d:6e:57:2d:
                    a0:cf:df:e7:b8:21:93:2f:2b:56:ed:bc:95:38:54:
                    07:00:56:74:ce:44:9e:02:9f:30:65:3f:60:0f:24:
                    bb:9a:67:e2:fb:cc:bb:75:18:2f:a3:3c:bd:6f:4e:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6F:3F:3D:7C:CB:1F:81:7A:BC:EF:17:BF:05:0D:C7:4D:11:9E:68
            X509v3 Authority Key Identifier:
                keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Simple/1/326131323a646434373a663230303a3a2f34302d3438203d3e20313531313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:b3:0f:ca:13:6b:df:cd:42:40:a5:7b:2b:45:7a:6a:5c:
         97:91:b8:33:08:df:d8:d4:30:df:f6:e5:91:08:07:7b:e4:55:
         6a:22:e0:3d:14:90:6c:bc:25:8b:50:cf:db:53:ac:41:4c:87:
         87:3e:ce:50:67:b6:7e:0a:1e:5f:7d:d2:92:28:0a:cb:50:be:
         f5:03:d4:07:11:c9:be:16:5b:06:51:90:a1:99:0c:7b:45:27:
         25:ff:58:d8:a3:44:75:06:f7:0a:51:11:a0:85:81:fe:c6:2f:
         73:11:2d:c3:b9:70:23:d7:ff:7b:b9:eb:b9:42:0c:19:d1:28:
         b4:e8:2d:e7:5b:b0:58:e6:52:82:02:ab:9f:7b:95:df:02:8d:
         50:c4:d2:34:1a:2e:39:2a:e7:06:77:76:15:93:7f:e8:a4:f2:
         91:7c:a9:eb:ee:96:c9:32:93:ad:f7:ab:27:96:56:e8:1d:97:
         1f:5e:69:34:bd:3c:c9:54:cb:e9:9a:cb:ef:b5:12:f3:1e:29:
         6f:49:94:6a:b5:c1:ca:d3:9b:f3:13:37:b6:bd:ec:f8:ea:2d:
         c7:02:db:b0:37:99:99:fb:50:64:06:8d:29:94:81:59:2a:c5:
         c4:55:11:ac:08:9e:40:89:16:ee:c4:32:d8:1d:d6:f5:83:a0:
         c8:dc:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----