Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430323a3a2f34382d3438203d3e20323131363034.roa
File:                     326131323a646434373a336430323a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier:          WEfu1eoqHsflXApbBc8jS82tzQNFU9GuPvq3he97Tnk=
Subject key identifier:   10:7C:35:15:BF:21:34:9F:70:F8:06:28:2F:22:5C:D3:52:EF:75:94
Certificate issuer:       /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial:       365EA7E37601F4DCF873C409AABB923CF182142E
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access:    rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access:      rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430323a3a2f34382d3438203d3e20323131363034.roa
Signing time:             Thu 02 May 2024 18:15:19 +0000
ROA not before:           Thu 02 May 2024 18:10:19 +0000
ROA not after:            Thu 01 May 2025 18:15:19 +0000
asID:                     211604
IP address blocks:        2a12:dd47:3d02::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5e:a7:e3:76:01:f4:dc:f8:73:c4:09:aa:bb:92:3c:f1:82:14:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Validity
            Not Before: May  2 18:10:19 2024 GMT
            Not After : May  1 18:15:19 2025 GMT
        Subject: CN=107C3515BF21349F70F806282F225CD352EF7594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:86:62:e4:b2:19:1e:46:92:6b:2d:21:45:50:
                    cf:16:3e:29:5e:e0:3e:5e:31:0d:36:98:d2:ce:04:
                    e2:6f:ff:aa:80:66:c1:95:10:7a:01:85:2c:a0:0f:
                    09:15:27:b8:c5:1c:24:92:c8:3f:5d:e7:f1:52:e7:
                    66:40:45:13:e7:b6:e7:e5:62:28:c1:5e:0a:f0:fb:
                    ba:ea:16:30:b7:06:e1:0f:1f:5e:bb:3a:f5:7a:78:
                    bd:2a:39:d0:cc:af:86:67:9e:c2:f7:06:d6:de:fe:
                    c6:eb:5a:06:ca:2c:1e:ab:9e:3f:ad:9a:0e:10:2a:
                    4a:86:6b:e9:28:f1:55:e4:8c:b4:61:12:e9:f1:3e:
                    bd:6c:79:9c:e3:23:ac:dd:58:19:98:27:c7:90:b6:
                    e3:59:0c:f7:42:58:35:1e:bb:c1:6d:3c:62:58:23:
                    f8:35:45:24:d5:12:5c:2a:e6:84:aa:42:49:b2:f5:
                    e2:09:7f:d8:97:cd:1a:5f:ac:0e:5f:42:3a:73:32:
                    08:b9:00:bf:96:ae:f2:bf:f8:c2:b2:a4:f1:ae:7e:
                    02:20:1e:ef:fa:41:ac:11:ec:71:e3:76:85:b9:85:
                    77:99:17:3a:4a:6c:2d:9d:01:e7:fb:c4:7c:1a:15:
                    7d:8c:3c:de:12:6f:40:34:c6:10:c7:26:a3:82:6d:
                    56:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7C:35:15:BF:21:34:9F:70:F8:06:28:2F:22:5C:D3:52:EF:75:94
            X509v3 Authority Key Identifier:
                keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430323a3a2f34382d3438203d3e20323131363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3d02::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:c5:82:21:65:8a:a1:97:98:06:96:35:88:26:32:3e:ab:6f:
         07:6e:ac:18:fb:af:fc:63:2a:d7:45:5b:3f:dc:7d:48:de:44:
         25:0b:6c:1e:58:86:42:1c:36:60:76:39:f6:e5:da:ff:9f:a4:
         52:46:db:b5:8d:1d:e3:93:80:27:91:be:fb:4d:7e:38:7f:54:
         a8:a0:b5:1e:ac:e9:d9:54:a6:3c:51:ef:46:a6:f5:a7:6a:1f:
         c9:4a:2f:cc:f8:0f:90:a4:a7:30:08:98:88:f5:7c:e9:76:da:
         47:2e:01:98:be:50:b0:01:60:09:f3:4d:07:ed:81:07:05:2d:
         5f:da:c6:6f:eb:d4:4d:26:ae:aa:1b:79:56:c1:f9:5d:f5:ca:
         21:06:6d:42:3f:c7:fc:84:46:d6:1e:ef:7e:82:1b:07:66:1a:
         22:f7:e9:c6:fd:a6:e2:52:af:3c:d9:39:85:88:df:ed:b1:7c:
         35:a7:4a:00:c6:a5:c4:47:36:dc:6d:8b:5e:13:79:a5:c9:68:
         2d:f8:5f:ec:79:1c:e7:fd:6a:a4:62:22:a8:48:ce:97:4b:c4:
         cf:b0:c9:41:e9:a3:24:7d:3d:2b:01:97:b7:5b:37:08:65:15:
         95:b8:10:92:30:fb:24:b3:12:89:cb:66:61:64:03:c1:77:d1:
         ac:d0:7b:4f
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIUNl6n43YB9Nz4c8QJqruSPPGCFC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVBNzMwQ0E4MzUxMzY5RkMzODI4RDBEQzI5Nzg1NkFF
NzRFOEMxMTAeFw0yNDA1MDIxODEwMTlaFw0yNTA1MDExODE1MTlaMDMxMTAvBgNV
BAMTKDEwN0MzNTE1QkYyMTM0OUY3MEY4MDYyODJGMjI1Q0QzNTJFRjc1OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmhmLkshkeRpJrLSFFUM8WPile
4D5eMQ02mNLOBOJv/6qAZsGVEHoBhSygDwkVJ7jFHCSSyD9d5/FS52ZARRPntufl
YijBXgrw+7rqFjC3BuEPH167OvV6eL0qOdDMr4ZnnsL3Btbe/sbrWgbKLB6rnj+t
mg4QKkqGa+ko8VXkjLRhEunxPr1seZzjI6zdWBmYJ8eQtuNZDPdCWDUeu8FtPGJY
I/g1RSTVElwq5oSqQkmy9eIJf9iXzRpfrA5fQjpzMgi5AL+WrvK/+MKypPGufgIg
Hu/6QawR7HHjdoW5hXeZFzpKbC2dAef7xHwaFX2MPN4Sb0A0xhDHJqOCbVZ/AgMB
AAGjggHbMIIB1zAdBgNVHQ4EFgQUEHw1Fb8hNJ9w+AYoLyJc01LvdZQwHwYDVR0j
BBgwFoAUBacwyoNRNp/Dgo0NwpeFaudOjBEwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjExNjA0LzEvMDVB
NzMwQ0E4MzUxMzY5RkMzODI4RDBEQzI5Nzg1NkFFNzRFOEMxMS5jcmwwZQYIKwYB
BQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0
NS8xLzA1QTczMENBODM1MTM2OUZDMzgyOEQwREMyOTc4NTZBRTc0RThDMTEuY2Vy
MIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jby9y
ZXBvL0FTMjExNjA0LzEvMzI2MTMxMzIzYTY0NjQzNDM3M2EzMzY0MzAzMjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMTM2MzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3Uc9
AjANBgkqhkiG9w0BAQsFAAOCAQEAX8WCIWWKoZeYBpY1iCYyPqtvB26sGPuv/GMq
10VbP9x9SN5EJQtsHliGQhw2YHY59uXa/5+kUkbbtY0d45OAJ5G++01+OH9UqKC1
Hqzp2VSmPFHvRqb1p2ofyUovzPgPkKSnMAiYiPV86XbaRy4BmL5QsAFgCfNNB+2B
BwUtX9rGb+vUTSauqht5VsH5XfXKIQZtQj/H/IRG1h7vfoIbB2YaIvfpxv2m4lKv
PNk5hYjf7bF8NadKAMalxEc23G2LXhN5pcloLfhf7Hkc5/1qpGIiqEjOl0vEz7DJ
QemjJH09KwGXt1s3CGUVlbgQkjD7JLMSictmYWQDwXfRrNB7Tw==
-----END CERTIFICATE-----