Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS210152.roa
File:                     AS210152.roa (raw, json)
Hash identifier:          uXDkm62ur8NdiGleBj8Tsr2XXo0TWqZ67Q0nfHL+dkc=
Subject key identifier:   97:36:17:E5:FD:2F:27:40:3C:0B:C9:46:DB:B2:34:07:9B:4E:53:15
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2C535927C3E4895D2FFE1EAA754932E5A38FF6B8
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS210152.roa
Signing time:             Mon 10 Apr 2023 03:31:39 +0000
ROA not before:           Mon 10 Apr 2023 03:26:39 +0000
ROA not after:            Mon 08 Apr 2024 03:31:39 +0000
asID:                     210152
IP address blocks:        2a12:dd47:8020::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:53:59:27:c3:e4:89:5d:2f:fe:1e:aa:75:49:32:e5:a3:8f:f6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:39 2023 GMT
            Not After : Apr  8 03:31:39 2024 GMT
        Subject: CN=973617E5FD2F27403C0BC946DBB234079B4E5315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:b3:02:bb:f2:1a:51:06:a5:c6:37:96:56:
                    51:6e:db:4e:41:aa:a4:b1:63:15:b9:8d:d6:48:9c:
                    99:d4:52:30:7a:20:75:2d:90:54:79:1a:1d:3c:dc:
                    90:d5:b7:af:45:59:ad:2e:44:87:4e:9d:d3:03:2c:
                    06:ca:21:e9:06:b0:82:6d:df:30:13:b5:25:d1:64:
                    d7:69:39:89:b4:5b:b3:53:b9:7f:c1:e4:ab:e9:a3:
                    ba:8f:be:50:dd:54:1a:6b:7a:06:f2:ee:86:f4:fc:
                    90:62:21:ec:c9:de:a5:ff:7d:eb:a0:75:24:ad:68:
                    45:de:93:29:d6:0e:74:8a:6c:fb:0b:0e:5d:33:d1:
                    3d:d1:52:66:02:75:07:4e:01:58:d1:0c:54:23:c3:
                    44:5d:89:46:81:8c:bc:a4:94:3d:a4:8b:6e:b5:80:
                    17:1b:a9:7e:57:88:cf:0a:34:17:e2:63:4c:43:ac:
                    c8:54:30:89:71:0b:c4:4f:47:81:91:0a:41:f1:a0:
                    56:82:6a:00:0c:58:4c:24:01:8d:14:c5:35:98:06:
                    64:bd:db:6b:28:31:c9:dd:18:6f:51:d3:07:bd:5c:
                    37:7a:3a:2b:b6:71:7f:33:28:f3:0d:2d:98:84:01:
                    86:12:c8:b3:f2:2a:8e:9b:9a:c3:b4:01:f9:16:83:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:36:17:E5:FD:2F:27:40:3C:0B:C9:46:DB:B2:34:07:9B:4E:53:15
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS210152.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8020::/45

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:37:ff:d9:a4:af:d6:20:d2:96:53:de:63:ee:13:74:29:
         da:04:dc:0d:01:a2:c8:a4:55:a0:5a:40:43:43:3f:1a:5e:d2:
         cd:63:c4:10:e2:d4:e5:27:63:1e:5b:1b:6b:5e:1b:66:1a:bb:
         d4:ae:57:8d:83:5c:9c:dc:20:8d:a6:c2:ff:b4:00:64:ea:31:
         05:4c:8f:5e:d4:4e:ee:d3:85:a0:69:b6:08:51:61:a1:47:8d:
         f3:48:81:d8:41:e8:57:91:dc:ca:16:57:a9:4b:16:a8:d8:ce:
         b2:45:af:f9:13:1b:da:20:6b:d8:f7:64:6d:27:bd:6e:51:bd:
         02:03:84:fe:2e:13:c6:40:26:ba:ec:5b:01:67:91:04:b8:40:
         f4:65:b1:91:9a:4f:f1:b2:c1:87:ac:da:f7:b3:77:d4:1a:4e:
         90:6e:b3:9a:6e:f3:4e:87:d9:6b:19:03:01:d2:1a:c5:58:f2:
         c8:79:36:ed:59:de:99:b8:4a:75:7f:3f:76:9f:e8:e1:58:0e:
         55:ab:44:4c:b1:3e:be:43:87:eb:49:4e:71:08:72:7a:b6:20:
         5f:dd:9d:d9:95:03:87:c1:86:a4:3a:17:25:78:23:8a:1e:3f:
         50:c5:be:00:40:b4:ea:42:c0:10:e1:74:83:55:ea:73:ce:04:
         ca:49:26:5e
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIULFNZJ8PkiV0v/h6qdUky5aOP9rgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzlaFw0yNDA0MDgwMzMxMzlaMDMxMTAvBgNV
BAMTKDk3MzYxN0U1RkQyRjI3NDAzQzBCQzk0NkRCQjIzNDA3OUI0RTUzMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqrMCu/IaUQalxjeWVlFu205B
qqSxYxW5jdZInJnUUjB6IHUtkFR5Gh083JDVt69FWa0uRIdOndMDLAbKIekGsIJt
3zATtSXRZNdpOYm0W7NTuX/B5Kvpo7qPvlDdVBpregby7ob0/JBiIezJ3qX/feug
dSStaEXekynWDnSKbPsLDl0z0T3RUmYCdQdOAVjRDFQjw0RdiUaBjLyklD2ki261
gBcbqX5XiM8KNBfiY0xDrMhUMIlxC8RPR4GRCkHxoFaCagAMWEwkAY0UxTWYBmS9
22soMcndGG9R0we9XDd6Oiu2cX8zKPMNLZiEAYYSyLPyKo6bmsO0AfkWgwmVAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUlzYX5f0vJ0A8C8lG27I0B5tOUxUwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMTAxNTIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMqEt1HgCAwDQYJKoZIhvcNAQEL
BQADggEBAG62N//ZpK/WINKWU95j7hN0KdoE3A0BosikVaBaQENDPxpe0s1jxBDi
1OUnYx5bG2teG2Yau9SuV42DXJzcII2mwv+0AGTqMQVMj17UTu7ThaBptghRYaFH
jfNIgdhB6FeR3MoWV6lLFqjYzrJFr/kTG9oga9j3ZG0nvW5RvQIDhP4uE8ZAJrrs
WwFnkQS4QPRlsZGaT/GywYes2vezd9QaTpBus5pu806H2WsZAwHSGsVY8sh5Nu1Z
3pm4SnV/P3af6OFYDlWrREyxPr5Dh+tJTnEIcnq2IF/dndmVA4fBhqQ6FyV4I4oe
P1DFvgBAtOpCwBDhdINV6nPOBMpJJl4=
-----END CERTIFICATE-----