Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS200447/1/326130353a646663373a333630303a3a2f33392d3339203d3e20323030343437.roa
File:                     326130353a646663373a333630303a3a2f33392d3339203d3e20323030343437.roa (raw, json)
Hash identifier:          mWSFx/JMkLAS6pyyNoeW9J82ibc+GD2MtFUI2sKA5WM=
Subject key identifier:   16:EB:E2:11:BB:52:E4:B8:6B:80:63:6D:8D:B0:BA:5A:4D:CF:A7:55
Certificate issuer:       /CN=B07BA3B6FEC519AF5118588A2B0548B01F7AEE71
Certificate serial:       3641C03A387077934F57E8636B46B7AE8DAC51F6
Authority key identifier: B0:7B:A3:B6:FE:C5:19:AF:51:18:58:8A:2B:05:48:B0:1F:7A:EE:71
Authority info access:    rsync://rpki.co/repo/AS205432/0/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.cer
Subject info access:      rsync://rpki.co/repo/AS200447/1/326130353a646663373a333630303a3a2f33392d3339203d3e20323030343437.roa
Signing time:             Wed 26 Apr 2023 20:03:53 +0000
ROA not before:           Wed 26 Apr 2023 19:58:53 +0000
ROA not after:            Wed 24 Apr 2024 20:03:53 +0000
asID:                     200447
IP address blocks:        2a05:dfc7:3600::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:41:c0:3a:38:70:77:93:4f:57:e8:63:6b:46:b7:ae:8d:ac:51:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B07BA3B6FEC519AF5118588A2B0548B01F7AEE71
        Validity
            Not Before: Apr 26 19:58:53 2023 GMT
            Not After : Apr 24 20:03:53 2024 GMT
        Subject: CN=16EBE211BB52E4B86B80636D8DB0BA5A4DCFA755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:5f:57:fd:b3:ed:b8:6c:53:0f:1e:76:94:
                    56:03:6d:02:51:a7:07:a5:9d:93:08:2e:b8:6a:21:
                    48:e0:9c:67:ac:8f:b6:53:57:9c:bc:14:c2:f0:38:
                    b1:1e:99:69:fa:48:52:47:11:c5:b2:48:a4:5a:36:
                    8d:1e:44:17:a5:32:74:ac:48:61:72:b3:e1:67:61:
                    e3:42:2e:1f:d1:e8:84:54:58:5e:44:2d:8c:b3:6d:
                    d5:e1:18:69:f5:cf:8f:50:10:30:bc:a4:1d:23:9d:
                    9b:81:f4:80:5a:4d:58:cd:c2:52:51:f4:d2:75:fd:
                    2b:79:44:61:4e:50:2a:16:1c:ae:f7:7d:14:16:8e:
                    32:a3:d0:99:bc:d4:49:2d:74:e8:88:f0:1b:27:80:
                    19:96:df:01:e9:56:fa:ff:93:76:bf:16:b5:c9:19:
                    3a:a3:1e:7c:78:9e:c7:e8:05:8d:81:e2:2a:a9:eb:
                    17:4e:3a:13:6d:4c:6f:a9:e9:b9:12:31:74:34:9d:
                    e1:08:fe:47:0b:4c:ff:ec:75:10:53:aa:71:f6:f4:
                    8e:10:85:2b:22:25:b4:b7:9d:91:97:5f:32:e2:0d:
                    28:f0:aa:6f:41:a2:51:09:9f:a9:38:63:93:18:91:
                    a3:06:8a:be:3f:bb:d0:fa:68:e1:17:9c:a6:2e:5f:
                    ac:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EB:E2:11:BB:52:E4:B8:6B:80:63:6D:8D:B0:BA:5A:4D:CF:A7:55
            X509v3 Authority Key Identifier:
                keyid:B0:7B:A3:B6:FE:C5:19:AF:51:18:58:8A:2B:05:48:B0:1F:7A:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS200447/1/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS200447/1/326130353a646663373a333630303a3a2f33392d3339203d3e20323030343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:3600::/39

    Signature Algorithm: sha256WithRSAEncryption
         74:83:3a:c7:1c:7d:3a:4a:98:55:fc:a1:1f:48:e9:55:53:72:
         3e:77:79:6b:c7:8c:ac:69:a1:22:99:5b:97:79:1a:30:f0:0f:
         39:47:60:76:ba:a2:5b:69:72:9e:b1:4c:60:27:79:a0:3d:91:
         9f:39:24:80:54:26:19:8e:6e:93:fa:09:a5:38:56:9c:38:ea:
         ca:5d:57:8e:11:bf:49:79:e2:d5:9a:21:f1:ff:7f:4c:22:ac:
         6b:b1:34:90:8c:a4:7d:95:a3:25:9a:79:d9:ff:c6:2e:16:0e:
         bf:72:be:b2:48:bb:21:48:1a:46:6e:dc:67:cc:c2:3a:9e:df:
         5a:e7:45:11:f5:a4:4e:fd:91:5d:81:28:35:35:5e:0d:14:b5:
         37:d3:1f:ba:70:36:82:7d:1e:97:d2:9a:54:96:35:30:99:a9:
         d0:87:da:28:b8:1c:1e:f1:ea:99:56:2c:b4:8c:da:97:ad:ad:
         bc:8e:61:a4:eb:3b:a6:55:50:09:6f:bb:5f:2c:7b:53:b9:53:
         dc:69:f0:fc:1b:df:52:c2:e7:85:16:fd:6e:e0:eb:49:e4:5b:
         be:77:37:83:b0:ba:b8:40:96:eb:fb:5d:09:d9:8b:c5:f3:df:
         47:c1:e5:db:ea:12:4e:64:7b:a8:6e:a1:53:8f:08:4a:27:70:
         da:1f:42:75
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUNkHAOjhwd5NPV+hja0a3ro2sUfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA3QkEzQjZGRUM1MTlBRjUxMTg1ODhBMkIwNTQ4QjAx
RjdBRUU3MTAeFw0yMzA0MjYxOTU4NTNaFw0yNDA0MjQyMDAzNTNaMDMxMTAvBgNV
BAMTKDE2RUJFMjExQkI1MkU0Qjg2QjgwNjM2RDhEQjBCQTVBNERDRkE3NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DF9X/bPtuGxTDx52lFYDbQJR
pwelnZMILrhqIUjgnGesj7ZTV5y8FMLwOLEemWn6SFJHEcWySKRaNo0eRBelMnSs
SGFys+FnYeNCLh/R6IRUWF5ELYyzbdXhGGn1z49QEDC8pB0jnZuB9IBaTVjNwlJR
9NJ1/St5RGFOUCoWHK73fRQWjjKj0Jm81EktdOiI8BsngBmW3wHpVvr/k3a/FrXJ
GTqjHnx4nsfoBY2B4iqp6xdOOhNtTG+p6bkSMXQ0neEI/kcLTP/sdRBTqnH29I4Q
hSsiJbS3nZGXXzLiDSjwqm9BolEJn6k4Y5MYkaMGir4/u9D6aOEXnKYuX6x3AgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUFuviEbtS5LhrgGNtjbC6Wk3Pp1UwHwYDVR0j
BBgwFoAUsHujtv7FGa9RGFiKKwVIsB967nEwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjAwNDQ3LzEvQjA3
QkEzQjZGRUM1MTlBRjUxMTg1ODhBMkIwNTQ4QjAxRjdBRUU3MS5jcmwwaAYIKwYB
BQUHAQEEXDBaMFgGCCsGAQUFBzAChkxyc3luYzovL3Jwa2kuY28vcmVwby9BUzIw
NTQzMi8wL0IwN0JBM0I2RkVDNTE5QUY1MTE4NTg4QTJCMDU0OEIwMUY3QUVFNzEu
Y2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5j
by9yZXBvL0FTMjAwNDQ3LzEvMzI2MTMwMzUzYTY0NjY2MzM3M2EzMzM2MzAzMDNh
M2EyZjMzMzkyZDMzMzkyMDNkM2UyMDMyMzAzMDM0MzQzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASoF
38c2MA0GCSqGSIb3DQEBCwUAA4IBAQB0gzrHHH06SphV/KEfSOlVU3I+d3lrx4ys
aaEimVuXeRow8A85R2B2uqJbaXKesUxgJ3mgPZGfOSSAVCYZjm6T+gmlOFacOOrK
XVeOEb9JeeLVmiHx/39MIqxrsTSQjKR9laMlmnnZ/8YuFg6/cr6ySLshSBpGbtxn
zMI6nt9a50UR9aRO/ZFdgSg1NV4NFLU30x+6cDaCfR6X0ppUljUwmanQh9oouBwe
8eqZViy0jNqXra28jmGk6zumVVAJb7tfLHtTuVPcafD8G99SwueFFv1u4OtJ5Fu+
dzeDsLq4QJbr+10J2YvF899HweXb6hJOZHuobqFTjwhKJ3DaH0J1
-----END CERTIFICATE-----