Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS212252/1/326130353a646663373a323230303a3a2f34302d3430203d3e20323132323532.roa
File:                     326130353a646663373a323230303a3a2f34302d3430203d3e20323132323532.roa (raw, json)
Hash identifier:          iFwfp4vdd94b6km22QtKS10NA7OH02QhH1dBYWNWU2U=
Subject key identifier:   69:8C:DF:1E:71:83:1E:EF:47:3A:21:F3:10:62:6F:55:CD:4B:70:D1
Certificate issuer:       /CN=C0043F61C766EFC2F6A5D0CA3CDA7114B7952E41
Certificate serial:       2518847289D6B1D25A00501195F5A5D54C047E30
Authority key identifier: C0:04:3F:61:C7:66:EF:C2:F6:A5:D0:CA:3C:DA:71:14:B7:95:2E:41
Authority info access:    rsync://rpki.co/repo/AS205432/0/C0043F61C766EFC2F6A5D0CA3CDA7114B7952E41.cer
Subject info access:      rsync://rpki.co/repo/AS212252/1/326130353a646663373a323230303a3a2f34302d3430203d3e20323132323532.roa
Signing time:             Sun 30 Apr 2023 16:19:55 +0000
ROA not before:           Sun 30 Apr 2023 16:14:55 +0000
ROA not after:            Sun 28 Apr 2024 16:19:55 +0000
asID:                     212252
IP address blocks:        2a05:dfc7:2200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:18:84:72:89:d6:b1:d2:5a:00:50:11:95:f5:a5:d5:4c:04:7e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0043F61C766EFC2F6A5D0CA3CDA7114B7952E41
        Validity
            Not Before: Apr 30 16:14:55 2023 GMT
            Not After : Apr 28 16:19:55 2024 GMT
        Subject: CN=698CDF1E71831EEF473A21F310626F55CD4B70D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:f2:1b:02:04:51:d5:1e:3e:7b:70:88:19:
                    4c:3c:ad:6a:56:de:0f:24:41:f1:71:01:6c:92:7c:
                    27:dc:80:4f:3b:69:24:6a:1d:b4:8f:6e:bb:7c:ca:
                    cb:8b:c1:2a:e2:61:e1:d0:c4:1c:42:45:d4:0b:d9:
                    62:de:7b:2e:e2:74:80:b0:00:c1:8e:ef:1a:d5:01:
                    ad:6c:1d:52:b3:20:67:c4:1d:09:59:a7:a1:cf:c0:
                    e4:bc:54:0f:de:10:89:d6:b6:35:d6:2f:15:61:5b:
                    88:95:26:7e:5e:07:f6:48:ad:1e:02:6d:30:a9:3c:
                    86:49:3e:92:7a:e2:28:70:f2:e7:64:1e:53:b0:dd:
                    6d:ef:58:df:3c:57:73:bc:ea:bc:22:4c:1b:9b:65:
                    a1:5f:a8:6c:2f:a6:54:1e:16:17:80:ae:94:29:47:
                    10:3c:09:e1:e3:71:0e:5b:cd:d0:f4:b7:d9:cb:87:
                    e9:b0:d7:a2:f1:de:c0:43:7c:d3:43:b9:df:40:07:
                    5e:f9:4e:7c:01:6f:3d:dd:1d:01:8f:22:11:b4:5e:
                    a9:5a:18:b1:d7:ab:9b:37:a5:26:0e:a8:c3:52:73:
                    79:77:3d:5d:5b:13:27:1c:40:55:af:7c:ec:f2:c3:
                    ac:20:f9:f7:2e:5c:32:0a:f2:26:63:17:99:df:25:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8C:DF:1E:71:83:1E:EF:47:3A:21:F3:10:62:6F:55:CD:4B:70:D1
            X509v3 Authority Key Identifier:
                keyid:C0:04:3F:61:C7:66:EF:C2:F6:A5:D0:CA:3C:DA:71:14:B7:95:2E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS212252/1/C0043F61C766EFC2F6A5D0CA3CDA7114B7952E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/C0043F61C766EFC2F6A5D0CA3CDA7114B7952E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS212252/1/326130353a646663373a323230303a3a2f34302d3430203d3e20323132323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:4a:1b:55:31:7d:b9:1f:57:68:3c:de:eb:79:14:b0:2a:
         69:ac:66:df:2d:0c:f8:40:4e:e9:a2:85:9a:79:af:5a:a0:13:
         59:b8:48:f0:6a:e4:d9:e1:67:8e:b5:ac:d5:13:7f:53:07:8c:
         be:04:f2:4e:b5:44:e2:8b:9d:a9:47:0b:49:48:a2:51:df:64:
         d3:85:4e:69:23:fb:9e:29:ab:77:64:8f:1c:53:e9:44:25:2d:
         33:9d:63:fc:f2:c5:93:2a:d8:b7:a3:be:02:3b:25:d4:b8:d4:
         d3:e4:b8:d9:e0:13:95:b7:8c:77:92:6e:62:5d:fd:19:46:c4:
         f1:f4:11:c6:fe:31:16:40:e9:ab:9f:28:9b:4c:15:9a:bc:ef:
         2f:85:8b:72:23:7d:2e:b1:9d:13:2f:66:39:be:71:02:3c:84:
         bb:af:e7:16:87:e4:0f:08:60:00:9d:2a:f3:70:e7:0a:f2:5f:
         b5:b1:e4:29:f3:51:f8:c8:3a:e6:80:29:e7:72:c1:71:d3:41:
         a5:2e:d3:5d:b6:a9:d7:33:ad:f6:44:ec:c4:f9:26:f8:6c:09:
         35:71:7a:21:23:7f:88:03:08:c2:de:dc:0f:2a:ce:52:a2:8f:
         5c:a8:fa:f5:bf:d9:77:4b:fb:8c:53:1e:b4:c2:d6:11:b8:22:
         e9:fc:e4:fb
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUJRiEconWsdJaAFARlfWl1UwEfjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAwNDNGNjFDNzY2RUZDMkY2QTVEMENBM0NEQTcxMTRC
Nzk1MkU0MTAeFw0yMzA0MzAxNjE0NTVaFw0yNDA0MjgxNjE5NTVaMDMxMTAvBgNV
BAMTKDY5OENERjFFNzE4MzFFRUY0NzNBMjFGMzEwNjI2RjU1Q0Q0QjcwRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGfIbAgRR1R4+e3CIGUw8rWpW
3g8kQfFxAWySfCfcgE87aSRqHbSPbrt8ysuLwSriYeHQxBxCRdQL2WLeey7idICw
AMGO7xrVAa1sHVKzIGfEHQlZp6HPwOS8VA/eEInWtjXWLxVhW4iVJn5eB/ZIrR4C
bTCpPIZJPpJ64ihw8udkHlOw3W3vWN88V3O86rwiTBubZaFfqGwvplQeFheArpQp
RxA8CeHjcQ5bzdD0t9nLh+mw16Lx3sBDfNNDud9AB175TnwBbz3dHQGPIhG0Xqla
GLHXq5s3pSYOqMNSc3l3PV1bEyccQFWvfOzyw6wg+fcuXDIK8iZjF5nfJb2PAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUaYzfHnGDHu9HOiHzEGJvVc1LcNEwHwYDVR0j
BBgwFoAUwAQ/Ycdm78L2pdDKPNpxFLeVLkEwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjEyMjUyLzEvQzAw
NDNGNjFDNzY2RUZDMkY2QTVEMENBM0NEQTcxMTRCNzk1MkU0MS5jcmwwaAYIKwYB
BQUHAQEEXDBaMFgGCCsGAQUFBzAChkxyc3luYzovL3Jwa2kuY28vcmVwby9BUzIw
NTQzMi8wL0MwMDQzRjYxQzc2NkVGQzJGNkE1RDBDQTNDREE3MTE0Qjc5NTJFNDEu
Y2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5j
by9yZXBvL0FTMjEyMjUyLzEvMzI2MTMwMzUzYTY0NjY2MzM3M2EzMjMyMzAzMDNh
M2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzMjMyMzUzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF
38ciMA0GCSqGSIb3DQEBCwUAA4IBAQB7LEobVTF9uR9XaDze63kUsCpprGbfLQz4
QE7pooWaea9aoBNZuEjwauTZ4WeOtazVE39TB4y+BPJOtUTii52pRwtJSKJR32TT
hU5pI/ueKat3ZI8cU+lEJS0znWP88sWTKti3o74COyXUuNTT5LjZ4BOVt4x3km5i
Xf0ZRsTx9BHG/jEWQOmrnyibTBWavO8vhYtyI30usZ0TL2Y5vnECPIS7r+cWh+QP
CGAAnSrzcOcK8l+1seQp81H4yDrmgCnncsFx00GlLtNdtqnXM632ROzE+Sb4bAk1
cXohI3+IAwjC3twPKs5Soo9cqPr1v9l3S/uMUx60wtYRuCLp/OT7
-----END CERTIFICATE-----