Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199177.roa
File:                     AS199177.roa (raw, json)
Hash identifier:          1sly+V8LOxOTFi8zX4s/6xTzMc0VXVcx4vQ9MV/eERM=
Subject key identifier:   F6:AF:A7:7D:6E:8C:E1:D6:10:56:A2:36:E8:08:EC:33:D1:C4:D7:39
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5E6150D41F752C9B72C8F5C535B1B00F235B1DB4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199177.roa
Signing time:             Wed 12 Apr 2023 06:57:56 +0000
ROA not before:           Wed 12 Apr 2023 06:52:56 +0000
ROA not after:            Wed 10 Apr 2024 06:57:56 +0000
asID:                     199177
IP address blocks:        2a12:dd47:3b00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:61:50:d4:1f:75:2c:9b:72:c8:f5:c5:35:b1:b0:0f:23:5b:1d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 12 06:52:56 2023 GMT
            Not After : Apr 10 06:57:56 2024 GMT
        Subject: CN=F6AFA77D6E8CE1D61056A236E808EC33D1C4D739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:11:3a:ef:ae:5d:db:51:3d:57:36:b0:27:
                    94:e0:2c:9d:f2:bc:6e:c9:d1:e9:bc:ff:56:0b:46:
                    99:4e:0b:4f:01:90:67:3d:4a:db:1a:3e:09:2e:21:
                    35:cb:8a:ae:c7:eb:05:d0:b5:25:84:d4:f4:cd:0a:
                    17:5c:0a:28:78:60:a8:71:0d:91:21:a3:c1:3f:d6:
                    58:3f:5e:7b:a2:02:69:64:74:65:75:a6:d0:41:c8:
                    a5:c9:70:ca:46:cf:a9:60:98:e4:d4:4c:2e:7a:4a:
                    45:80:01:58:b0:4e:2d:52:64:9c:a7:7c:af:b6:0d:
                    fd:ff:15:8c:13:15:28:a0:04:d2:a4:98:fa:37:d0:
                    e5:d3:f9:23:92:89:88:9f:c7:a3:08:7e:29:7d:6f:
                    d1:40:68:42:da:fe:6b:39:db:bd:ee:1b:c7:51:9b:
                    cf:13:95:cf:b9:51:fd:17:d6:76:9e:0f:04:3c:d8:
                    4f:e6:d0:bb:fa:d7:f1:bb:a8:0c:5b:1d:71:29:5d:
                    64:bf:9c:c8:24:10:71:2d:a4:4c:e0:11:6a:02:a7:
                    9e:40:85:e6:c2:72:0e:3b:c4:a1:6e:76:bf:10:c8:
                    5c:b3:48:ef:91:81:e2:ac:1b:26:41:f1:6f:2c:88:
                    3c:ed:78:cf:94:a0:77:e7:48:a9:38:1a:93:a1:87:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AF:A7:7D:6E:8C:E1:D6:10:56:A2:36:E8:08:EC:33:D1:C4:D7:39
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199177.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:63:c1:02:9b:d5:5d:e0:e7:d9:05:be:08:ad:e8:f5:ff:9e:
         8d:1b:37:a9:d4:d6:41:b1:75:fa:98:0c:79:c2:d6:74:89:a5:
         53:2c:26:4e:03:a5:6c:f4:a8:5e:f9:e3:92:2e:d8:3e:c5:ba:
         48:1f:a9:0f:48:e4:94:ae:fa:8f:3d:bf:cc:3e:9b:f9:80:b7:
         de:a9:df:07:64:57:f9:79:58:e2:a8:29:67:54:4e:33:53:48:
         b7:9a:4a:a8:e3:cb:43:e1:53:5a:99:d0:ed:5f:df:89:42:ec:
         4a:fe:00:de:cb:27:5e:fa:a8:a8:69:af:e1:31:63:e5:12:03:
         01:89:9f:11:65:1e:84:cf:68:07:64:d5:e0:af:b2:82:f3:17:
         f9:6a:dd:7f:fa:61:6a:f1:5d:d4:1a:b8:cf:34:b4:8f:32:c3:
         ea:94:68:59:03:83:13:4e:1b:60:7c:f0:4d:ce:49:11:cf:45:
         48:7e:0a:8c:91:5f:fe:3c:1f:df:b5:9d:c6:5c:3b:05:13:f1:
         f7:92:27:71:d5:30:a8:f3:c8:50:4e:3e:ed:73:21:a0:fb:ab:
         12:ea:58:fc:89:c7:11:14:19:eb:9a:db:84:6a:a2:a3:72:ab:
         8f:77:03:d3:a3:83:27:ae:d9:9a:57:70:1f:d1:40:6f:16:16:
         a8:ef:ad:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----