Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199203.roa
File:                     AS199203.roa (raw, json)
Hash identifier:          bCCfw714j6fMbEL0NJHCpeGv8pb/sESmxLlC4zI3tRU=
Subject key identifier:   0B:9A:94:51:E6:C0:FB:6A:91:F2:74:73:83:F9:70:8A:FA:FC:F4:64
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5EE583CADA2CD310A56FA3A1EC3F331AC5EAB45E
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199203.roa
Signing time:             Mon 10 Apr 2023 03:31:43 +0000
ROA not before:           Mon 10 Apr 2023 03:26:43 +0000
ROA not after:            Mon 08 Apr 2024 03:31:43 +0000
asID:                     199203
IP address blocks:        2a12:dd47:3000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e5:83:ca:da:2c:d3:10:a5:6f:a3:a1:ec:3f:33:1a:c5:ea:b4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:43 2023 GMT
            Not After : Apr  8 03:31:43 2024 GMT
        Subject: CN=0B9A9451E6C0FB6A91F2747383F9708AFAFCF464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:c4:04:d0:81:48:1e:ee:a4:63:09:69:4e:
                    e5:1c:4c:1a:c1:a3:d4:0c:3e:63:25:16:a3:cb:13:
                    0d:34:c4:43:f7:7e:fd:0a:03:00:22:59:82:29:4e:
                    60:47:4a:b7:54:e1:17:cd:cb:05:ec:db:26:91:c6:
                    96:e0:13:c6:07:c9:b1:57:e5:59:74:58:64:36:29:
                    6b:49:d8:b2:c8:9c:2c:b0:da:63:e4:89:0d:c0:43:
                    49:b9:7c:25:d3:40:e0:a2:09:4f:02:7e:81:37:18:
                    42:dd:55:b6:f7:29:ec:84:17:aa:95:41:c8:0e:3c:
                    17:10:8b:50:99:3b:3c:87:56:28:b2:53:e3:8e:88:
                    7b:5c:c2:17:06:f5:6c:6d:5d:a2:93:6a:dc:04:ff:
                    5a:f2:b8:0a:e7:24:41:29:a2:b0:f5:80:e0:d8:e9:
                    e5:0b:6e:e5:32:ea:f4:ad:5c:44:2b:27:3f:d0:44:
                    52:29:e9:1d:4c:f5:f0:a3:3b:0f:04:d3:d9:17:e5:
                    e0:2d:cc:f7:93:82:b2:cf:0e:77:07:c4:d1:bb:e9:
                    3a:9d:b7:28:eb:36:09:25:45:ea:ea:65:56:61:43:
                    71:0f:48:89:e9:11:b1:60:2b:e5:89:e2:78:07:95:
                    3b:7b:ae:97:5d:9e:14:54:a7:88:5b:5e:2f:c5:39:
                    00:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9A:94:51:E6:C0:FB:6A:91:F2:74:73:83:F9:70:8A:FA:FC:F4:64
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199203.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:7a:f8:ce:fa:2d:68:70:df:2b:8b:2e:7e:18:1e:86:13:b8:
         e1:8d:22:52:14:09:31:53:3a:c3:4b:eb:35:6b:65:d2:aa:71:
         9e:b3:46:75:8c:a4:e8:dc:91:7d:30:5f:33:0a:cd:a5:0a:35:
         fd:b6:b2:35:1f:54:a0:0b:1e:42:f3:d7:3d:e5:5f:ab:1a:f9:
         b3:64:a8:e1:09:3b:47:0a:fb:fa:87:aa:b4:de:06:59:7a:0e:
         65:d3:67:57:4b:f3:7e:1d:fc:87:b7:5a:1e:7d:e8:cf:51:00:
         5f:8e:0d:8c:2c:0b:a0:56:f0:75:c1:d2:78:8c:52:98:05:77:
         ed:c3:ab:d3:37:9b:8c:27:cd:24:9f:d5:a4:21:2b:d1:13:35:
         5b:a4:2c:2b:00:c2:49:42:e2:f5:9c:5a:55:ef:64:c2:d9:e7:
         d6:c8:37:b2:bd:ac:c1:b1:e8:da:19:d5:97:bb:fe:1f:82:cb:
         c7:90:ad:13:0f:33:37:91:e3:41:1a:48:1d:63:32:e9:9c:bd:
         fc:14:3f:06:d9:49:76:17:00:08:b2:f1:96:8f:0e:7f:cd:9a:
         9d:47:89:64:33:50:eb:a0:b7:d1:8a:1b:b7:04:1f:ff:58:72:
         e7:8d:35:8e:b3:7c:92:d3:35:9b:eb:3a:33:d1:56:92:c6:ac:
         df:74:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----