Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199656.roa
File:                     AS199656.roa (raw, json)
Hash identifier:          +3Ob8ZycxUKTyAGJbXEQ0rBp0rN9wXMBx6NSI/HnSXU=
Subject key identifier:   03:57:79:14:C3:37:DE:6C:C6:EF:53:EC:FB:E1:02:DE:60:5C:EE:74
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       6E3685E2E088F4C060CECCFEED8D5085125329A9
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199656.roa
Signing time:             Sun 15 Oct 2023 04:15:41 +0000
ROA not before:           Sun 15 Oct 2023 04:10:41 +0000
ROA not after:            Sun 13 Oct 2024 04:15:41 +0000
asID:                     199656
IP address blocks:        2a12:dd47:f700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:36:85:e2:e0:88:f4:c0:60:ce:cc:fe:ed:8d:50:85:12:53:29:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 15 04:10:41 2023 GMT
            Not After : Oct 13 04:15:41 2024 GMT
        Subject: CN=03577914C337DE6CC6EF53ECFBE102DE605CEE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:8d:ef:55:44:44:a8:83:a9:fe:be:13:24:
                    a0:4b:90:97:c9:b7:c8:de:ec:ab:b0:4d:af:5e:23:
                    ba:1a:8f:fb:78:5d:ee:2a:8e:e7:8a:20:42:1e:d3:
                    99:4e:a7:41:65:ba:a3:9d:a8:79:73:01:b8:83:d8:
                    4f:5f:9a:17:91:dc:12:23:5c:35:7c:1c:47:1e:8b:
                    2e:bf:c8:f3:47:9c:a5:a6:ce:45:b3:47:5b:9d:c3:
                    2f:40:f1:4d:79:93:41:83:16:22:ee:17:45:99:cb:
                    05:6f:d8:e0:d2:7f:e8:53:2e:4a:f5:24:1c:ff:48:
                    d0:5f:c7:dd:3a:55:71:c3:80:d4:de:e3:73:e0:29:
                    99:f5:5b:26:96:62:ed:50:32:5d:67:fe:aa:a4:cd:
                    c3:5a:fb:9d:1a:7b:e9:06:24:c4:69:f2:30:74:82:
                    eb:4e:59:8e:da:56:a8:1f:b9:a9:ea:0d:6b:e9:b4:
                    a8:38:87:44:a5:25:fe:7e:81:21:a0:be:ce:cc:c9:
                    da:d1:c7:b5:30:9c:21:fc:83:c3:05:e2:fd:93:63:
                    4b:a8:1d:06:93:ac:44:d5:a5:cd:88:d3:83:d7:0f:
                    31:d9:31:34:b1:5c:16:e5:e0:73:e1:9a:3a:df:33:
                    11:db:e3:98:af:3b:78:77:87:26:f9:3b:1f:b1:a5:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:57:79:14:C3:37:DE:6C:C6:EF:53:EC:FB:E1:02:DE:60:5C:EE:74
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199656.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:e9:40:45:dd:4b:d2:fa:0a:40:23:da:28:2c:a3:7c:7a:93:
         3d:f9:23:f8:98:73:2f:23:c5:b9:00:53:a3:3c:d1:89:d5:5c:
         d7:03:56:69:aa:89:4e:80:62:92:b8:ec:c0:fa:93:cd:67:ca:
         1f:f8:0d:f1:53:88:9c:f7:10:33:4f:cf:91:9a:7e:48:08:af:
         77:c9:43:74:59:af:26:21:85:77:83:52:72:85:cc:74:19:a3:
         04:28:6d:ab:78:3e:d6:5e:15:9b:3c:15:e4:8d:84:6d:77:5c:
         d1:48:35:cc:6d:da:6e:79:17:03:56:95:87:a7:e2:a8:77:24:
         bb:c8:b2:af:07:45:07:29:a1:c6:c1:18:d6:63:4a:e7:1c:f1:
         f4:22:49:8a:58:4c:c9:ae:c3:63:8e:ff:8d:5f:b4:a3:a9:fb:
         d7:4b:93:fd:15:69:4e:0c:5d:93:c0:81:f2:69:b6:da:98:f8:
         e4:bd:a2:7d:b8:e0:3b:48:73:12:4c:f5:a6:c3:4e:a2:fc:0a:
         cc:4b:ec:45:bb:ff:9d:c5:ea:7b:6e:57:07:3e:e1:49:06:6c:
         a3:dc:86:b7:5b:7d:86:94:10:c7:fe:ac:33:24:b8:e7:99:be:
         6e:30:e9:5c:7c:ec:43:ef:04:f5:8d:21:d9:59:60:51:cf:75:
         0a:0d:8a:b0
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUbjaF4uCI9MBgzsz+7Y1QhRJTKakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzEwMTUwNDEwNDFaFw0yNDEwMTMwNDE1NDFaMDMxMTAvBgNV
BAMTKDAzNTc3OTE0QzMzN0RFNkNDNkVGNTNFQ0ZCRTEwMkRFNjA1Q0VFNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqu43vVUREqIOp/r4TJKBLkJfJ
t8je7KuwTa9eI7oaj/t4Xe4qjueKIEIe05lOp0FluqOdqHlzAbiD2E9fmheR3BIj
XDV8HEceiy6/yPNHnKWmzkWzR1udwy9A8U15k0GDFiLuF0WZywVv2ODSf+hTLkr1
JBz/SNBfx906VXHDgNTe43PgKZn1WyaWYu1QMl1n/qqkzcNa+50ae+kGJMRp8jB0
gutOWY7aVqgfuanqDWvptKg4h0SlJf5+gSGgvs7MydrRx7UwnCH8g8MF4v2TY0uo
HQaTrETVpc2I04PXDzHZMTSxXBbl4HPhmjrfMxHb45ivO3h3hyb5Ox+xpS4zAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUA1d5FMM33mzG71Ps++EC3mBc7nQwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMxOTk2NTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1H9zANBgkqhkiG9w0BAQsF
AAOCAQEAt+lARd1L0voKQCPaKCyjfHqTPfkj+JhzLyPFuQBTozzRidVc1wNWaaqJ
ToBikrjswPqTzWfKH/gN8VOInPcQM0/PkZp+SAivd8lDdFmvJiGFd4NScoXMdBmj
BChtq3g+1l4VmzwV5I2EbXdc0Ug1zG3abnkXA1aVh6fiqHcku8iyrwdFBymhxsEY
1mNK5xzx9CJJilhMya7DY47/jV+0o6n710uT/RVpTgxdk8CB8mm22pj45L2ifbjg
O0hzEkz1psNOovwKzEvsRbv/ncXqe25XBz7hSQZso9yGt1t9hpQQx/6sMyS455m+
bjDpXHzsQ+8E9Y0h2VlgUc91Cg2KsA==
-----END CERTIFICATE-----