Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS200240.roa
File:                     AS200240.roa (raw, json)
Hash identifier:          wfAwVc2cMp1jfQ6auRlF7LPpnnKCwmxKH7Do+AMakkU=
Subject key identifier:   78:FE:59:D5:55:03:69:98:FD:CA:A9:D0:CD:1D:6E:1C:D4:1A:7A:6A
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       1669E2C7847DA4BC0CDA527E08623ACD3E2D5BAD
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS200240.roa
Signing time:             Mon 10 Apr 2023 03:31:47 +0000
ROA not before:           Mon 10 Apr 2023 03:26:47 +0000
ROA not after:            Mon 08 Apr 2024 03:31:47 +0000
asID:                     200240
IP address blocks:        2a12:dd47:8340::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:69:e2:c7:84:7d:a4:bc:0c:da:52:7e:08:62:3a:cd:3e:2d:5b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:47 2023 GMT
            Not After : Apr  8 03:31:47 2024 GMT
        Subject: CN=78FE59D555036998FDCAA9D0CD1D6E1CD41A7A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:54:7e:36:05:59:5d:85:3f:ca:db:8d:2e:
                    da:c1:93:23:88:2d:0c:94:37:ef:4d:79:1d:82:d8:
                    5b:c3:54:e5:b7:58:c7:13:6a:54:67:e1:4b:17:f2:
                    7f:80:a6:1b:77:dc:57:e3:64:c4:4d:ad:99:c0:b1:
                    15:67:74:3a:98:a9:7a:d7:c0:04:d7:ed:d5:44:40:
                    a9:2c:ef:9a:0c:1d:9d:52:cf:34:f2:ec:9f:31:46:
                    8d:42:a2:2c:72:36:8c:13:ee:21:f8:6c:45:b2:d6:
                    f1:e2:c4:5a:bb:24:73:51:a1:ab:05:98:66:ab:c5:
                    20:3d:23:03:5e:4c:a3:59:32:48:5f:8c:25:0f:cf:
                    28:f2:7a:22:17:5a:52:6e:77:2f:74:b6:86:f6:b5:
                    33:c8:01:3d:16:ad:51:d3:15:3d:42:e6:7e:cb:6b:
                    78:41:37:01:da:28:ac:2c:97:48:c6:c3:e9:c4:e9:
                    41:4b:41:84:06:c2:70:b7:d6:48:26:5b:fb:51:44:
                    02:f3:64:27:a4:46:7d:83:ec:fc:55:42:b6:90:f6:
                    c8:24:4d:85:5e:83:cd:54:f4:e2:bb:5c:59:1c:38:
                    58:5d:c3:c9:fa:40:4c:85:86:00:35:4a:f7:bf:f3:
                    af:17:8d:32:8e:f5:b2:d1:a5:b4:35:40:0b:c3:34:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FE:59:D5:55:03:69:98:FD:CA:A9:D0:CD:1D:6E:1C:D4:1A:7A:6A
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8340::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:ae:f5:42:45:af:88:dc:c3:d3:97:68:97:51:b4:0e:4d:fe:
         76:6a:cf:ff:fc:6b:c9:b4:0c:c6:b7:e0:54:7e:b8:5b:7e:a8:
         20:ed:a0:27:e0:a0:81:ff:ad:8a:5b:db:81:dc:7d:1d:09:8d:
         97:41:f0:0f:c2:2c:0a:f1:d1:f3:0b:52:aa:d9:a2:5b:6b:58:
         60:6e:8f:c3:cd:12:ba:c6:d3:5d:e1:f8:c1:f1:8e:39:58:b1:
         d5:30:de:8d:c2:57:7b:66:cf:da:34:ae:2b:e7:f0:1d:d0:85:
         20:c2:60:2e:8d:79:8f:dc:8c:6b:7b:86:18:1e:7e:f7:60:c2:
         21:69:bd:62:5f:1d:b8:e4:9b:21:36:4e:3a:7b:6c:76:c5:bb:
         bf:10:6e:19:43:54:e6:3a:07:3b:46:db:56:85:41:cc:e5:4a:
         fd:8d:a2:63:97:44:12:5b:6a:a4:6b:05:98:84:43:c1:c4:b3:
         1a:50:45:07:b2:5d:f0:aa:e4:3a:65:6e:a5:6e:5f:57:28:26:
         fa:c0:77:21:12:55:c0:19:72:d9:99:44:29:d5:0a:91:29:08:
         55:7c:8e:10:cc:63:1b:f5:55:e5:09:b0:8b:ba:54:c6:1d:08:
         2a:e8:6c:89:55:d0:9f:9e:b8:44:d9:01:f7:88:3a:01:3b:7d:
         2a:ef:64:b4
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUFmnix4R9pLwM2lJ+CGI6zT4tW60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2NDdaFw0yNDA0MDgwMzMxNDdaMDMxMTAvBgNV
BAMTKDc4RkU1OUQ1NTUwMzY5OThGRENBQTlEMENEMUQ2RTFDRDQxQTdBNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+U1R+NgVZXYU/ytuNLtrBkyOI
LQyUN+9NeR2C2FvDVOW3WMcTalRn4UsX8n+Apht33FfjZMRNrZnAsRVndDqYqXrX
wATX7dVEQKks75oMHZ1SzzTy7J8xRo1CoixyNowT7iH4bEWy1vHixFq7JHNRoasF
mGarxSA9IwNeTKNZMkhfjCUPzyjyeiIXWlJudy90tob2tTPIAT0WrVHTFT1C5n7L
a3hBNwHaKKwsl0jGw+nE6UFLQYQGwnC31kgmW/tRRALzZCekRn2D7PxVQraQ9sgk
TYVeg81U9OK7XFkcOFhdw8n6QEyFhgA1Sve/868XjTKO9bLRpbQ1QAvDNOk3AgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUeP5Z1VUDaZj9yqnQzR1uHNQaemowHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDAyNDAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1Hg0AwDQYJKoZIhvcNAQEL
BQADggEBACSu9UJFr4jcw9OXaJdRtA5N/nZqz//8a8m0DMa34FR+uFt+qCDtoCfg
oIH/rYpb24HcfR0JjZdB8A/CLArx0fMLUqrZoltrWGBuj8PNErrG013h+MHxjjlY
sdUw3o3CV3tmz9o0rivn8B3QhSDCYC6NeY/cjGt7hhgefvdgwiFpvWJfHbjkmyE2
Tjp7bHbFu78QbhlDVOY6BztG21aFQczlSv2NomOXRBJbaqRrBZiEQ8HEsxpQRQey
XfCq5DplbqVuX1coJvrAdyESVcAZctmZRCnVCpEpCFV8jhDMYxv1VeUJsIu6VMYd
CCrobIlV0J+euETZAfeIOgE7fSrvZLQ=
-----END CERTIFICATE-----