Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS200827.roa
File:                     AS200827.roa (raw, json)
Hash identifier:          f4wZilKBU4UrTXv+KydPdwlRzJEgRPZ7BffBNZd/ou8=
Subject key identifier:   F2:8E:0D:3F:D2:0B:7B:E6:28:A6:21:9A:35:3F:BD:A7:33:74:43:D8
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       3B5E0F7C27CF26B6DF1B512F7C3A25AC597ACBAB
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS200827.roa
Signing time:             Mon 10 Apr 2023 03:31:32 +0000
ROA not before:           Mon 10 Apr 2023 03:26:32 +0000
ROA not after:            Mon 08 Apr 2024 03:31:32 +0000
asID:                     200827
IP address blocks:        2a12:dd47:3200::/40 maxlen: 40
                          2a12:dd47:3400::/38 maxlen: 38
                          2a12:dd47:f900::/40 maxlen: 48
                          2a12:dd47:fc00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5e:0f:7c:27:cf:26:b6:df:1b:51:2f:7c:3a:25:ac:59:7a:cb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:32 2023 GMT
            Not After : Apr  8 03:31:32 2024 GMT
        Subject: CN=F28E0D3FD20B7BE628A6219A353FBDA7337443D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:f6:f0:26:16:b2:97:a3:28:26:8a:93:f7:
                    f2:24:e0:30:1a:54:41:1e:43:aa:38:f7:3a:ac:ba:
                    d2:99:49:3c:12:3e:98:56:50:f0:96:24:f4:5a:9f:
                    c5:99:2c:2f:d5:0f:0c:80:46:db:e9:4a:40:bb:db:
                    cd:60:bd:36:de:cb:cf:0b:cb:2a:3a:24:2a:1b:08:
                    31:1e:19:12:6a:86:19:d2:20:b9:9a:1b:92:35:55:
                    2a:a8:1d:8e:46:62:a7:f2:c1:0f:a7:64:57:b4:d0:
                    0a:24:b2:d0:86:e5:e4:60:3d:e5:2b:4d:a8:ec:d2:
                    69:1e:d4:a7:b0:d0:19:ab:b8:bd:cb:73:04:da:ab:
                    22:3e:86:50:12:c3:b8:66:d6:71:4b:a6:c3:47:b6:
                    16:6a:31:bf:a4:4a:21:52:70:c0:ed:cd:e5:68:ab:
                    6a:3a:e3:2f:7f:ab:de:4f:15:c2:ca:62:3f:98:5d:
                    76:12:66:7c:81:ba:be:67:7e:2a:07:5b:b2:78:70:
                    97:f7:22:5b:58:ee:1a:2d:29:a3:b2:52:74:0e:38:
                    3f:11:7b:c1:df:56:ac:d7:4f:3e:73:84:10:7e:20:
                    a6:f7:23:c9:5d:a5:5a:57:16:b5:7c:0d:c4:e1:31:
                    85:46:57:75:42:13:4f:c2:21:da:f1:63:f0:ed:d0:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8E:0D:3F:D2:0B:7B:E6:28:A6:21:9A:35:3F:BD:A7:33:74:43:D8
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200827.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3200::/40
                  2a12:dd47:3400::/38
                  2a12:dd47:f900::/40
                  2a12:dd47:fc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         9d:db:12:0c:a2:16:93:09:cc:bc:3d:0f:e7:4c:08:e1:8a:0f:
         2a:a5:b0:f2:0f:a5:10:a2:b9:bb:fc:f2:31:5a:ee:af:55:8c:
         1a:34:45:b6:19:dc:42:21:5a:8b:d8:55:d3:0a:1f:d6:9d:c9:
         8e:c8:65:3b:0c:70:a3:2f:2f:d4:d3:56:98:c8:eb:c4:77:ea:
         36:e6:73:24:81:19:54:18:76:83:df:7b:9d:92:05:ef:c0:6c:
         e2:54:71:17:22:de:4d:16:00:31:9f:a4:a5:32:f6:02:13:92:
         7f:8a:d1:ba:af:70:7b:90:f0:b9:84:4c:cd:6a:76:40:f7:19:
         34:ce:69:5e:bd:35:2b:a6:d9:fb:44:f0:dc:a1:f5:61:28:87:
         db:a2:4e:3f:68:ff:6b:e3:ab:aa:f6:21:fa:b2:4e:cd:ea:ec:
         b1:a5:9f:d4:9b:aa:90:39:67:3a:4f:7a:66:24:26:e7:61:84:
         cc:88:a2:ae:74:8a:86:61:cf:12:76:17:11:f5:c7:29:fd:60:
         00:df:81:d3:8d:0a:75:86:85:93:e8:b3:c9:34:b8:4a:f7:95:
         88:ff:3a:2c:df:a6:02:76:78:3b:0e:cb:32:9e:4d:6f:e0:24:
         a3:e0:42:07:03:0f:db:44:b1:3e:08:81:b1:b5:b0:dd:d0:8e:
         6f:59:9d:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----