Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS201242.roa
File:                     AS201242.roa (raw, json)
Hash identifier:          qvuBNC/UC66jLXKQ9T8L7LRuxDK+grGwJnstdLtFG+8=
Subject key identifier:   15:09:72:8C:E8:60:92:DB:34:0C:79:04:B4:59:C3:54:AD:50:29:D4
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       66CD1EA10E57FB453F2C31EF72C802371B43B93B
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS201242.roa
Signing time:             Mon 10 Apr 2023 03:31:40 +0000
ROA not before:           Mon 10 Apr 2023 03:26:40 +0000
ROA not after:            Mon 08 Apr 2024 03:31:40 +0000
asID:                     201242
IP address blocks:        2a12:dd47:80e1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cd:1e:a1:0e:57:fb:45:3f:2c:31:ef:72:c8:02:37:1b:43:b9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:40 2023 GMT
            Not After : Apr  8 03:31:40 2024 GMT
        Subject: CN=1509728CE86092DB340C7904B459C354AD5029D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:ea:52:0f:f8:90:c7:2c:42:24:0d:86:76:
                    b8:54:8f:91:f8:5e:f5:f7:ca:cb:89:00:12:cd:7f:
                    77:0c:0a:25:2a:aa:3b:4f:7f:e7:79:1c:23:fe:5f:
                    2e:a0:82:43:63:f4:ad:e7:f2:00:84:2b:da:73:19:
                    2f:a4:d3:94:07:52:e5:57:94:70:db:79:d4:2f:38:
                    26:76:8c:89:f9:7f:b6:58:8c:a6:48:c9:81:2f:5d:
                    41:bb:fe:f1:60:9b:66:c9:d1:42:14:7d:5c:42:65:
                    f9:ea:e2:3e:7c:98:74:bc:3e:58:18:a6:87:e7:d1:
                    88:82:75:45:84:2a:11:74:94:3d:99:31:e0:95:4c:
                    b1:78:a6:c3:a2:e0:2d:e7:a8:c8:43:88:71:67:d5:
                    ce:1e:0d:4a:b9:31:9a:3d:03:57:c0:41:69:60:20:
                    95:eb:ad:fa:06:76:10:7e:23:ba:b6:74:8c:17:db:
                    6a:7b:96:cb:0e:a9:9b:b1:9d:64:9f:bc:8a:18:ff:
                    0b:8c:e8:27:e0:77:dc:66:f8:c6:08:65:5b:c6:4d:
                    9e:6a:47:80:b7:ad:58:44:75:d6:5e:83:5d:f5:40:
                    31:00:3a:97:6f:9a:14:9c:fc:9d:30:0c:9e:1c:47:
                    5c:f2:ff:be:a9:0d:5f:be:dc:f2:a5:ce:5d:06:48:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:09:72:8C:E8:60:92:DB:34:0C:79:04:B4:59:C3:54:AD:50:29:D4
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS201242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:be:80:09:7d:29:b7:25:fb:15:af:2d:f2:50:f1:fa:b0:8f:
         ea:8d:24:02:31:f7:ad:bb:bb:87:35:07:33:e2:39:e9:de:cb:
         47:6e:34:1c:19:0c:ca:cf:54:cb:15:a5:24:9c:d4:c4:61:18:
         0e:00:e8:23:89:26:c2:d4:9f:a7:4a:71:c9:db:6c:61:9f:2c:
         6b:48:f2:b5:dd:41:46:9a:f8:db:f3:99:1d:d0:46:e4:0f:75:
         5b:49:82:eb:be:c2:5d:5d:cc:c0:6e:5a:0b:5d:c2:81:6c:3f:
         09:2d:26:f5:7c:e4:a8:88:6e:15:d0:d6:ec:45:0e:85:c0:e5:
         92:bf:28:70:89:ca:38:3d:dd:f1:29:95:37:49:22:27:8a:d4:
         2a:ae:e3:6b:61:9b:04:18:08:61:a0:5f:90:5a:20:d7:08:66:
         c9:c9:4d:c2:a0:7b:a5:c4:1b:23:4d:f3:31:55:fe:37:c4:3a:
         14:b4:a7:68:f3:00:e3:c9:76:ec:3a:fe:82:97:e7:d4:70:2a:
         37:17:84:e9:06:b0:67:63:56:59:07:f2:bd:47:14:7d:53:90:
         61:58:27:55:96:01:f4:21:2f:e9:51:c4:45:ba:73:ea:c6:2c:
         11:2f:38:23:8d:68:00:58:a5:d1:1f:8d:1e:a7:82:41:e9:a5:
         8e:27:72:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----