Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS202400.roa
File:                     AS202400.roa (raw, json)
Hash identifier:          06kHn5cSOskq+XdWtGsqAbYCstvMLVURt+zs6EVSkhU=
Subject key identifier:   29:01:2C:7F:A3:71:5F:7F:6C:A3:03:AD:99:92:D8:FE:96:49:90:52
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       5C7D5AFEC42DE47046F5CF63A0C25D6F92BD7AF4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS202400.roa
Signing time:             Sat 29 Jul 2023 06:25:47 +0000
ROA not before:           Sat 29 Jul 2023 06:20:47 +0000
ROA not after:            Sat 27 Jul 2024 06:25:47 +0000
asID:                     202400
IP address blocks:        2a12:dd46:2000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7d:5a:fe:c4:2d:e4:70:46:f5:cf:63:a0:c2:5d:6f:92:bd:7a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Jul 29 06:20:47 2023 GMT
            Not After : Jul 27 06:25:47 2024 GMT
        Subject: CN=29012C7FA3715F7F6CA303AD9992D8FE96499052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:cc:a7:6e:46:aa:72:92:71:59:1f:23:5d:
                    78:01:7f:78:46:92:68:ed:96:6c:36:84:aa:eb:56:
                    20:e7:94:96:25:04:63:58:5b:78:cf:72:e0:67:9a:
                    a9:81:b4:4a:0e:0c:ca:be:04:1c:6f:53:1d:07:ca:
                    ef:12:4f:bf:5e:74:da:5f:99:5b:33:fb:af:56:5a:
                    0b:5b:8e:47:7b:99:7f:31:a2:56:87:4a:f4:bd:52:
                    51:93:f6:14:47:20:54:18:c2:d7:23:0d:2f:49:e4:
                    83:92:3a:c9:aa:2b:1e:94:df:5b:4b:13:01:b8:56:
                    91:f8:49:ea:28:6d:d7:e4:3a:f1:07:eb:cb:39:f5:
                    ac:c9:4e:53:8a:4e:13:08:3b:9a:a6:71:de:6e:a9:
                    fe:85:4c:d4:87:22:4e:ca:e1:23:6b:81:81:93:7e:
                    a5:fb:58:1a:d8:c1:ec:79:dd:c8:ff:fe:69:a7:5b:
                    b2:e9:64:8c:87:fe:c4:01:58:19:cd:88:b4:33:3a:
                    92:9e:dd:f2:86:03:96:81:55:0a:08:4e:20:cf:1d:
                    75:6b:f3:05:c8:da:15:e9:51:fb:a7:6b:55:16:c4:
                    3e:63:4a:5e:85:7a:3f:99:00:0d:b3:04:a0:c4:e3:
                    c1:30:c1:9e:f3:21:dc:a5:de:9b:c2:b8:16:2a:d6:
                    ce:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:01:2C:7F:A3:71:5F:7F:6C:A3:03:AD:99:92:D8:FE:96:49:90:52
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS202400.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bb:29:02:0a:32:0e:b7:1b:9b:fe:c5:ad:30:1f:89:ed:e5:05:
         6e:08:fc:fa:25:04:2b:37:2f:0c:b1:91:ad:c7:1c:ae:74:ac:
         ce:ad:38:e7:16:56:4c:28:04:a9:d4:48:ba:e7:80:27:a5:9c:
         62:93:85:6f:ce:8c:02:5c:d5:c6:5b:3b:19:b4:7c:5f:ce:e1:
         ce:78:33:7a:36:45:6e:fd:9b:38:ac:23:6d:ea:b0:c3:b4:e9:
         c2:ee:a8:e6:ff:b6:bb:c5:43:69:11:e4:c4:ac:49:74:00:2f:
         26:66:d9:b6:eb:5b:22:ac:8d:18:72:e8:63:87:28:01:82:f2:
         4c:f5:5e:78:23:5f:95:10:89:b0:44:68:ed:eb:fa:7e:c2:6f:
         c9:44:0c:be:49:af:d8:52:0c:74:01:58:a7:1a:20:92:dc:77:
         b3:5b:b3:70:5c:85:63:ec:a0:9e:f2:dd:b7:74:b8:ca:e3:10:
         70:6a:d3:4b:4d:57:71:0d:73:c9:ef:24:d7:9f:0d:a1:c2:29:
         38:27:f2:aa:fd:1f:08:89:ff:85:fa:8f:51:5e:97:9a:17:ac:
         50:83:51:ce:1a:b0:55:87:0f:cc:e4:54:a5:2d:97:d3:66:ba:
         fb:11:9c:65:3f:4c:92:d0:b5:0f:df:3b:96:36:4e:e2:b6:c2:
         06:b6:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----