Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203197.roa
File:                     AS203197.roa (raw, json)
Hash identifier:          0++fQgOjD5xXxBEr4khPdHvLsmZfsTIxeQplU/tH/h4=
Subject key identifier:   3F:77:05:65:D7:30:89:0F:DF:D3:76:13:84:78:F8:3A:1A:01:61:D1
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       27A375C7F66672DAA29221E73B40A13B68B879C0
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203197.roa
Signing time:             Mon 10 Apr 2023 03:31:42 +0000
ROA not before:           Mon 10 Apr 2023 03:26:42 +0000
ROA not after:            Mon 08 Apr 2024 03:31:42 +0000
asID:                     203197
IP address blocks:        2a12:dd47:8140::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a3:75:c7:f6:66:72:da:a2:92:21:e7:3b:40:a1:3b:68:b8:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:42 2023 GMT
            Not After : Apr  8 03:31:42 2024 GMT
        Subject: CN=3F770565D730890FDFD376138478F83A1A0161D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:01:d9:56:58:71:c5:d9:7a:b8:63:c9:a6:
                    79:30:0b:38:01:51:57:4e:0e:50:c6:a1:43:59:09:
                    9e:b4:af:59:a1:01:2b:c0:70:0f:71:3a:5e:c0:9d:
                    b3:d2:21:d9:10:f4:4e:85:24:03:be:53:37:e9:79:
                    13:77:2a:06:59:06:b3:4e:9f:2e:96:b5:1c:5a:71:
                    30:77:c9:91:1e:11:2a:a1:8b:38:81:ac:6c:f3:54:
                    01:ff:a8:36:2a:a9:d4:cb:cb:cf:6f:9e:be:97:df:
                    25:31:52:fd:ad:bb:f7:f8:a8:a1:c1:dc:3e:01:3e:
                    91:1e:8b:75:75:1c:2d:52:c6:ba:d2:d7:c3:1b:26:
                    4a:eb:05:2b:b5:34:68:1d:2c:8b:77:df:cc:d9:40:
                    24:00:df:0c:58:45:5f:6d:37:29:45:68:dc:52:20:
                    48:92:dd:f6:43:67:dd:f2:0f:38:12:74:71:2b:11:
                    46:16:98:46:af:d7:e5:75:0c:95:a9:30:9a:04:b6:
                    4c:85:95:8d:a1:c1:0b:b8:4c:b5:c2:0e:76:2f:5f:
                    6d:9d:9d:64:ba:63:b6:d5:6b:7d:f2:cf:4b:4f:11:
                    72:e2:8a:bc:2a:00:2e:e0:65:3b:4c:7e:c6:11:98:
                    3f:5c:a9:ad:58:0f:fd:91:6d:f1:f0:4d:f6:b5:66:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:77:05:65:D7:30:89:0F:DF:D3:76:13:84:78:F8:3A:1A:01:61:D1
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203197.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8140::/44

    Signature Algorithm: sha256WithRSAEncryption
         cb:11:b1:18:a2:08:30:56:97:58:0a:dd:c0:97:30:5d:43:f4:
         7d:3a:96:07:99:33:7b:c6:b2:0d:19:b0:c5:e7:03:42:a9:7d:
         f7:5a:51:f1:f9:aa:86:25:24:43:b7:52:15:19:f8:7c:a3:9a:
         41:28:db:7d:09:47:8d:54:36:32:40:cd:77:eb:eb:a2:11:25:
         f0:e5:dd:8a:b6:a5:8c:75:75:eb:18:ae:12:ab:33:13:77:4b:
         70:1f:0e:db:ec:ac:05:d4:ad:05:5f:45:e5:fe:89:48:cd:4a:
         0e:1d:76:00:f1:9c:db:3b:c8:32:54:16:66:be:46:ee:79:63:
         b5:51:5d:3d:28:86:40:d7:78:82:33:ae:2a:41:26:9e:c9:5a:
         9a:5b:4f:b1:1f:36:29:76:52:09:e2:93:bb:d4:f9:6d:66:af:
         72:63:1c:d1:db:16:2f:6f:b1:1f:fd:95:ee:39:49:d0:d0:6a:
         49:00:40:61:68:88:b6:e4:89:cb:49:d2:86:3d:d8:8b:0b:f2:
         db:e5:9f:06:7d:38:7f:a6:c6:37:57:fa:31:6a:12:cc:8d:13:
         1f:01:01:fa:fe:20:e2:fe:3b:7a:04:03:6e:d8:cc:45:8b:d2:
         47:be:9e:9d:08:ab:31:e8:1f:ff:71:e2:21:9f:9c:ed:d2:e8:
         8d:16:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----