Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203529.roa
File:                     AS203529.roa (raw, json)
Hash identifier:          G32CmczuxCskQYxWrvcGJaIJPtDaBTpeOKrAv7hv2L0=
Subject key identifier:   76:6B:2D:ED:9C:86:AB:C3:0F:6B:46:F9:C8:AA:7A:CC:50:C4:09:89
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       33A3219AC9FDF32BCEE5174468CC0CBDED3B9497
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203529.roa
Signing time:             Mon 10 Apr 2023 03:31:35 +0000
ROA not before:           Mon 10 Apr 2023 03:26:35 +0000
ROA not after:            Mon 08 Apr 2024 03:31:35 +0000
asID:                     203529
IP address blocks:        2a12:dd47:5e10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a3:21:9a:c9:fd:f3:2b:ce:e5:17:44:68:cc:0c:bd:ed:3b:94:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:35 2023 GMT
            Not After : Apr  8 03:31:35 2024 GMT
        Subject: CN=766B2DED9C86ABC30F6B46F9C8AA7ACC50C40989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:14:99:a2:2e:79:2c:af:d8:13:2e:bc:b9:
                    02:a6:45:75:5d:f1:84:94:55:20:a7:4c:68:0c:f7:
                    55:70:60:51:0b:d8:f6:be:76:69:60:50:81:2a:a0:
                    32:21:90:ba:f4:0a:6d:9b:4e:d9:88:f3:4a:1e:19:
                    fa:a2:cd:f3:05:a6:84:8c:5b:95:4f:f7:e5:23:51:
                    8f:80:bb:5d:7f:f2:3c:ca:a8:78:c9:29:4c:e0:d2:
                    9a:22:25:cf:5d:ab:b9:7c:22:f9:33:86:d3:c1:f9:
                    f1:73:fb:f3:5d:37:5f:7d:29:9b:2a:69:ac:2e:8e:
                    94:b2:fb:d1:c8:03:dc:f7:ab:e4:3f:48:f1:a7:0b:
                    21:2a:3b:d2:b2:b3:2c:c3:f1:ff:96:23:98:e1:80:
                    75:41:dc:f6:bb:53:03:46:0f:da:ce:b6:47:9f:b6:
                    cd:f5:b6:2c:d9:7c:d1:7d:f9:45:a0:07:27:7a:c3:
                    96:93:f5:57:d5:87:e4:d4:3c:7d:ef:f2:d1:19:ac:
                    a9:7d:e3:f7:7a:10:e6:83:8d:ae:3c:62:26:69:a4:
                    7d:ec:ac:da:72:9a:2f:46:5d:70:c6:29:89:9b:76:
                    a8:40:c1:5c:ca:08:ed:8b:1c:1a:70:d5:31:e1:67:
                    58:8f:17:5c:db:12:75:ed:23:67:59:45:c3:f5:ea:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6B:2D:ED:9C:86:AB:C3:0F:6B:46:F9:C8:AA:7A:CC:50:C4:09:89
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5e10::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:fc:bf:40:1d:fc:1b:81:1f:2f:8a:16:bc:82:6f:a1:91:62:
         de:bc:8e:47:fe:4c:ac:c9:eb:a6:0b:7a:f3:db:99:16:9e:62:
         35:9e:84:f6:8b:85:2d:f4:5a:51:d4:cb:04:40:44:4e:5f:3e:
         d5:b3:c1:43:a3:b3:b4:00:26:11:19:c6:b8:40:90:d2:4c:50:
         f8:cb:7f:9c:1a:d9:ea:77:e0:d9:e5:ba:e4:76:69:82:4f:7c:
         42:51:07:ea:38:e3:68:6e:bd:6e:4d:ee:f2:3d:a1:18:b5:ba:
         55:7d:3c:2e:19:dd:f3:e0:2e:1d:3c:4d:71:fe:a1:93:71:33:
         c1:73:dd:76:35:0d:f8:65:7e:e7:c9:3e:bb:26:04:f9:d6:e1:
         20:80:85:7e:74:86:42:ba:ed:ae:4d:b9:d8:5b:35:86:96:67:
         6d:81:32:3d:a9:96:77:71:4b:f1:30:fe:46:ff:3f:f2:e8:49:
         14:23:47:7e:3a:25:90:b5:22:5a:c2:d1:72:88:01:fb:dd:71:
         4a:63:dc:6a:da:d0:d2:3e:7c:02:26:bb:3f:a7:1d:59:d6:d0:
         e1:48:c2:3f:c5:42:d9:61:5f:f0:f7:56:eb:66:79:20:ff:78:
         8c:44:a0:26:28:8f:7a:6b:51:20:76:c8:80:ad:48:b3:52:ff:
         69:89:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----