Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203636.roa
File:                     AS203636.roa (raw, json)
Hash identifier:          R4yGmr+CzQwlwGIRmzhulCO82nmo15/nWhMZw5rv+hE=
Subject key identifier:   64:44:B0:85:8D:F0:D7:C8:50:B6:A8:8D:51:55:13:9F:13:BB:07:AF
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2438EBBF8AFBEEB6CB813CDF2307E063B5A0D9CC
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203636.roa
Signing time:             Mon 10 Apr 2023 03:31:38 +0000
ROA not before:           Mon 10 Apr 2023 03:26:38 +0000
ROA not after:            Mon 08 Apr 2024 03:31:38 +0000
asID:                     203636
IP address blocks:        2a12:dd47:5100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:38:eb:bf:8a:fb:ee:b6:cb:81:3c:df:23:07:e0:63:b5:a0:d9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:38 2023 GMT
            Not After : Apr  8 03:31:38 2024 GMT
        Subject: CN=6444B0858DF0D7C850B6A88D5155139F13BB07AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:7c:e1:69:bf:f7:ef:a8:d6:f4:a7:69:af:
                    87:03:c0:e5:d7:71:94:6c:78:77:56:9b:bc:6e:ce:
                    a4:40:f9:6a:af:87:9a:73:95:2d:70:98:b9:77:9a:
                    91:84:e8:4b:83:6f:e8:47:02:75:37:cd:af:dc:b1:
                    68:cd:65:15:4e:fc:ae:81:5f:b0:e5:05:dc:b7:43:
                    72:fb:90:29:96:1a:8c:db:c9:bf:0f:3b:af:f4:fd:
                    27:06:ec:ce:99:4b:b8:75:37:5f:4c:48:69:ee:27:
                    24:e1:52:5c:54:73:0a:c6:d9:c4:f1:45:03:55:94:
                    98:2f:c7:83:96:b0:b1:aa:a7:44:34:20:4b:60:5d:
                    85:07:82:4d:12:a7:53:6e:20:6a:48:22:32:d4:23:
                    af:67:88:7e:0f:d0:34:94:e6:76:60:a7:d2:27:23:
                    06:7a:fc:99:28:af:c4:c3:7c:c1:50:fa:fb:0e:ae:
                    36:e1:ea:9a:17:d6:21:4c:4a:f5:9b:a6:db:87:bc:
                    e7:a9:4c:1e:ab:69:08:6c:6e:61:bd:29:d7:7a:4a:
                    7c:cc:a6:63:88:ac:96:bf:a4:41:2e:84:67:74:0f:
                    32:d5:0b:14:f7:c5:72:5c:7a:0b:f0:43:86:46:32:
                    b0:25:34:39:5e:d2:2e:b3:4a:6c:60:4e:4b:06:38:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:44:B0:85:8D:F0:D7:C8:50:B6:A8:8D:51:55:13:9F:13:BB:07:AF
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         d5:47:a7:d2:e9:d2:ac:d2:8a:41:1c:e1:47:63:3b:08:be:e5:
         76:f0:d4:a3:66:2f:57:e5:56:42:cd:4a:d1:79:0f:c0:8c:96:
         63:3a:1d:2e:af:53:e1:aa:e2:43:4e:91:de:4c:f5:81:b8:fe:
         0a:39:0a:ef:be:dc:e0:fc:52:ed:2f:54:19:03:a3:f2:a3:57:
         44:fd:21:45:f2:e9:97:74:5e:20:ff:43:eb:f5:dc:88:a1:fb:
         1f:5b:09:d7:5a:b6:3d:3e:99:b6:d6:f8:7b:65:5c:6e:a9:ac:
         b6:fd:67:bd:54:5e:c1:17:93:48:ff:82:7e:37:2e:43:96:5c:
         13:26:7d:55:da:a2:d8:0d:d3:de:a9:c8:0c:93:69:42:c1:e3:
         54:5c:cc:ac:45:38:f6:5b:b8:1c:27:16:5b:54:e8:b8:8f:7c:
         14:96:a1:83:7e:ca:d2:4d:ba:a7:57:99:e1:87:98:b3:29:f5:
         3a:75:e6:ae:ed:92:51:8f:6e:bc:77:dd:71:c6:de:8e:b6:ee:
         83:25:27:92:06:ca:33:62:85:27:0e:11:4d:78:05:30:11:fa:
         25:d6:64:ed:02:e8:d7:75:84:1d:45:e6:6c:ab:5d:a1:39:cd:
         cc:6e:0e:2a:36:c1:87:be:c1:ea:92:b2:30:06:e4:6a:a8:b6:
         64:c9:ba:10
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUJDjrv4r77rbLgTzfIwfgY7Wg2cwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzhaFw0yNDA0MDgwMzMxMzhaMDMxMTAvBgNV
BAMTKDY0NDRCMDg1OERGMEQ3Qzg1MEI2QTg4RDUxNTUxMzlGMTNCQjA3QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLHzhab/376jW9Kdpr4cDwOXX
cZRseHdWm7xuzqRA+Wqvh5pzlS1wmLl3mpGE6EuDb+hHAnU3za/csWjNZRVO/K6B
X7DlBdy3Q3L7kCmWGozbyb8PO6/0/ScG7M6ZS7h1N19MSGnuJyThUlxUcwrG2cTx
RQNVlJgvx4OWsLGqp0Q0IEtgXYUHgk0Sp1NuIGpIIjLUI69niH4P0DSU5nZgp9In
IwZ6/Jkor8TDfMFQ+vsOrjbh6poX1iFMSvWbptuHvOepTB6raQhsbmG9Kdd6SnzM
pmOIrJa/pEEuhGd0DzLVCxT3xXJcegvwQ4ZGMrAlNDle0i6zSmxgTksGOBJtAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUZESwhY3w18hQtqiNUVUTnxO7B68wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMDM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1HUTANBgkqhkiG9w0BAQsF
AAOCAQEA1Uen0unSrNKKQRzhR2M7CL7ldvDUo2YvV+VWQs1K0XkPwIyWYzodLq9T
4ariQ06R3kz1gbj+CjkK777c4PxS7S9UGQOj8qNXRP0hRfLpl3ReIP9D6/XciKH7
H1sJ11q2PT6Zttb4e2Vcbqmstv1nvVRewReTSP+CfjcuQ5ZcEyZ9Vdqi2A3T3qnI
DJNpQsHjVFzMrEU49lu4HCcWW1TouI98FJahg37K0k26p1eZ4YeYsyn1OnXmru2S
UY9uvHfdccbejrbugyUnkgbKM2KFJw4RTXgFMBH6JdZk7QLo13WEHUXmbKtdoTnN
zG4OKjbBh77B6pKyMAbkaqi2ZMm6EA==
-----END CERTIFICATE-----