Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203737.roa
File:                     AS203737.roa (raw, json)
Hash identifier:          bAB7ZdynDWdZEnG+Aw/Y+6EgdXefEvOK/kUeFix2lkk=
Subject key identifier:   90:BF:BA:64:16:6C:65:FC:CD:80:98:7F:E7:7B:43:FF:4C:9E:3F:2A
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       653CBA13AE51F186DF2EBDC89864C315CF588739
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203737.roa
Signing time:             Mon 10 Apr 2023 03:31:46 +0000
ROA not before:           Mon 10 Apr 2023 03:26:46 +0000
ROA not after:            Mon 08 Apr 2024 03:31:46 +0000
asID:                     203737
IP address blocks:        2a12:dd47:81b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3c:ba:13:ae:51:f1:86:df:2e:bd:c8:98:64:c3:15:cf:58:87:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:46 2023 GMT
            Not After : Apr  8 03:31:46 2024 GMT
        Subject: CN=90BFBA64166C65FCCD80987FE77B43FF4C9E3F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:60:77:29:2a:3d:1c:c6:82:ce:27:57:1e:a6:
                    7d:bb:1b:7d:b4:d0:73:e2:78:c9:2b:89:9b:73:a7:
                    c4:3b:b2:23:7c:26:8c:1c:32:56:d5:e4:f3:13:42:
                    90:cb:e1:c2:c2:f0:8a:ac:74:73:39:58:c1:11:76:
                    f7:56:f6:20:48:a8:be:c2:13:86:49:48:4a:e2:d5:
                    ba:0e:67:39:3d:5e:f0:ad:87:85:94:fb:5b:28:36:
                    55:49:b2:f1:c9:92:60:8b:45:b2:37:07:03:ed:48:
                    c4:f9:7a:e8:26:93:29:d3:05:37:0a:2d:21:79:b7:
                    82:70:4c:86:04:0b:e2:5f:45:67:31:c1:74:b1:22:
                    51:cc:8a:f9:4c:59:c8:aa:4c:9b:6a:7c:d9:c5:e3:
                    b5:30:e0:dd:da:0f:88:bc:69:1e:48:4f:08:8d:72:
                    4a:27:92:22:99:f3:39:56:7a:c1:ba:29:71:10:77:
                    1b:c9:8e:b3:8a:a6:72:2c:d7:be:79:18:a4:0d:77:
                    36:72:17:b7:66:10:a3:ed:ab:7e:99:84:b6:2e:55:
                    27:58:60:1b:73:e0:fe:13:16:2a:fc:a6:22:f3:4b:
                    98:85:07:f8:26:05:03:aa:e0:e4:61:e4:f6:81:10:
                    81:ee:0a:94:12:4d:65:2b:79:6a:bb:56:c1:ae:91:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BF:BA:64:16:6C:65:FC:CD:80:98:7F:E7:7B:43:FF:4C:9E:3F:2A
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:f7:11:51:b0:ae:ad:0d:3c:70:22:ed:9b:3f:42:95:6f:
         9b:8b:67:c3:63:79:68:04:99:65:7d:54:bf:b0:69:73:e2:d1:
         68:6b:4c:a3:3d:c6:f0:d4:a3:26:41:80:84:e8:5d:07:12:2c:
         aa:c1:5c:d6:a5:91:63:7c:84:6d:50:04:3b:b0:0f:2a:81:47:
         3c:09:fa:9e:10:f7:0a:42:8e:81:13:50:13:3c:72:82:74:3f:
         cd:ea:8b:82:da:45:2d:0a:0c:50:85:80:b3:19:37:62:73:0b:
         c9:d4:78:ad:69:75:54:59:ba:29:e4:5d:76:89:7c:12:5f:f1:
         7b:e2:c3:97:31:ed:8f:ae:aa:01:c6:05:31:88:75:1b:22:8c:
         5e:2b:2d:3b:ee:78:0c:5b:42:b4:68:69:81:17:55:62:eb:5a:
         25:04:59:2d:a8:73:03:04:04:ef:52:73:53:38:96:bf:cf:69:
         8b:9d:05:48:0d:54:6c:e4:28:3d:ab:dc:9e:c0:3c:7d:76:ad:
         77:40:e2:72:51:56:6b:a4:25:c2:18:c4:26:86:f5:b1:2e:6a:
         5c:6d:c4:9f:1a:44:18:a9:00:e8:ae:4e:9b:dd:54:a7:97:f9:
         12:42:48:d0:1f:3d:40:5f:a3:bb:fd:99:ae:fe:5a:32:b9:4c:
         6d:05:c2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----