Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS203867.roa
File:                     AS203867.roa (raw, json)
Hash identifier:          /Y3gcXQTDwi0F3gkAqjncYdT0vOgisoKQdKkDxheXG8=
Subject key identifier:   D4:3A:13:58:C6:6A:A2:B9:7B:04:47:5B:29:61:7B:92:5A:FD:DC:88
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       78184A4266B1385D00FCAE0826B2155DE5BCF8E4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS203867.roa
Signing time:             Mon 10 Apr 2023 03:31:41 +0000
ROA not before:           Mon 10 Apr 2023 03:26:41 +0000
ROA not after:            Mon 08 Apr 2024 03:31:41 +0000
asID:                     203867
IP address blocks:        2a12:dd47:8170::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:18:4a:42:66:b1:38:5d:00:fc:ae:08:26:b2:15:5d:e5:bc:f8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:41 2023 GMT
            Not After : Apr  8 03:31:41 2024 GMT
        Subject: CN=D43A1358C66AA2B97B04475B29617B925AFDDC88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:76:20:7c:b3:fe:05:86:74:ab:b7:27:c6:97:
                    37:29:9f:ce:d3:18:b9:52:58:f0:e5:b2:9e:ae:3d:
                    72:b9:49:01:24:97:90:c5:3e:dc:3c:72:bf:c1:63:
                    0a:f4:2b:6f:62:58:39:40:13:56:b9:64:07:cc:8b:
                    cc:6b:5a:cb:a8:2a:61:ef:f0:3d:41:44:80:e9:2f:
                    4d:21:7f:a4:3a:35:d8:cb:28:9a:96:52:0a:24:7f:
                    7a:9d:3f:cc:db:c3:6e:b0:5c:1e:94:34:c4:f0:13:
                    47:09:79:67:9e:88:9e:6b:4b:ba:c6:dc:24:7c:d6:
                    dc:ce:23:77:7a:de:d3:b9:2f:29:3d:43:68:0f:74:
                    84:b4:67:7d:5a:0b:d9:9c:48:b4:da:26:79:99:7e:
                    1b:95:66:c9:21:29:c1:7c:27:a4:40:e7:2f:9a:fa:
                    49:4f:fc:e9:af:a5:06:f3:9f:10:90:f2:52:b0:47:
                    2a:31:e7:a2:b9:5e:45:24:bd:fa:d8:f9:df:b6:9c:
                    b9:0f:81:e4:17:72:c1:37:f3:7b:77:55:dd:23:41:
                    1c:93:10:ec:4e:f6:f4:ec:42:66:1f:d5:65:bf:fa:
                    b9:bd:25:77:60:31:8b:63:15:0e:c2:0c:8a:6b:07:
                    2d:19:45:6b:e3:71:a6:e7:76:4f:c6:63:65:29:c9:
                    d8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3A:13:58:C6:6A:A2:B9:7B:04:47:5B:29:61:7B:92:5A:FD:DC:88
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203867.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8170::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:b0:af:43:d1:52:19:f7:b1:1c:1a:96:03:09:5f:dc:f2:96:
         7f:2f:aa:4a:82:10:0e:0a:08:c0:40:c5:b4:5f:e0:fb:92:e6:
         4a:94:6c:95:53:b7:88:dc:c7:3e:ae:60:03:27:9f:9d:79:37:
         b4:7c:9f:55:08:c3:a4:20:07:4f:09:05:99:42:20:49:7c:3c:
         69:89:f2:52:70:4d:80:37:b1:84:bb:8a:96:93:51:c9:fa:a6:
         4e:7d:cf:99:07:5a:f9:36:f4:4a:42:f0:7b:ee:4f:8c:f7:ef:
         20:b1:d2:a2:f2:a0:de:94:13:8f:e3:5f:6c:3f:b3:82:f2:07:
         ad:cd:10:59:23:25:2e:32:49:85:98:50:6d:44:3e:7b:af:75:
         ac:5c:5d:e8:bc:ef:76:99:9f:7e:28:ee:b3:f9:b8:e6:d9:2a:
         a1:9f:14:72:29:53:e7:07:54:72:f9:e8:56:b3:a9:b5:6e:20:
         62:7f:c9:0b:39:c7:f8:b3:f7:aa:73:1f:b6:57:1c:b9:35:89:
         fa:be:97:ec:65:9e:45:b7:a3:02:88:41:ce:2d:e5:93:46:e3:
         a7:b9:53:e5:1c:09:70:95:21:df:dd:14:5f:00:f4:e1:cb:4f:
         58:1b:95:27:e3:f6:76:8b:d5:79:f9:31:de:eb:62:fa:06:00:
         48:6b:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----