Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS204829.roa
File:                     AS204829.roa (raw, json)
Hash identifier:          yP6XEYzOJ9zkS852vtGIXO2XQneofvKgegyhZeF9ax0=
Subject key identifier:   B6:54:0B:FD:EF:53:A7:CF:39:A2:54:35:04:FA:49:92:16:66:C8:4B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       22638979929E7CD1CA90C207FD82D47EF88959EB
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS204829.roa
Signing time:             Mon 10 Apr 2023 03:31:41 +0000
ROA not before:           Mon 10 Apr 2023 03:26:41 +0000
ROA not after:            Mon 08 Apr 2024 03:31:41 +0000
asID:                     204829
IP address blocks:        2a12:dd47:8100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:63:89:79:92:9e:7c:d1:ca:90:c2:07:fd:82:d4:7e:f8:89:59:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:41 2023 GMT
            Not After : Apr  8 03:31:41 2024 GMT
        Subject: CN=B6540BFDEF53A7CF39A2543504FA49921666C84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:7a:fc:09:73:c9:8d:98:22:46:21:70:78:
                    ea:8f:73:ad:12:da:ca:13:15:1c:ba:c3:97:75:e9:
                    ce:e7:19:e6:d1:83:5c:ed:57:d4:c3:b9:18:01:0c:
                    5d:d4:79:58:f9:e7:69:3b:fe:7d:c0:51:8a:da:97:
                    f6:21:61:49:04:52:3d:84:9a:3e:f9:3a:f7:bd:76:
                    04:05:81:58:06:7e:ec:8b:a1:71:ab:62:6d:59:ac:
                    0c:5e:d5:64:7a:0a:ed:e6:b6:73:04:4e:0e:10:4c:
                    19:db:f3:11:49:8a:13:3d:40:10:b4:50:5f:a4:db:
                    92:66:66:d9:d3:d8:c0:a5:ce:d8:bf:14:6c:10:3c:
                    25:a2:55:07:68:66:86:1c:e6:56:82:23:ba:1f:de:
                    74:90:9a:57:e6:9a:d0:bc:5c:bf:da:ae:06:a0:f5:
                    d3:84:bf:f1:04:83:00:1d:11:97:c6:88:d5:02:79:
                    da:56:42:02:33:a6:29:25:9c:3f:a2:7f:91:f2:6d:
                    19:16:9f:b2:a2:0e:71:1d:72:d8:17:d2:2c:a1:45:
                    3c:07:69:3d:b1:97:2e:5f:5a:87:68:87:1f:76:04:
                    3d:c8:7e:fa:e6:24:6a:b6:b3:73:2c:cb:5a:d7:50:
                    86:f5:fa:5d:43:5f:4d:a6:07:e3:32:89:50:d7:01:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:54:0B:FD:EF:53:A7:CF:39:A2:54:35:04:FA:49:92:16:66:C8:4B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS204829.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8100::/44

    Signature Algorithm: sha256WithRSAEncryption
         b2:81:61:46:4c:a7:2d:70:87:bc:00:f0:ef:9b:18:d8:26:f6:
         4f:f3:56:4d:67:e8:4c:88:61:0d:e5:75:57:08:76:3c:1e:e6:
         00:91:98:44:8b:11:85:50:97:b3:20:dc:44:fe:37:e7:80:ff:
         5a:a2:e2:2d:d0:75:3c:69:7f:6b:93:26:6e:21:12:e8:cc:20:
         97:1e:2b:ef:15:bd:cd:38:13:03:0e:0c:a6:fb:4b:3c:a9:ec:
         e1:82:41:68:80:be:50:33:90:98:83:2f:01:c1:e3:a2:bf:96:
         b8:56:42:64:8b:cf:29:a1:d9:fa:37:c6:4d:7b:4b:c9:f5:fa:
         e5:4c:ee:6c:05:41:09:5e:81:e8:f9:f4:fb:64:b8:3a:b6:ee:
         ee:00:b9:08:7d:4f:3b:fc:c5:d1:ce:8b:78:94:cf:0e:d1:49:
         98:03:25:3f:45:ca:6f:87:77:6e:f2:23:90:79:d0:b2:fc:3e:
         a7:66:e4:b0:fc:65:36:8d:9e:05:77:b6:b1:85:f4:77:90:bd:
         49:fd:7d:73:5d:df:a0:4e:51:48:c4:23:d7:0c:64:8a:fc:84:
         c2:d7:53:57:35:93:b0:1f:f4:fa:c1:ac:8f:40:cc:e7:23:1b:
         26:1e:ee:e7:a5:70:46:38:cb:d1:21:db:e5:e0:79:48:8c:d7:
         f8:94:58:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----