Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS207314.roa
File:                     AS207314.roa (raw, json)
Hash identifier:          RBf0qVody7YJJCRHaa9ic2+sF6TfgidxvaDA29XZPPg=
Subject key identifier:   80:33:FF:EE:8F:81:21:BF:6A:22:62:72:B0:DA:A1:7B:F2:BC:56:74
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       05C4AFBD9584504DC079E732CE25F92879829EB7
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS207314.roa
Signing time:             Wed 12 Apr 2023 06:55:22 +0000
ROA not before:           Wed 12 Apr 2023 06:50:22 +0000
ROA not after:            Wed 10 Apr 2024 06:55:22 +0000
asID:                     207314
IP address blocks:        2a12:dd47:3a00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c4:af:bd:95:84:50:4d:c0:79:e7:32:ce:25:f9:28:79:82:9e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 12 06:50:22 2023 GMT
            Not After : Apr 10 06:55:22 2024 GMT
        Subject: CN=8033FFEE8F8121BF6A226272B0DAA17BF2BC5674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:d7:03:ca:44:33:51:1c:7f:d3:82:15:c5:
                    8a:49:65:41:a4:48:b4:a9:6f:6f:63:bc:f3:47:70:
                    17:ca:c3:35:b9:be:b9:25:c2:fb:f1:e7:e9:47:4e:
                    40:4e:05:dc:09:52:9f:bb:f0:9b:d7:d0:e7:7b:19:
                    cf:08:1d:e2:07:dd:99:f3:61:4c:91:b5:30:f7:5c:
                    57:38:ab:a7:fe:02:15:9f:3f:a0:75:2b:46:4d:f7:
                    21:5e:bc:8a:16:cb:31:04:ce:51:d2:e6:29:33:16:
                    54:80:b6:91:93:42:fb:f8:76:2e:bc:c4:bd:5b:2d:
                    90:74:f5:fc:b8:65:03:6a:71:d5:db:b9:b0:32:3c:
                    c9:69:3b:4a:cf:ad:be:8d:b0:7e:50:08:27:47:30:
                    df:93:34:62:a9:e0:03:79:4e:08:c8:88:1d:40:14:
                    a8:09:b9:ee:0c:16:e6:37:0b:9c:a0:ff:00:11:34:
                    ae:a4:05:5a:33:ef:61:66:a7:3e:c0:0b:ca:b8:95:
                    13:fc:cb:d7:22:e6:16:45:1e:d9:6c:35:1f:c0:82:
                    10:8d:78:53:94:06:4e:8b:82:9d:87:d5:33:92:3e:
                    59:48:3b:33:8d:91:17:be:bc:ed:b8:c4:3a:81:6d:
                    3a:d0:74:70:fb:22:3c:eb:12:ac:1a:0d:51:68:fd:
                    4f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:33:FF:EE:8F:81:21:BF:6A:22:62:72:B0:DA:A1:7B:F2:BC:56:74
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS207314.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:39:e4:cd:4f:83:9a:f3:87:ce:e5:26:bc:b3:88:fe:fe:ba:
         05:f2:d4:0a:c0:8f:46:e4:d9:96:00:4d:90:ec:7c:16:02:41:
         89:b8:15:69:1f:84:7c:4f:8e:fa:fa:f5:53:95:64:d5:11:7d:
         c3:9f:25:08:f5:24:5f:82:a5:a8:8d:66:84:00:7b:b5:93:de:
         ef:61:aa:38:ab:a9:b3:b6:d7:4c:64:f5:74:57:60:ab:17:d5:
         68:d2:1c:13:70:64:2a:5b:87:e2:7b:eb:63:d1:1e:c3:db:79:
         6a:c6:5e:95:45:c5:1d:24:7d:df:59:ac:50:88:0b:2a:d1:31:
         2b:4c:45:23:8c:b3:74:06:8b:53:c8:f5:25:1f:3e:a8:ec:9c:
         2e:3e:11:a5:5b:05:af:83:58:80:c0:28:8f:a9:92:82:7a:c6:
         c7:f0:93:97:58:e6:60:94:e8:2b:eb:7b:3e:33:08:d5:eb:e5:
         cb:ae:82:74:88:67:80:76:2c:2a:87:de:c9:d7:f4:33:ba:cb:
         a8:0b:cc:2c:1c:2d:99:b2:f9:50:e3:72:ed:15:53:c5:24:8b:
         8b:57:a6:da:fc:77:d5:fa:b9:b0:3c:3c:52:b5:dd:ca:fe:77:
         34:0b:ed:2c:70:ab:f2:58:cb:e2:7e:8a:4e:80:7e:ab:48:87:
         c6:f8:15:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----