Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS211946.roa
File:                     AS211946.roa (raw, json)
Hash identifier:          /5tCQFeiXXLbCd8hnn1v3TLjuCI1BhEb4eVvYxkAFdI=
Subject key identifier:   95:2B:35:A9:FE:3B:30:04:8E:C8:0A:37:2D:D0:CE:08:A6:2E:0D:AB
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       1D74F1D9F1F0FE3F9B8E5448BD5CFFB2D49826C8
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS211946.roa
Signing time:             Mon 10 Apr 2023 03:31:45 +0000
ROA not before:           Mon 10 Apr 2023 03:26:45 +0000
ROA not after:            Mon 08 Apr 2024 03:31:45 +0000
asID:                     211946
IP address blocks:        2a12:dd47:8028::/48 maxlen: 48
                          2a12:dd47:d200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:74:f1:d9:f1:f0:fe:3f:9b:8e:54:48:bd:5c:ff:b2:d4:98:26:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:45 2023 GMT
            Not After : Apr  8 03:31:45 2024 GMT
        Subject: CN=952B35A9FE3B30048EC80A372DD0CE08A62E0DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:d5:c7:f3:0c:01:26:c6:ec:53:2d:b4:14:
                    4d:d2:7c:5f:4b:97:c9:a8:ab:bd:68:ee:03:e3:7c:
                    0a:5b:ba:06:79:c6:25:7e:2b:13:f3:ef:d2:4a:ca:
                    33:24:b6:9f:ea:37:22:3c:2d:40:9c:62:38:0b:78:
                    dd:3c:d0:a2:50:24:39:26:78:6e:cd:e9:18:18:07:
                    10:e5:e8:37:9e:04:18:2c:89:78:2c:a9:7d:6a:bb:
                    f9:b6:8c:04:3a:8e:54:57:b7:d4:63:a0:5f:06:99:
                    e9:e8:12:24:88:af:b6:13:a2:9a:e1:80:7e:2a:34:
                    69:1c:fc:63:dc:3d:69:dd:90:6f:d1:04:50:98:99:
                    c8:b7:a8:0c:77:3c:5b:6b:39:de:6f:53:f1:78:31:
                    3a:a0:7f:a1:d0:de:55:12:c3:a9:c3:23:f5:b8:e0:
                    5c:de:03:d0:33:10:d1:fb:78:5e:5d:e6:3f:77:82:
                    7d:b6:ba:e4:76:7e:9a:d1:c6:23:d7:01:77:13:79:
                    fe:1c:48:56:57:07:14:6e:2b:c5:8d:3c:48:c6:90:
                    8f:ae:08:93:5f:45:18:98:07:61:ef:e8:87:15:b1:
                    31:21:35:cc:ff:bd:9a:1b:25:de:ef:bb:29:ef:d8:
                    aa:5c:dd:73:0d:5b:85:a4:9c:ae:28:fc:d7:ba:03:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2B:35:A9:FE:3B:30:04:8E:C8:0A:37:2D:D0:CE:08:A6:2E:0D:AB
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS211946.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8028::/48
                  2a12:dd47:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:44:76:36:85:a5:29:fe:c3:38:4c:2c:67:a0:ea:a7:67:91:
         5e:70:26:a6:0a:7e:36:78:51:e9:1f:df:2f:8e:89:1b:cd:3a:
         7d:42:e6:75:2b:6c:f2:81:43:e0:88:ee:50:c0:6e:50:8c:02:
         e4:d1:8e:a3:3c:dc:e8:65:fa:dc:27:ce:cb:e1:c2:d8:eb:19:
         5a:09:9c:1e:de:0c:48:00:e3:95:82:c8:56:9d:69:4d:5b:f3:
         29:4c:e8:2c:3f:1a:d3:22:7d:ca:d9:51:dc:8b:7a:a3:30:d5:
         c0:78:2f:4d:71:79:a0:b4:cd:46:63:6f:cb:af:a0:10:4d:ba:
         f3:a6:c5:df:33:44:9d:02:ca:44:4d:2f:17:1f:05:ec:26:c7:
         4d:4d:dc:61:34:42:4f:02:83:b9:dc:73:68:8a:33:12:32:08:
         f1:39:fa:91:03:cc:de:3f:28:0a:11:79:3e:16:c0:5d:3f:7c:
         2a:b3:d9:4b:26:85:fd:5e:b9:64:73:14:e4:93:68:07:3b:f3:
         eb:56:a5:0b:05:27:66:99:87:e5:81:b4:df:53:16:aa:2f:18:
         d1:6f:fa:12:e6:71:0b:85:23:6e:50:d4:19:4f:ca:bf:b3:22:
         0c:be:a7:cd:2b:e8:2b:b5:24:2e:15:9d:5f:6c:51:86:3a:cd:
         25:eb:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----