Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS212168.roa
File:                     AS212168.roa (raw, json)
Hash identifier:          Cmc9K9OTO9tlD2nMk2HRUyVQVQeNRQns2ooNVu47dqc=
Subject key identifier:   82:BE:2E:D9:2D:1B:FC:76:E1:07:D8:83:DF:6C:D3:06:81:09:57:65
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       0373C68250B61EB51E03AA4F0285AA9B1D581EBE
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS212168.roa
Signing time:             Sun 15 Oct 2023 04:05:19 +0000
ROA not before:           Sun 15 Oct 2023 04:00:19 +0000
ROA not after:            Sun 13 Oct 2024 04:05:19 +0000
asID:                     212168
IP address blocks:        2a12:dd47:5800::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:73:c6:82:50:b6:1e:b5:1e:03:aa:4f:02:85:aa:9b:1d:58:1e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 15 04:00:19 2023 GMT
            Not After : Oct 13 04:05:19 2024 GMT
        Subject: CN=82BE2ED92D1BFC76E107D883DF6CD30681095765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:25:23:90:89:3b:a9:63:2a:6e:2d:d0:c6:
                    ab:19:eb:66:64:ba:e6:9f:fc:31:e8:40:d6:03:bb:
                    97:9a:13:3f:f0:80:8c:d4:43:43:63:47:e4:5d:13:
                    56:f5:d9:f5:19:92:90:fa:88:e4:a8:4f:b7:f2:61:
                    a8:7a:43:8a:3c:c9:db:9d:37:b2:ef:97:2a:d9:03:
                    97:27:24:e6:84:3b:03:13:6a:23:fc:0d:e5:4d:53:
                    f1:52:31:85:6b:3c:26:72:74:30:77:50:62:41:6f:
                    f9:e8:2e:9b:17:3e:61:7a:5a:9c:f7:1f:b2:bf:d6:
                    33:75:d3:c3:e7:97:f4:6a:3c:d6:33:08:4e:78:f0:
                    5d:88:8f:90:32:ea:ce:a7:86:6f:5d:11:c3:f1:6b:
                    1f:fa:a4:8d:cd:41:75:0d:cb:d9:ae:be:a5:ec:6f:
                    d9:84:26:46:27:95:b3:f3:d4:be:3d:2d:5f:87:26:
                    29:59:d6:c3:9b:91:94:3c:bb:30:00:f7:20:d2:ca:
                    d3:c5:f4:9f:b0:99:b5:c9:c6:d2:84:4c:c1:3a:6b:
                    9b:f6:0d:b8:fd:1e:b9:06:02:db:a5:22:11:30:24:
                    7e:8c:17:f9:31:3e:e2:4a:7d:97:a3:95:a4:fa:f2:
                    ee:d8:5c:01:15:1d:2c:68:90:5c:9f:5a:97:cd:0b:
                    24:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BE:2E:D9:2D:1B:FC:76:E1:07:D8:83:DF:6C:D3:06:81:09:57:65
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS212168.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5800::/38

    Signature Algorithm: sha256WithRSAEncryption
         86:a8:38:df:71:4a:8b:db:4e:36:99:b7:b7:04:3e:3e:a3:6c:
         5e:ba:7d:ba:98:64:8f:f3:48:7a:30:4b:80:d4:60:05:a6:cc:
         04:42:5d:f2:6d:ad:93:dc:ef:8f:4b:82:b1:0a:81:ed:09:60:
         46:82:57:9d:86:39:a8:d6:24:3c:72:52:ea:84:ac:cb:c6:78:
         db:23:ea:4b:03:32:39:42:cb:b5:e2:b3:df:38:8c:63:f6:3c:
         d9:21:b3:7f:a4:ea:a7:a6:70:c6:1f:33:99:be:49:4c:b7:8f:
         6e:13:d0:44:03:a1:53:9d:34:99:92:ed:75:6f:0a:b2:22:9f:
         6e:65:07:9a:ab:af:f5:da:2e:65:41:b8:44:87:c0:cb:67:b1:
         69:a3:42:10:ef:8e:be:25:b9:cc:5f:6e:bd:f3:a9:44:7a:87:
         2e:3f:8f:89:a1:18:47:57:b6:01:ef:16:db:2c:c7:09:34:4a:
         80:87:f8:ae:67:dd:80:92:7c:ba:1a:75:2c:91:2e:77:bd:b1:
         45:db:7e:b3:0b:30:91:fe:d7:b2:a2:c4:44:14:f7:0c:5e:4e:
         56:19:d3:ce:dd:94:c3:38:11:aa:e9:92:e3:e5:f6:94:7a:4d:
         33:69:5b:e0:6b:6f:0a:ee:5a:62:d2:4a:d0:9d:73:05:54:42:
         7b:37:d5:4f
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUA3PGglC2HrUeA6pPAoWqmx1YHr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzEwMTUwNDAwMTlaFw0yNDEwMTMwNDA1MTlaMDMxMTAvBgNV
BAMTKDgyQkUyRUQ5MkQxQkZDNzZFMTA3RDg4M0RGNkNEMzA2ODEwOTU3NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJCUjkIk7qWMqbi3QxqsZ62Zk
uuaf/DHoQNYDu5eaEz/wgIzUQ0NjR+RdE1b12fUZkpD6iOSoT7fyYah6Q4o8ydud
N7LvlyrZA5cnJOaEOwMTaiP8DeVNU/FSMYVrPCZydDB3UGJBb/noLpsXPmF6Wpz3
H7K/1jN108Pnl/RqPNYzCE548F2Ij5Ay6s6nhm9dEcPxax/6pI3NQXUNy9muvqXs
b9mEJkYnlbPz1L49LV+HJilZ1sObkZQ8uzAA9yDSytPF9J+wmbXJxtKETME6a5v2
Dbj9HrkGAtulIhEwJH6MF/kxPuJKfZejlaT68u7YXAEVHSxokFyfWpfNCyR/AgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUgr4u2S0b/HbhB9iD32zTBoEJV2UwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBF
BggrBgEFBQcBCwQ5MDcwNQYIKwYBBQUHMAuGKXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVMyMTIxNjgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIqEt1HWDANBgkqhkiG9w0BAQsF
AAOCAQEAhqg433FKi9tONpm3twQ+PqNsXrp9uphkj/NIejBLgNRgBabMBEJd8m2t
k9zvj0uCsQqB7QlgRoJXnYY5qNYkPHJS6oSsy8Z42yPqSwMyOULLteKz3ziMY/Y8
2SGzf6Tqp6Zwxh8zmb5JTLePbhPQRAOhU500mZLtdW8KsiKfbmUHmquv9douZUG4
RIfAy2exaaNCEO+OviW5zF9uvfOpRHqHLj+PiaEYR1e2Ae8W2yzHCTRKgIf4rmfd
gJJ8uhp1LJEud72xRdt+swswkf7XsqLERBT3DF5OVhnTzt2UwzgRqumS4+X2lHpN
M2lb4GtvCu5aYtJK0J1zBVRCezfVTw==
-----END CERTIFICATE-----