Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS213045.roa
File:                     AS213045.roa (raw, json)
Hash identifier:          XBjJB8PQrmOx+hPBj2CQiMbCgx9wBXeFQe8YCRHsyu8=
Subject key identifier:   7D:DE:BB:4A:9F:4B:86:96:73:35:FB:B2:CF:E8:E5:88:60:5A:79:20
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       18F7065E68249296248D546342AC179982C16F5A
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS213045.roa
Signing time:             Mon 10 Apr 2023 03:31:35 +0000
ROA not before:           Mon 10 Apr 2023 03:26:35 +0000
ROA not after:            Mon 08 Apr 2024 03:31:35 +0000
asID:                     213045
IP address blocks:        2a12:dd47:8075::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f7:06:5e:68:24:92:96:24:8d:54:63:42:ac:17:99:82:c1:6f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:35 2023 GMT
            Not After : Apr  8 03:31:35 2024 GMT
        Subject: CN=7DDEBB4A9F4B86967335FBB2CFE8E588605A7920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d0:5c:16:be:60:0d:ac:3b:95:fd:10:98:dc:
                    61:a0:d0:90:95:54:de:ff:5f:f3:5c:9a:d3:fb:5b:
                    05:13:dd:35:f4:3d:71:57:08:0e:82:e2:2b:96:c4:
                    98:47:15:d4:c7:75:4e:6a:71:b4:f0:85:73:d5:f5:
                    7a:29:8f:d6:5a:ee:73:64:10:5d:40:0b:21:0a:cb:
                    7d:71:14:f7:d8:37:c1:46:50:7b:e4:67:1a:7d:c7:
                    38:02:07:c3:42:30:e3:05:d2:0c:13:b5:f1:8c:77:
                    8c:1c:8b:fb:d7:72:c7:f5:b3:c7:d7:06:3c:1d:7e:
                    ec:2f:71:b9:07:00:f0:32:47:5a:77:55:91:bb:97:
                    c5:5d:46:e4:d5:54:6d:f5:6c:bd:6f:66:b9:66:ce:
                    f9:39:c4:03:4a:37:66:2b:12:ba:e5:22:a1:ea:43:
                    bc:3e:bb:40:de:d6:1b:4b:83:34:b5:79:e4:d8:f3:
                    98:f5:12:22:f3:80:fe:ee:9d:80:4b:41:19:fa:d4:
                    55:f9:8a:a6:cd:9b:b9:d7:61:10:d2:42:1c:28:4e:
                    bf:a4:15:02:dc:71:d3:7d:8c:1a:5d:6f:1d:7d:8e:
                    0d:8b:21:ae:03:40:d8:e7:61:f0:48:45:3d:fc:df:
                    f3:28:79:74:8a:41:55:86:38:8d:a6:6d:cf:ea:7e:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DE:BB:4A:9F:4B:86:96:73:35:FB:B2:CF:E8:E5:88:60:5A:79:20
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS213045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8075::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:31:d9:b6:97:e1:4f:34:e4:65:ac:73:c9:a9:ac:db:c6:b2:
         32:1b:e7:32:ca:5a:7a:54:bd:ba:50:57:ef:44:31:67:c8:5a:
         d5:4e:ac:39:24:b7:18:02:5d:57:df:af:fa:ab:0b:18:54:db:
         e3:aa:ad:20:be:7c:b5:0b:08:cd:64:a6:90:4c:15:27:c8:9a:
         c5:aa:eb:91:5f:15:ed:24:28:b4:f6:a7:df:c2:d8:62:fc:6f:
         bc:e8:7f:ed:8d:bf:e8:9f:a6:cb:6a:dd:0e:89:16:79:d5:68:
         4c:a2:13:6e:5b:32:10:08:e5:11:87:7f:09:ad:28:db:2b:9c:
         0f:b4:c4:b5:a0:91:00:09:36:25:e1:66:91:68:51:9c:3e:22:
         d8:93:4a:38:2b:be:ad:32:56:8b:52:16:d4:fe:7a:88:06:46:
         cc:b3:4f:e5:26:d6:c3:fe:22:66:f6:f4:dc:c8:eb:70:fc:83:
         d0:71:c9:43:34:79:ba:a1:5a:76:94:89:3b:ea:27:f2:69:b9:
         a7:c7:09:73:a5:4f:76:c0:f7:0f:bf:79:7d:4c:7b:a9:95:28:
         e2:4d:2b:ca:d0:a4:89:98:5a:63:0c:16:e7:1c:67:72:1c:ab:
         e6:d4:31:62:c4:c8:4e:45:ed:27:a5:9b:9d:57:7c:0b:21:6a:
         6f:ef:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----