Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS393577.roa
File:                     AS393577.roa (raw, json)
Hash identifier:          5WxcHPEKcCNwLJtOQk7F5K8BdMNHTgjjiPvq0Ff07Z4=
Subject key identifier:   24:31:27:F1:3A:A5:58:7D:C7:51:2E:AF:77:26:9A:24:3F:66:6C:84
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       24DA45C9581A22FA39FF60D02E82D6F833152419
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS393577.roa
Signing time:             Mon 10 Apr 2023 03:31:41 +0000
ROA not before:           Mon 10 Apr 2023 03:26:41 +0000
ROA not after:            Mon 08 Apr 2024 03:31:41 +0000
asID:                     393577
IP address blocks:        2a12:dd47:d100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:da:45:c9:58:1a:22:fa:39:ff:60:d0:2e:82:d6:f8:33:15:24:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:41 2023 GMT
            Not After : Apr  8 03:31:41 2024 GMT
        Subject: CN=243127F13AA5587DC7512EAF77269A243F666C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:0f:01:ff:fb:f5:28:d6:1a:fb:70:df:22:
                    0c:d3:6e:2d:e4:cf:6a:3f:89:b7:b9:26:62:ea:75:
                    7d:ba:d7:5d:0a:7d:2b:f9:d5:c4:c7:2f:34:86:f2:
                    b3:c3:a1:49:96:b2:63:45:94:f8:11:a8:2b:4f:27:
                    9a:72:6b:f6:4f:08:42:5a:a5:7e:07:7a:d0:5f:d4:
                    9f:59:6c:e8:b5:55:d7:20:92:63:7e:ac:e0:5e:7e:
                    8d:58:0e:81:82:d3:b0:db:e1:0d:87:2e:d9:1a:e0:
                    d2:88:7e:07:27:1a:22:7b:59:dd:19:37:4e:dd:60:
                    32:6f:72:3b:f4:9d:d3:f1:26:08:ae:d5:b7:a1:28:
                    50:e3:d7:41:10:78:6c:db:2c:a4:b1:ff:d3:16:72:
                    0d:cf:0a:13:1e:79:0d:bd:a6:5e:c4:36:3c:96:fc:
                    e4:e2:9c:15:04:19:38:57:bb:49:99:02:9c:e8:8f:
                    77:a1:b5:94:00:71:a4:ac:eb:b0:31:38:21:a5:6c:
                    09:3b:84:25:29:ee:de:e6:31:b6:db:ac:9e:60:d8:
                    4e:b6:02:5f:99:f6:01:a7:7d:5a:43:fa:7c:ec:3b:
                    8c:28:c8:d5:db:07:5e:7f:10:8e:2f:9e:69:2c:15:
                    1a:a6:c4:92:21:08:96:fe:75:ad:1c:43:13:83:a0:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:31:27:F1:3A:A5:58:7D:C7:51:2E:AF:77:26:9A:24:3F:66:6C:84
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS393577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:88:60:59:36:f2:03:cf:d3:2c:e6:8e:a7:40:a6:ac:1a:ea:
         c3:29:d6:be:bb:30:67:70:0a:62:b0:1b:64:e2:5d:a7:6c:b6:
         ba:b7:7f:3d:bc:5c:ff:ab:a4:48:9d:71:91:34:2e:a7:e0:b4:
         3f:64:02:5d:75:a5:36:90:f0:0c:7d:e9:9b:f6:bc:0f:a3:35:
         19:bf:75:3e:b3:17:ca:37:08:8c:db:73:a1:5a:98:2b:8c:06:
         32:bc:38:ca:5c:33:43:6b:e4:4a:d8:8b:67:4a:3f:e3:5d:99:
         04:9f:4e:5c:67:c4:01:00:fe:6c:6f:9c:77:e2:f2:ab:aa:8b:
         06:22:71:49:91:ba:f7:3f:c6:fa:18:fd:0d:57:68:dc:a0:bd:
         36:93:8d:1a:75:9b:c7:31:a3:70:a9:a7:5b:06:aa:be:13:f8:
         db:b8:89:8f:3a:26:8b:bd:fb:5e:b5:89:2e:0c:01:14:d7:21:
         92:fa:16:62:a0:9d:66:24:7c:35:c0:81:b1:56:f3:30:43:0f:
         38:5d:84:fd:f8:5a:14:22:f7:ca:71:a6:6a:ed:db:65:f2:59:
         a1:df:7d:48:6e:85:0b:90:63:30:f1:b4:69:b0:68:a4:c7:b9:
         36:3f:17:3b:05:5c:85:1f:d9:cc:1f:77:42:2a:81:91:2a:2a:
         fd:27:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:49 2023 by rpki-client on console-ams.rpki-client.org