Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS53667.roa
File:                     AS53667.roa (raw, json)
Hash identifier:          17vkD2Yufh1gNtSDa+T2ximnEBk/fviThN1hc6vqZwk=
Subject key identifier:   88:4A:57:AF:C0:AC:19:4D:9B:B1:A8:BA:7C:60:91:3E:7D:9A:D0:5B
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       51A5419A69FD08D90D8ECEED4BDBAF808A9956B7
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS53667.roa
Signing time:             Sat 13 May 2023 03:59:42 +0000
ROA not before:           Sat 13 May 2023 03:54:42 +0000
ROA not after:            Sat 11 May 2024 03:59:42 +0000
asID:                     53667
IP address blocks:        2a12:dd47:1000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a5:41:9a:69:fd:08:d9:0d:8e:ce:ed:4b:db:af:80:8a:99:56:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: May 13 03:54:42 2023 GMT
            Not After : May 11 03:59:42 2024 GMT
        Subject: CN=884A57AFC0AC194D9BB1A8BA7C60913E7D9AD05B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:54:79:4f:68:cb:de:8e:fb:3b:d0:c3:ed:
                    1c:bf:cc:3a:63:6e:4f:c5:94:6c:07:de:f6:8a:d2:
                    c9:0b:c5:45:a6:8e:40:d8:17:83:23:03:79:28:d1:
                    70:7c:18:98:11:34:59:76:39:b7:3e:f2:01:87:b3:
                    2e:cc:3c:95:26:9d:bb:92:59:8f:44:ac:1b:cb:31:
                    21:22:80:52:aa:bf:e3:07:ee:15:ba:1b:d5:5b:c1:
                    9a:6c:89:5a:b1:7a:9d:d0:a2:7d:94:07:7a:05:bb:
                    8b:ba:f5:3a:30:3f:4c:8e:76:a7:bb:44:22:15:a7:
                    a1:1e:a8:b9:03:9f:77:4f:12:1c:f3:19:24:c4:de:
                    ea:5e:a4:33:3b:36:52:24:dd:27:fb:be:6b:e0:27:
                    98:b9:15:47:73:dc:30:44:0f:7e:25:ae:82:23:e4:
                    c0:20:93:2d:b0:39:22:44:5b:0b:54:7e:1d:04:2d:
                    f1:0f:2f:47:ce:01:19:9d:1e:8e:4a:12:b5:ad:b4:
                    33:09:a4:bd:6f:7b:d0:12:e3:92:07:b6:40:89:24:
                    7b:bb:f9:7a:f4:99:c6:af:8b:fa:43:92:3d:ba:2d:
                    cf:d8:58:5f:e3:f9:b5:0e:ef:ef:95:27:41:59:f1:
                    7e:0a:ce:07:e8:db:bb:3d:d4:b6:06:48:7d:e5:6f:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4A:57:AF:C0:AC:19:4D:9B:B1:A8:BA:7C:60:91:3E:7D:9A:D0:5B
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS53667.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         61:82:f1:6c:4d:8b:8c:a2:8b:71:bf:75:a8:38:2d:40:37:f6:
         29:89:0e:f1:f7:20:5b:7a:df:79:79:59:2d:b5:72:f3:38:55:
         c9:ca:f4:ca:1c:0c:32:32:cd:24:37:c0:5e:35:e1:3b:b6:05:
         b8:a6:fe:59:63:e8:ed:85:de:7f:d3:03:9b:94:d1:b9:3f:a2:
         ee:d4:63:c1:7c:3f:1f:d0:32:c5:db:82:81:d3:55:d4:64:0e:
         06:b7:ec:3d:34:ab:44:04:f3:9b:9a:fb:18:3e:0f:80:5c:82:
         e0:b7:c5:03:e3:b1:20:bb:b4:3a:e8:7b:b6:2e:b5:5f:5f:0b:
         3a:55:a7:16:5e:8e:4e:a4:75:8d:01:8b:dd:5c:6e:34:3a:de:
         e4:d9:9e:46:ca:21:88:a4:04:ac:51:66:b1:b8:48:9e:c0:39:
         a7:74:30:dc:5c:e7:86:54:fa:5e:dd:3b:fc:ac:fb:4d:bf:75:
         c7:1e:a1:8a:7c:9f:3f:85:44:0d:0d:18:36:f9:eb:dc:62:17:
         f3:85:98:08:f6:4c:d7:d2:5d:01:b8:95:76:4a:3b:18:ed:eb:
         6f:03:42:48:01:9e:b3:5a:ff:46:f3:77:33:fa:13:95:d2:19:
         af:ad:bc:38:2d:d5:71:23:49:07:b1:11:f5:40:32:5e:48:86:
         a9:03:fa:be
-----BEGIN CERTIFICATE-----
MIIEkTCCA3mgAwIBAgIUUaVBmmn9CNkNjs7tS9uvgIqZVrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA1MTMwMzU0NDJaFw0yNDA1MTEwMzU5NDJaMDMxMTAvBgNV
BAMTKDg4NEE1N0FGQzBBQzE5NEQ5QkIxQThCQTdDNjA5MTNFN0Q5QUQwNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC41R5T2jL3o77O9DD7Ry/zDpj
bk/FlGwH3vaK0skLxUWmjkDYF4MjA3ko0XB8GJgRNFl2Obc+8gGHsy7MPJUmnbuS
WY9ErBvLMSEigFKqv+MH7hW6G9VbwZpsiVqxep3Qon2UB3oFu4u69TowP0yOdqe7
RCIVp6EeqLkDn3dPEhzzGSTE3upepDM7NlIk3Sf7vmvgJ5i5FUdz3DBED34lroIj
5MAgky2wOSJEWwtUfh0ELfEPL0fOARmdHo5KErWttDMJpL1ve9AS45IHtkCJJHu7
+Xr0mcavi/pDkj26Lc/YWF/j+bUO7++VJ0FZ8X4Kzgfo27s91LYGSH3lbyl5AgMB
AAGjggGbMIIBlzAdBgNVHQ4EFgQUiEpXr8CsGU2bsai6fGCRPn2a0FswHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBE
BggrBgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVM1MzY2Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoS3UcQMA0GCSqGSIb3DQEBCwUA
A4IBAQBhgvFsTYuMootxv3WoOC1AN/YpiQ7x9yBbet95eVkttXLzOFXJyvTKHAwy
Ms0kN8BeNeE7tgW4pv5ZY+jthd5/0wOblNG5P6Lu1GPBfD8f0DLF24KB01XUZA4G
t+w9NKtEBPObmvsYPg+AXILgt8UD47Egu7Q66Hu2LrVfXws6VacWXo5OpHWNAYvd
XG40Ot7k2Z5GyiGIpASsUWaxuEiewDmndDDcXOeGVPpe3Tv8rPtNv3XHHqGKfJ8/
hUQNDRg2+evcYhfzhZgI9kzX0l0BuJV2SjsY7etvA0JIAZ6zWv9G83cz+hOV0hmv
rbw4LdVxI0kHsRH1QDJeSIapA/q+
-----END CERTIFICATE-----