Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS57406.roa
File:                     AS57406.roa (raw, json)
Hash identifier:          xjenC8qvOVK+5O22ov9n3yTcyes9fPiLvn2Wlr1MSik=
Subject key identifier:   7D:1E:18:CA:3A:F9:38:FE:61:CD:89:44:0C:AB:27:33:9E:8B:59:BB
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       341751CBED6B21E2D7730E764D2E9FE6615779A4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS57406.roa
Signing time:             Mon 10 Apr 2023 03:31:49 +0000
ROA not before:           Mon 10 Apr 2023 03:26:49 +0000
ROA not after:            Mon 08 Apr 2024 03:31:49 +0000
asID:                     57406
IP address blocks:        2a12:dd47:8260::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:17:51:cb:ed:6b:21:e2:d7:73:0e:76:4d:2e:9f:e6:61:57:79:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:49 2023 GMT
            Not After : Apr  8 03:31:49 2024 GMT
        Subject: CN=7D1E18CA3AF938FE61CD89440CAB27339E8B59BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:76:0f:5e:d3:24:e2:ca:75:fc:0d:4e:df:
                    32:2a:70:f8:3b:75:0e:28:ac:e6:ac:0e:c3:8e:dc:
                    f8:fe:2a:b5:69:86:2f:c1:c7:0d:11:b3:75:14:38:
                    bd:7a:e8:5a:17:d9:70:77:87:ba:3a:cd:7e:a0:6e:
                    dd:41:9e:8e:de:3d:ed:41:da:e1:34:b3:e1:f6:c4:
                    61:f2:ad:8a:e6:93:42:80:51:10:26:4f:9a:f6:dd:
                    33:dd:22:1b:31:5d:eb:2c:18:d0:bf:df:ad:99:3c:
                    31:6e:79:03:32:cf:84:ce:6e:7a:7c:3a:cb:93:81:
                    98:19:98:ff:a8:46:75:f1:24:12:b5:e6:09:14:7b:
                    12:08:4f:30:ce:25:62:cc:13:8a:d9:51:b3:8f:a2:
                    3a:2f:07:1c:07:a2:01:ca:b8:2b:69:7d:60:f0:af:
                    2d:62:37:66:7e:7a:94:d2:e6:04:21:67:8d:17:07:
                    99:10:d7:29:2e:44:5d:14:13:a2:ca:24:48:37:b0:
                    81:59:77:d3:ab:bd:82:8f:76:fe:25:b2:54:1b:5c:
                    cc:b4:cd:cf:1a:8d:95:8f:42:b8:fc:3a:29:d6:f8:
                    b7:00:06:6c:10:f3:51:bb:fd:f4:39:dd:75:f9:df:
                    35:38:05:43:0a:f3:40:11:f7:f1:4d:7b:31:11:4b:
                    43:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1E:18:CA:3A:F9:38:FE:61:CD:89:44:0C:AB:27:33:9E:8B:59:BB
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS57406.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8260::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:06:bf:78:93:64:3e:00:d7:7f:22:c9:6d:b2:f6:ca:13:30:
         9c:a0:2f:57:d6:f2:c0:7e:d0:8b:fc:4d:96:1a:32:fa:f4:64:
         83:13:eb:35:c1:f4:64:d8:aa:1d:c4:c8:f4:62:a2:d4:25:ab:
         c1:63:bd:ca:10:99:71:46:35:76:9a:c0:72:3d:12:df:ca:e3:
         be:7a:e9:6f:ee:e3:bf:f1:1d:e5:7f:11:70:35:c9:0e:dc:d5:
         fa:01:17:cb:35:c9:32:b6:f7:b4:d6:1a:c1:2c:1a:ce:dc:3d:
         cd:7c:61:e1:b8:2c:63:d4:4a:2d:bb:46:45:96:e5:6e:6b:09:
         a8:c1:67:5a:84:28:12:09:4b:32:06:86:74:20:b4:68:a4:64:
         ad:60:76:ba:03:c1:30:75:cf:00:56:3a:20:62:8f:65:0d:79:
         6a:11:b4:a7:99:19:d4:cc:e9:3e:c1:36:05:c4:ca:c0:22:17:
         e1:e5:50:0c:a7:2f:99:4f:27:ee:f6:c3:21:9a:86:f9:da:e9:
         cd:37:ab:2d:84:dc:1c:be:4c:bc:00:d8:31:68:fd:f0:a4:5e:
         dc:da:e0:6f:72:ce:f0:19:d8:91:9b:97:18:f8:8d:75:cb:31:
         66:e1:a9:db:44:33:fc:55:18:71:04:be:6b:91:5f:47:c1:b1:
         16:d4:be:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----