Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS59730.roa
File:                     AS59730.roa (raw, json)
Hash identifier:          rnK31ioN480kwtKvLpHuPVQEmsOahBp3tCLdMqUFqBs=
Subject key identifier:   FB:2C:21:F7:27:63:56:BC:2D:9F:87:7A:25:18:3C:70:72:67:9B:75
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       76A1969AF088CA677B8FA51C9157D8BC6143048F
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS59730.roa
Signing time:             Mon 10 Apr 2023 03:31:41 +0000
ROA not before:           Mon 10 Apr 2023 03:26:41 +0000
ROA not after:            Mon 08 Apr 2024 03:31:41 +0000
asID:                     59730
IP address blocks:        2a12:dd47:82b0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a1:96:9a:f0:88:ca:67:7b:8f:a5:1c:91:57:d8:bc:61:43:04:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:41 2023 GMT
            Not After : Apr  8 03:31:41 2024 GMT
        Subject: CN=FB2C21F7276356BC2D9F877A25183C7072679B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:35:4d:70:eb:84:3f:8b:4d:6f:dd:de:05:
                    51:57:8e:5f:d7:84:07:d7:2d:5c:93:4e:2e:0e:63:
                    82:73:ab:61:ea:19:db:6a:00:72:1d:55:26:bf:95:
                    a5:6f:46:a9:c0:bf:31:73:62:97:9d:51:a2:bb:fe:
                    e3:43:9a:e6:f4:2c:42:0a:28:69:d3:d3:1f:df:99:
                    1a:06:95:9c:f0:81:50:67:02:a4:77:72:a6:04:e5:
                    bb:5e:77:14:fd:32:90:81:01:c0:f8:f4:4c:8f:51:
                    65:cf:37:fd:a1:47:1f:40:53:b0:ea:ee:a4:82:dc:
                    c2:7c:f5:20:3a:e9:75:22:38:37:de:b8:72:7f:9f:
                    cf:b0:35:53:f8:76:2c:a6:63:55:f9:6b:8a:8d:b0:
                    07:5f:64:e0:0e:ac:f5:03:3c:14:7b:61:9a:3e:08:
                    4e:a6:f4:29:2e:d3:5c:ba:79:bf:f0:e2:88:40:49:
                    e3:1b:ef:7a:81:ad:69:ef:09:f9:28:55:a2:af:06:
                    a1:76:44:e5:31:76:c1:b5:22:27:26:4a:69:30:72:
                    9a:17:4e:b3:0e:77:33:07:1a:e6:28:30:34:9b:01:
                    7e:46:0a:d7:38:9b:3d:eb:3a:25:ce:ce:33:d9:76:
                    34:8c:4b:79:a2:05:1b:f5:67:c2:13:46:2b:1d:e6:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2C:21:F7:27:63:56:BC:2D:9F:87:7A:25:18:3C:70:72:67:9B:75
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS59730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         d1:7e:12:12:d9:9f:28:d3:47:98:9d:00:23:ab:8f:ae:34:22:
         66:88:b8:5b:33:7e:55:a4:67:a5:39:72:3a:b4:4a:82:fa:9e:
         27:22:d0:1b:f5:d1:60:24:0d:d1:4b:a4:f8:e3:8f:93:88:76:
         96:01:9c:b5:13:65:04:79:0a:55:2d:cb:30:c3:7a:21:98:21:
         bf:39:9a:c0:a1:08:a1:6d:ed:78:2e:ea:4b:48:f0:17:fd:24:
         de:ff:a7:6c:1c:71:62:e2:7c:a4:fa:5b:81:aa:df:af:de:ed:
         71:b3:a7:c9:ee:b3:12:46:34:de:00:74:63:fc:4e:98:8a:ae:
         f3:43:54:49:83:b2:db:5e:39:f6:00:78:28:85:86:75:73:d5:
         da:da:f3:d7:22:c8:02:f1:8c:f0:5b:d1:ca:59:6f:79:9f:2d:
         d0:16:10:a0:4e:d3:d9:a8:97:18:c6:7b:b1:ad:eb:8a:13:03:
         96:4e:b7:81:69:de:5c:f3:5f:bd:83:18:56:c1:d9:2c:7c:13:
         24:77:4e:e9:d3:59:2d:4f:69:90:b7:82:98:68:3a:18:f3:0f:
         14:f3:d5:d6:c5:c0:e9:21:a7:79:7a:36:fd:3c:0d:b1:e6:bf:
         bc:1b:16:b8:25:98:a7:9c:9f:0e:39:79:38:74:d2:2c:19:6b:
         aa:2b:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----