Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS61257.roa
File:                     AS61257.roa (raw, json)
Hash identifier:          JUPT3523nRKONv8QUhct18NZGTKAgxfPPNWTmSFI1+M=
Subject key identifier:   CA:A8:DC:F5:B2:E3:76:72:E9:51:72:B2:2F:17:3F:46:9B:89:97:D9
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       3E675A64DE66C9264CCF1EAB759DAC1DD7EF39D4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS61257.roa
Signing time:             Mon 10 Apr 2023 03:31:45 +0000
ROA not before:           Mon 10 Apr 2023 03:26:45 +0000
ROA not after:            Mon 08 Apr 2024 03:31:45 +0000
asID:                     61257
IP address blocks:        2a12:dd47:8300::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:67:5a:64:de:66:c9:26:4c:cf:1e:ab:75:9d:ac:1d:d7:ef:39:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:45 2023 GMT
            Not After : Apr  8 03:31:45 2024 GMT
        Subject: CN=CAA8DCF5B2E37672E95172B22F173F469B8997D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:4f:b6:65:ee:fa:7a:cd:27:27:a3:6a:da:
                    2a:e8:d5:4f:a1:ed:00:6d:19:ac:05:66:6d:2a:98:
                    08:db:30:03:7d:a8:2c:28:3e:c2:92:91:9e:54:c8:
                    55:3b:38:96:d6:d4:2e:87:74:11:5a:67:6c:c6:84:
                    1e:53:c4:ba:b6:8f:89:60:e8:22:9b:4b:91:3e:55:
                    16:77:62:40:61:7e:fb:4a:1d:f4:8c:65:f7:48:14:
                    8f:c3:5b:89:34:15:3e:7e:b2:f6:fd:00:68:4c:2f:
                    c2:ad:e5:1b:12:23:4d:33:84:dd:45:71:88:78:65:
                    cb:55:77:ef:8d:fe:67:ef:96:37:bd:e8:c2:92:81:
                    eb:9c:45:d7:5e:f6:40:ef:1f:40:2c:c9:a6:c4:96:
                    56:49:b3:d9:b7:f4:e1:50:14:aa:bf:7e:26:96:6d:
                    78:54:ee:75:6a:8c:e9:89:0b:11:e7:c9:87:44:37:
                    0b:de:97:04:89:b2:0c:1d:be:2a:b6:10:00:a1:07:
                    d4:a6:0c:14:3b:67:a1:09:b1:72:07:de:6e:14:ea:
                    7d:54:f7:ae:21:56:07:60:5c:93:26:8d:8e:6a:6f:
                    3f:8d:39:7c:ee:09:52:eb:2b:d3:61:cb:b2:19:94:
                    57:26:6f:49:25:89:87:05:4b:70:7b:7e:51:92:43:
                    65:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A8:DC:F5:B2:E3:76:72:E9:51:72:B2:2F:17:3F:46:9B:89:97:D9
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS61257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8300::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:52:86:79:5d:58:60:9d:ed:50:1c:80:3e:20:2d:c3:ff:e0:
         50:88:78:fe:79:f5:69:ec:4a:1d:28:04:66:42:34:b0:b9:fb:
         cc:cb:38:a5:1d:b3:7d:6d:28:dd:64:22:08:b6:64:69:77:2f:
         9a:36:c0:4f:f9:bc:89:ab:90:d1:d7:db:eb:ba:4f:bb:fb:81:
         cc:0f:d0:be:81:db:ce:c0:84:c7:31:20:6d:b7:1e:86:b0:d1:
         c3:b6:22:f6:e7:0b:b8:2f:8c:91:23:71:46:b8:54:93:96:d6:
         4d:cc:a6:a3:0c:9f:fa:a1:bd:ba:bb:88:60:2f:76:85:42:29:
         d4:13:eb:62:48:7a:43:ad:5d:2e:ff:82:b8:7e:57:78:08:12:
         f1:cb:5b:12:dd:a3:cc:c4:b8:a3:79:24:e9:f8:c2:e7:86:b1:
         9d:5a:29:08:6b:5d:4b:ee:19:a3:ea:3a:ed:7e:07:36:b8:53:
         0f:e0:4b:00:6c:3a:18:1d:2d:8d:1e:1f:11:80:3b:f6:28:24:
         b9:c2:61:c6:df:4c:d4:38:85:c7:3f:cb:a9:01:5a:97:67:f7:
         77:28:5f:06:58:57:1f:b5:51:28:3a:49:5a:f0:49:b4:1a:1b:
         20:6f:49:1d:3a:29:a3:36:6f:22:4f:9d:5f:d6:ac:90:19:9c:
         ef:08:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----