Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS8075.roa
File:                     AS8075.roa (raw, json)
Hash identifier:          6dTJCzqjriC0OAFPnMwQDzxajUAgKzoXdD7+dqlouTY=
Subject key identifier:   D0:D9:61:77:3A:6A:1A:F6:A8:3E:F1:9A:E2:9C:99:31:CC:75:5D:82
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       11A644ED61E873BD92E338FBB71012C7FFDA93E9
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS8075.roa
Signing time:             Wed 19 Apr 2023 12:14:57 +0000
ROA not before:           Wed 19 Apr 2023 12:09:57 +0000
ROA not after:            Wed 17 Apr 2024 12:14:57 +0000
asID:                     8075
IP address blocks:        2a12:dd47:8280::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a6:44:ed:61:e8:73:bd:92:e3:38:fb:b7:10:12:c7:ff:da:93:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 19 12:09:57 2023 GMT
            Not After : Apr 17 12:14:57 2024 GMT
        Subject: CN=D0D961773A6A1AF6A83EF19AE29C9931CC755D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:14:d8:9d:6c:81:ac:33:0c:1e:a8:82:ad:
                    c4:94:17:5e:ab:05:70:a8:7c:5f:56:83:d4:c5:3b:
                    98:35:30:41:41:6d:15:92:5e:ed:df:3a:01:e3:77:
                    2e:9b:c9:4f:ab:67:30:9b:76:94:eb:fa:b0:d2:4c:
                    b0:4b:74:ff:80:8d:c4:1e:f6:75:6e:84:1f:bc:a4:
                    73:3b:4a:56:14:fb:57:03:d2:e6:2f:98:79:50:25:
                    81:0e:23:3d:b1:47:4f:94:11:f3:44:cf:a5:60:0f:
                    03:03:77:92:ad:44:97:69:02:e5:4d:e6:87:33:c6:
                    db:ad:22:65:e8:77:83:97:89:5e:3e:65:7c:45:8a:
                    3b:ce:4f:5a:dc:29:05:9f:74:cc:a1:47:99:38:a7:
                    6d:58:ea:6a:33:44:0d:e9:53:75:15:5f:06:48:0c:
                    90:82:99:8e:49:fa:93:88:6f:7c:5b:43:74:21:f4:
                    ce:ce:54:69:86:8a:ac:ed:69:43:38:5e:f4:ba:7b:
                    9c:b0:c0:8e:c1:55:71:ef:34:15:8e:a0:0d:12:97:
                    64:26:94:b8:aa:86:36:31:51:0d:a0:c3:4b:6b:b9:
                    ad:30:23:9c:c0:00:fb:b3:89:97:64:4a:4e:cf:11:
                    4e:9b:f8:b1:46:54:76:d0:5b:3e:55:ed:31:ba:09:
                    13:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D9:61:77:3A:6A:1A:F6:A8:3E:F1:9A:E2:9C:99:31:CC:75:5D:82
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS8075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8280::/44

    Signature Algorithm: sha256WithRSAEncryption
         a6:9e:7c:f0:10:d1:6c:5c:b2:60:e8:40:93:3e:b5:cc:79:40:
         c3:9c:b3:73:a0:8a:1a:f0:da:2e:07:90:9f:a8:9c:23:f8:7a:
         87:16:64:b1:bf:d9:b3:86:86:5b:e8:f4:31:39:f6:43:a3:06:
         50:2d:ed:1e:85:2c:41:82:69:c0:7c:32:64:95:ce:95:06:a6:
         36:02:db:65:37:d1:f1:7d:54:d5:bf:e0:bf:40:e2:0e:2f:84:
         3b:73:b2:33:90:09:58:be:59:78:84:c6:36:d8:55:04:20:85:
         5b:f6:01:37:f0:13:9e:f6:eb:6f:80:a1:2a:b8:7f:b6:2c:6a:
         1b:0c:90:d4:c4:e8:69:f9:0c:a9:04:4c:45:a0:6d:e9:53:e4:
         8a:c6:5b:5e:1b:66:78:b6:6f:cc:0a:ec:16:6f:c5:19:3c:27:
         39:c6:fb:61:d8:16:da:45:10:5a:c5:2a:84:83:ab:f5:fd:1c:
         07:6f:96:c1:4b:08:25:17:1d:01:2c:cc:59:ae:e8:01:67:16:
         db:47:f1:f3:35:80:a2:ad:bb:98:d6:d6:1a:fd:ea:25:5d:ab:
         81:b7:17:cc:03:45:b8:e9:41:c9:18:87:8b:66:63:3e:07:8a:
         3e:30:31:d4:c2:b8:ec:cf:83:40:f2:22:f0:93:ce:cd:45:3a:
         ba:3f:7b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----