Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/13/3130342e33372e34332e302f32342d3234203d3e20393435.roa
File:                     3130342e33372e34332e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          7i1DiZrLiOSF62+jpGqCrRYHKE6gGqrA+60UfHF3hEM=
Subject key identifier:   A1:52:A7:A4:BD:A3:02:27:4D:2F:D6:1B:55:76:3E:40:07:F8:13:86
Certificate issuer:       /CN=2CA7ECD419E28CD586D408C2CC54157A7A586FB6
Certificate serial:       3E32AFD2958FED4C1616FB6496845DDA0E5DCD94
Authority key identifier: 2C:A7:EC:D4:19:E2:8C:D5:86:D4:08:C2:CC:54:15:7A:7A:58:6F:B6
Authority info access:    rsync://rpki.co/repo/HYSP/11/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.cer
Subject info access:      rsync://rpki.co/repo/August/13/3130342e33372e34332e302f32342d3234203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 09:22:02 +0000
ROA not before:           Sat 08 Apr 2023 09:17:02 +0000
ROA not after:            Sat 06 Apr 2024 09:22:02 +0000
asID:                     945
IP address blocks:        104.37.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:32:af:d2:95:8f:ed:4c:16:16:fb:64:96:84:5d:da:0e:5d:cd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA7ECD419E28CD586D408C2CC54157A7A586FB6
        Validity
            Not Before: Apr  8 09:17:02 2023 GMT
            Not After : Apr  6 09:22:02 2024 GMT
        Subject: CN=A152A7A4BDA302274D2FD61B55763E4007F81386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:68:72:90:bf:74:ec:b6:45:76:e7:00:ed:
                    1d:dd:12:c1:95:26:58:68:bc:12:63:35:99:24:3b:
                    35:ef:79:05:38:4f:65:8b:a8:f6:4d:a5:86:ac:de:
                    18:0b:c0:80:26:94:fe:1b:01:97:d9:f6:64:61:b6:
                    5d:ce:61:c5:d3:9a:72:73:d1:7a:d5:3b:6b:01:bc:
                    6d:5c:ed:96:ef:76:29:50:b5:a1:e6:d6:8a:8b:f7:
                    6e:88:10:6d:e6:21:98:41:fc:fc:fc:04:18:d4:c0:
                    63:19:af:b9:70:0e:f4:49:45:c8:ea:9d:4b:48:65:
                    eb:f3:b8:8e:d7:b1:09:cf:7f:1e:80:88:5f:a4:0e:
                    e7:4c:ad:da:bc:7a:42:b7:49:a7:ef:50:dc:f5:68:
                    64:81:11:ed:c3:44:25:2d:5b:0d:26:fe:c3:64:a0:
                    92:61:e1:b6:3b:a2:f7:f0:2e:b9:0e:47:a8:5d:d9:
                    5b:b2:12:1c:e6:1a:61:70:93:9c:e6:3f:88:32:5e:
                    8f:3e:9e:d5:d8:61:31:a0:83:7d:65:f7:89:e1:fb:
                    16:0d:7e:e2:87:02:27:7c:14:dd:eb:d5:ce:89:79:
                    85:e1:6c:89:61:7a:2a:d9:c6:95:82:5b:37:ab:52:
                    89:09:11:b2:c2:88:43:17:70:ff:32:ef:b1:46:1c:
                    46:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:52:A7:A4:BD:A3:02:27:4D:2F:D6:1B:55:76:3E:40:07:F8:13:86
            X509v3 Authority Key Identifier:
                keyid:2C:A7:EC:D4:19:E2:8C:D5:86:D4:08:C2:CC:54:15:7A:7A:58:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/13/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/11/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/13/3130342e33372e34332e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:bf:e1:68:33:87:1a:ad:73:05:72:f2:ae:bd:02:34:69:34:
         94:7f:2a:d5:39:63:d4:7e:96:72:4a:b0:fa:2c:97:60:4b:c2:
         db:55:69:4d:00:34:78:51:90:d7:e5:92:41:83:63:c4:7b:b1:
         e2:93:c7:83:13:92:91:e7:ed:ca:de:13:52:5a:82:ae:74:c2:
         79:1b:6d:45:0a:5d:eb:18:05:ad:7d:6d:bc:1a:ad:b3:2e:f2:
         2a:5d:4c:30:31:6f:ab:01:89:07:10:c7:c8:6a:29:b4:d7:a9:
         64:bb:c3:70:70:e1:b5:e7:f8:24:9a:a9:98:bb:85:4c:fd:32:
         43:7a:f3:d6:dc:3b:dc:6c:b0:9a:56:47:48:cc:f8:a7:37:bc:
         65:6b:f6:d3:9e:ea:6b:d5:2d:db:3d:68:55:38:d5:7a:2c:ab:
         d7:87:64:6c:ea:92:8e:d5:65:48:fe:2d:03:94:95:12:09:ca:
         ab:e1:6c:f0:9a:a3:7d:4a:74:08:e9:2a:6f:ea:57:f3:d6:dc:
         2b:dd:0a:5a:a4:fd:e1:0a:d8:ac:b7:fe:c7:14:d7:d6:ea:4e:
         0d:f1:88:0e:4f:83:39:6c:6f:87:ee:27:16:de:e7:ae:62:5c:
         78:d5:86:5d:82:41:d6:71:5c:85:ec:11:fa:a0:e3:69:54:60:
         8d:21:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----