Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS41732.roa
File:                     AS41732.roa (raw, json)
Hash identifier:          zWeumGxb6iYG4xawHIsSXVRUrRonrqMfZLVZXXe5lIo=
Subject key identifier:   6E:C5:3B:D2:F6:5D:9E:9D:54:E3:1A:71:6B:D3:77:A0:07:71:CF:2A
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       5571885FBC7CFA3274AC6F21687AC049BB5ACC8E
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS41732.roa
Signing time:             Sat 08 Apr 2023 09:22:27 +0000
ROA not before:           Sat 08 Apr 2023 09:17:27 +0000
ROA not after:            Sat 06 Apr 2024 09:22:27 +0000
asID:                     41732
IP address blocks:        2a12:dd47:5000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:71:88:5f:bc:7c:fa:32:74:ac:6f:21:68:7a:c0:49:bb:5a:cc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:27 2023 GMT
            Not After : Apr  6 09:22:27 2024 GMT
        Subject: CN=6EC53BD2F65D9E9D54E31A716BD377A00771CF2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:56:d7:5a:dc:19:22:78:51:7e:85:d6:22:
                    a2:4e:30:2c:c4:e5:d6:21:c6:73:1a:22:ed:a9:57:
                    39:5a:51:96:33:32:61:ce:f0:2a:69:49:68:62:54:
                    37:57:40:46:c8:36:01:72:8b:17:f2:0a:7d:28:ad:
                    4d:94:03:ad:df:43:e0:2c:dc:14:04:05:ec:30:37:
                    6a:87:91:52:6f:f3:d6:bc:6f:78:5a:08:27:22:17:
                    af:5e:a7:fd:c2:1e:b2:41:7c:a1:db:83:cc:75:5c:
                    0d:ef:bb:dd:3d:9a:74:5f:34:0c:a7:0e:27:4a:99:
                    20:22:1e:6c:72:c4:a2:9d:f3:ea:33:07:1b:5e:e7:
                    d3:65:83:5c:bb:47:d3:63:51:6d:ff:85:92:9d:9a:
                    62:35:cd:65:5c:94:93:4d:3b:9b:2e:69:33:7d:c6:
                    56:b3:19:a5:1a:03:1d:cb:7e:e7:a4:1a:aa:8d:a9:
                    db:75:7c:a5:81:76:86:24:f6:5b:7a:f0:0c:a1:29:
                    ee:2b:ee:25:75:0f:18:05:3b:21:e0:09:94:bc:23:
                    2d:e8:5e:40:3d:59:50:fd:0d:0b:78:4a:88:15:07:
                    65:86:9c:27:3b:c7:3e:93:a0:ee:95:67:2c:c9:f5:
                    aa:f2:a3:b2:24:42:16:d7:7d:bc:70:37:e3:57:01:
                    c2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C5:3B:D2:F6:5D:9E:9D:54:E3:1A:71:6B:D3:77:A0:07:71:CF:2A
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS41732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:6b:9f:af:dd:39:02:bd:3d:c7:8c:06:20:83:08:b5:01:8c:
         fe:5d:71:dd:56:aa:b5:3b:01:c4:d6:93:51:78:69:cf:5f:fd:
         56:47:23:e3:a9:ef:46:63:43:0d:65:75:ec:28:f4:fc:87:26:
         04:09:f2:53:0c:5c:a9:11:0c:1f:f6:e4:07:1c:6b:a0:c1:16:
         65:ef:65:6c:d7:aa:f4:86:14:7a:46:51:b0:2e:81:5d:5f:62:
         19:60:49:92:7b:b4:91:fd:ac:23:f4:21:54:49:af:ee:a2:d7:
         31:41:5f:ee:5f:ed:fb:9d:36:c8:68:ff:a2:ec:d0:25:75:11:
         12:8c:1b:c2:41:07:2c:13:d3:8a:dc:36:7e:b7:46:6a:65:90:
         84:c4:b1:b5:ee:57:59:58:14:09:b5:f8:06:84:b7:70:25:ec:
         c1:92:cb:5b:08:15:0e:1d:2a:44:13:54:40:c1:fa:63:bd:cd:
         d8:61:59:44:5c:55:fa:8a:b9:97:7a:83:a6:84:9b:26:21:f7:
         23:d3:95:00:33:bf:79:59:38:75:f5:37:c2:cb:77:3e:8e:2c:
         26:ad:23:92:b0:5c:36:52:e2:2c:aa:6d:40:7f:24:26:29:3b:
         34:61:4e:78:ce:38:b8:80:d4:fa:81:2b:68:6f:e0:65:83:b4:
         70:fa:f2:fb
-----BEGIN CERTIFICATE-----
MIIEkTCCA3mgAwIBAgIUVXGIX7x8+jJ0rG8haHrASbtazI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjdaFw0yNDA0MDYwOTIyMjdaMDMxMTAvBgNV
BAMTKDZFQzUzQkQyRjY1RDlFOUQ1NEUzMUE3MTZCRDM3N0EwMDc3MUNGMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqn1bXWtwZInhRfoXWIqJOMCzE
5dYhxnMaIu2pVzlaUZYzMmHO8CppSWhiVDdXQEbINgFyixfyCn0orU2UA63fQ+As
3BQEBewwN2qHkVJv89a8b3haCCciF69ep/3CHrJBfKHbg8x1XA3vu909mnRfNAyn
DidKmSAiHmxyxKKd8+ozBxte59Nlg1y7R9NjUW3/hZKdmmI1zWVclJNNO5suaTN9
xlazGaUaAx3LfuekGqqNqdt1fKWBdoYk9lt68AyhKe4r7iV1DxgFOyHgCZS8Iy3o
XkA9WVD9DQt4SogVB2WGnCc7xz6ToO6VZyzJ9aryo7IkQhbXfbxwN+NXAcJNAgMB
AAGjggGbMIIBlzAdBgNVHQ4EFgQUbsU70vZdnp1U4xpxa9N3oAdxzyowHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEUG
CCsGAQUFBwELBDkwNzA1BggrBgEFBQcwC4YpcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVM0MTczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UdQMA0GCSqGSIb3DQEBCwUA
A4IBAQCwa5+v3TkCvT3HjAYggwi1AYz+XXHdVqq1OwHE1pNReGnPX/1WRyPjqe9G
Y0MNZXXsKPT8hyYECfJTDFypEQwf9uQHHGugwRZl72Vs16r0hhR6RlGwLoFdX2IZ
YEmSe7SR/awj9CFUSa/uotcxQV/uX+37nTbIaP+i7NAldRESjBvCQQcsE9OK3DZ+
t0ZqZZCExLG17ldZWBQJtfgGhLdwJezBkstbCBUOHSpEE1RAwfpjvc3YYVlEXFX6
irmXeoOmhJsmIfcj05UAM795WTh19TfCy3c+jiwmrSOSsFw2UuIsqm1AfyQmKTs0
YU54zji4gNT6gStob+Blg7Rw+vL7
-----END CERTIFICATE-----