Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pong/1/326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa
File:                     326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa (raw, json)
Hash identifier:          yqXD16zP+ILV7RRzPaR9HcFDrp1fXef4xN1hdOpIj/A=
Subject key identifier:   D3:E4:A1:AC:C3:3E:68:3D:EC:54:A7:DF:7F:37:34:3B:52:02:99:3E
Certificate issuer:       /CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
Certificate serial:       787B1469B843002B15312859EC69F20086EBC0A1
Authority key identifier: 51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
Authority info access:    rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
Subject info access:      rsync://rpki.co/repo/Pong/1/326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa
Signing time:             Thu 14 Mar 2024 10:14:07 +0000
ROA not before:           Thu 14 Mar 2024 10:09:07 +0000
ROA not after:            Thu 13 Mar 2025 10:14:07 +0000
asID:                     200160
IP address blocks:        2a12:dd47:5210::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7b:14:69:b8:43:00:2b:15:31:28:59:ec:69:f2:00:86:eb:c0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
        Validity
            Not Before: Mar 14 10:09:07 2024 GMT
            Not After : Mar 13 10:14:07 2025 GMT
        Subject: CN=D3E4A1ACC33E683DEC54A7DF7F37343B5202993E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:71:c8:c6:60:f6:d6:00:97:df:7d:01:8c:
                    6d:19:88:a5:33:0a:79:15:35:92:d7:27:7a:3d:d3:
                    6d:68:f5:24:03:0b:af:f8:32:c5:84:5e:9e:9a:30:
                    da:87:20:e4:c9:26:e3:87:08:75:e8:0c:c7:7b:d6:
                    ba:46:53:e0:07:2f:e3:00:d6:f7:54:94:32:59:88:
                    56:b4:70:56:ce:0b:51:1c:c6:f5:4f:d5:1e:36:c5:
                    26:2b:39:30:86:ff:6d:8e:16:4c:de:a5:4a:5f:a4:
                    95:da:3d:4b:88:4b:e7:fb:47:3b:5b:7c:94:44:9f:
                    69:ec:a8:44:ab:5d:69:a5:dd:9d:74:15:cd:e8:f4:
                    ec:db:19:c7:87:0c:41:7e:29:11:0b:e9:0c:01:e6:
                    d4:94:46:7a:21:e4:a7:46:e6:0b:9c:57:d5:79:0d:
                    18:47:9b:c6:85:85:da:1c:97:78:bd:31:86:9e:a6:
                    6e:1c:d5:88:52:21:aa:58:26:01:2a:ed:91:f9:c1:
                    ed:31:71:a2:7a:e7:78:aa:c0:23:fc:64:b1:45:b8:
                    b0:30:b8:9f:cd:a0:63:e9:3a:97:98:0f:53:a8:5c:
                    41:5c:93:2f:76:d3:bf:d3:69:aa:14:85:80:1b:d3:
                    53:38:33:6f:ed:57:06:99:60:a5:b7:0a:20:35:d1:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E4:A1:AC:C3:3E:68:3D:EC:54:A7:DF:7F:37:34:3B:52:02:99:3E
            X509v3 Authority Key Identifier:
                keyid:51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pong/1/326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5210::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:84:20:9b:0c:5b:7f:64:bc:59:9c:39:38:71:b9:78:2e:3d:
         65:3e:82:84:b1:ba:56:59:0f:86:f9:da:e5:25:2a:4e:08:54:
         bd:e7:17:12:cb:66:ed:97:e1:d5:fd:1a:dd:bf:1e:d2:19:2c:
         83:75:e8:e7:a7:6b:e2:01:78:f5:83:c4:60:2a:92:03:48:45:
         98:65:8b:38:4c:66:1c:02:e1:50:ea:c7:20:6e:25:8f:88:77:
         fe:f8:dd:b8:76:be:7f:a4:1c:5a:95:91:26:f8:de:b0:8d:2a:
         c5:06:f3:b8:74:c1:1e:50:16:98:9f:da:c0:83:d4:ae:6d:4a:
         c6:7b:ca:eb:5c:fa:58:dd:55:00:c9:65:08:18:a6:b9:45:da:
         6c:04:6e:dd:ba:55:6c:97:b1:f4:9e:27:ed:4f:c8:42:3d:8a:
         18:04:11:12:4a:0b:6f:01:45:1b:0a:f8:ca:82:53:f1:87:26:
         8f:7b:76:4b:87:66:b8:8a:49:08:92:9f:f7:02:45:c5:22:36:
         30:ea:22:90:7b:e1:c6:33:57:43:79:79:00:05:4c:c3:b2:e4:
         2b:bd:12:fc:65:26:d1:40:02:bb:3f:61:fc:59:ff:e4:7c:f4:
         f1:08:a5:0e:3b:7e:a7:4a:cb:d1:ec:3d:40:a6:b0:90:08:23:
         bd:76:1f:85
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUeHsUabhDACsVMShZ7GnyAIbrwKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFFOEJGMDRGODcyMjA0RDdCQUY5NjI2RjE2Q0RCMDM5
RTNBMjQ0MzAeFw0yNDAzMTQxMDA5MDdaFw0yNTAzMTMxMDE0MDdaMDMxMTAvBgNV
BAMTKEQzRTRBMUFDQzMzRTY4M0RFQzU0QTdERjdGMzczNDNCNTIwMjk5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxh3HIxmD21gCX330BjG0ZiKUz
CnkVNZLXJ3o9021o9SQDC6/4MsWEXp6aMNqHIOTJJuOHCHXoDMd71rpGU+AHL+MA
1vdUlDJZiFa0cFbOC1EcxvVP1R42xSYrOTCG/22OFkzepUpfpJXaPUuIS+f7Rztb
fJREn2nsqESrXWml3Z10Fc3o9OzbGceHDEF+KREL6QwB5tSURnoh5KdG5gucV9V5
DRhHm8aFhdocl3i9MYaepm4c1YhSIapYJgEq7ZH5we0xcaJ653iqwCP8ZLFFuLAw
uJ/NoGPpOpeYD1OoXEFcky9207/TaaoUhYAb01M4M2/tVwaZYKW3CiA10Ux5AgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQU0+ShrMM+aD3sVKfffzc0O1ICmT4wHwYDVR0j
BBgwFoAUUei/BPhyIE17r5Ym8WzbA546JEMwDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL1BvbmcvMS81MUU4QkYw
NEY4NzIyMDREN0JBRjk2MjZGMTZDREIwMzlFM0EyNDQzLmNybDBlBggrBgEFBQcB
AQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEv
NTFFOEJGMDRGODcyMjA0RDdCQUY5NjI2RjE2Q0RCMDM5RTNBMjQ0My5jZXIwfAYI
KwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kuY28vcmVwby9Q
b25nLzEvMzI2MTMxMzIzYTY0NjQzNDM3M2EzNTMyMzEzMDNhM2EyZjM0MzQyZDM0
MzQyMDNkM2UyMDMyMzAzMDMxMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UdSEDANBgkqhkiG
9w0BAQsFAAOCAQEAEYQgmwxbf2S8WZw5OHG5eC49ZT6ChLG6VlkPhvna5SUqTghU
vecXEstm7Zfh1f0a3b8e0hksg3Xo56dr4gF49YPEYCqSA0hFmGWLOExmHALhUOrH
IG4lj4h3/vjduHa+f6QcWpWRJvjesI0qxQbzuHTBHlAWmJ/awIPUrm1KxnvK61z6
WN1VAMllCBimuUXabARu3bpVbJex9J4n7U/IQj2KGAQREkoLbwFFGwr4yoJT8Ycm
j3t2S4dmuIpJCJKf9wJFxSI2MOoikHvhxjNXQ3l5AAVMw7LkK70S/GUm0UACuz9h
/Fn/5Hz08QilDjt+p0rL0ew9QKawkAgjvXYfhQ==
-----END CERTIFICATE-----