Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Simple/1/326131323a646434363a316666663a3a2f34382d3438203d3e20313939323033.roa
File:                     326131323a646434363a316666663a3a2f34382d3438203d3e20313939323033.roa (raw, json)
Hash identifier:          pt5SRwa4PkVcvU2eoTtkDqYnKLiWoThHLn5lNyt/eR0=
Subject key identifier:   3F:68:30:8D:01:44:C2:E1:CF:8E:08:97:C5:A8:4A:B3:03:56:1C:74
Certificate issuer:       /CN=40C513034911811188EE6887BB01091E1FE7EE0D
Certificate serial:       59FE4CD3828BC572A251922510A213ED8BB7D8C7
Authority key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority info access:    rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
Subject info access:      rsync://rpki.co/repo/Simple/1/326131323a646434363a316666663a3a2f34382d3438203d3e20313939323033.roa
Signing time:             Tue 30 Apr 2024 04:02:25 +0000
ROA not before:           Tue 30 Apr 2024 03:57:25 +0000
ROA not after:            Tue 29 Apr 2025 04:02:25 +0000
asID:                     199203
IP address blocks:        2a12:dd46:1fff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fe:4c:d3:82:8b:c5:72:a2:51:92:25:10:a2:13:ed:8b:b7:d8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C513034911811188EE6887BB01091E1FE7EE0D
        Validity
            Not Before: Apr 30 03:57:25 2024 GMT
            Not After : Apr 29 04:02:25 2025 GMT
        Subject: CN=3F68308D0144C2E1CF8E0897C5A84AB303561C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:bb:00:85:9f:8b:0b:ae:d3:63:24:b4:55:
                    e8:63:dd:3c:98:2a:a0:e6:45:9e:56:e6:38:ce:d3:
                    8e:0c:10:ed:1d:19:2c:11:ba:8d:76:0b:3f:e2:ff:
                    6b:da:bf:3d:19:76:c2:44:26:42:0e:19:25:b2:60:
                    68:a2:27:e2:a9:96:ae:bd:58:bd:91:57:1f:3b:74:
                    13:ad:38:49:be:93:41:50:fc:78:db:a7:a0:47:9d:
                    dc:9c:cd:5b:11:2a:28:a3:d9:e6:f3:ff:93:bf:e2:
                    40:61:4f:53:60:03:d5:ee:5e:85:83:8c:f1:4c:93:
                    cc:a8:ee:c6:93:9b:8f:fe:90:57:e3:70:e4:1d:94:
                    e6:b3:e2:dc:bd:b7:f1:5d:8b:0c:95:8d:86:e5:0c:
                    81:a7:20:7a:08:62:bc:b9:86:fd:12:3b:87:75:cf:
                    18:41:8d:69:e8:aa:a5:a8:b6:0c:e5:e1:f0:b2:1b:
                    b2:f3:09:15:88:21:76:0f:b5:10:70:67:9f:54:7b:
                    99:f0:ea:1b:11:c2:32:f7:77:bd:60:4a:dc:98:92:
                    4b:96:0c:2f:77:e6:2a:06:3c:c5:e3:e6:cb:c2:0e:
                    67:1d:57:eb:65:63:3d:e1:87:a5:46:dd:c1:cb:f0:
                    67:60:73:55:5b:99:8f:a6:d7:f1:09:0b:b6:d5:87:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:68:30:8D:01:44:C2:E1:CF:8E:08:97:C5:A8:4A:B3:03:56:1C:74
            X509v3 Authority Key Identifier:
                keyid:40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Simple/1/326131323a646434363a316666663a3a2f34382d3438203d3e20313939323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:1fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:1d:e2:98:ed:19:25:5b:5e:9e:04:bf:a0:13:2d:cd:54:40:
         a5:99:01:b3:e7:85:2e:51:66:09:98:ca:a4:6e:20:87:b9:3e:
         d4:46:c5:08:6b:66:8b:e7:49:ba:40:9b:8b:b8:8c:30:92:3b:
         a6:5b:da:42:70:d0:92:5b:c9:01:f6:8b:fe:64:39:24:1e:c9:
         78:db:19:86:08:1e:f9:12:90:9f:0c:55:3e:3b:de:5b:21:cd:
         9a:99:40:b2:c3:ca:6a:e6:e6:7b:26:2c:65:38:71:bb:93:d1:
         02:e9:43:88:61:4f:60:ff:18:ff:d3:0f:8b:b9:51:54:69:43:
         af:2a:e5:96:b8:62:fc:57:d1:02:16:04:e6:31:83:62:91:a9:
         4b:19:63:f8:80:95:98:2d:66:86:f1:2d:76:39:ab:6f:98:a9:
         c4:5e:fe:5e:8e:d8:f3:00:08:ac:d7:c7:b1:ee:3b:0e:ed:b7:
         cc:c2:b3:a5:0b:ed:cd:1a:b6:50:9b:b8:de:c9:89:12:74:73:
         26:36:df:0a:7b:c1:24:e2:d0:84:6e:b4:27:02:54:6b:ab:f9:
         e6:c9:56:c6:3a:20:ad:db:94:a4:54:ee:e5:da:8b:66:68:ff:
         46:41:81:b4:1c:85:f1:0f:98:32:d4:70:5e:1a:19:5b:bf:ea:
         a9:42:01:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----