Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34382d3438203d3e20323131363034.roa
File:                     326131323a646434373a336430303a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier:          4mKce4d1fiCVVxy+Kv86e6D3LsNFVy7R3zkHxJfjHAo=
Subject key identifier:   ED:B1:CD:B6:86:08:00:0A:B5:E0:84:60:9E:AC:B0:66:C2:55:1C:BE
Certificate issuer:       /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial:       7A9FD7E2B7F7FBDD2D7940727DCC70785E48C7A1
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access:    rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access:      rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34382d3438203d3e20323131363034.roa
Signing time:             Mon 17 Apr 2023 21:14:41 +0000
ROA not before:           Mon 17 Apr 2023 21:09:41 +0000
ROA not after:            Mon 15 Apr 2024 21:14:41 +0000
asID:                     211604
IP address blocks:        2a12:dd47:3d00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9f:d7:e2:b7:f7:fb:dd:2d:79:40:72:7d:cc:70:78:5e:48:c7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Validity
            Not Before: Apr 17 21:09:41 2023 GMT
            Not After : Apr 15 21:14:41 2024 GMT
        Subject: CN=EDB1CDB68608000AB5E084609EACB066C2551CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:c4:55:14:26:f1:81:fd:08:4e:d8:d6:41:
                    b6:a2:1e:9f:c3:4e:29:32:73:ca:0a:dd:e6:0c:1b:
                    b0:8a:13:99:3d:6f:5a:23:c4:87:af:5b:d8:e2:c1:
                    d6:a7:aa:5d:d6:07:21:49:cb:d7:39:54:5a:a7:16:
                    33:9f:87:39:b3:f8:5d:8d:30:59:b8:4c:00:ae:4c:
                    a8:d7:11:f8:5e:60:b9:90:bc:68:24:11:2f:64:ba:
                    54:75:a3:0d:79:93:6e:c8:67:6f:66:f8:e0:2d:a0:
                    13:3f:00:5d:b6:28:71:0b:0e:d2:3d:52:b2:38:a0:
                    7d:99:93:88:46:c6:42:64:eb:c4:fe:6a:f1:ba:ae:
                    a0:25:97:d5:74:c9:4a:36:ed:fa:a8:ba:21:cd:a8:
                    dc:de:d6:ba:a4:df:f0:2c:33:dc:30:a8:a2:92:ec:
                    8d:92:a4:5f:f4:18:9f:5f:c9:dd:21:f1:b1:14:28:
                    20:93:dc:03:5a:c9:f8:49:89:67:bf:7f:b8:b0:05:
                    eb:f6:7b:aa:e2:e1:ed:5c:6a:47:f4:6f:75:7f:f9:
                    c6:88:69:7b:ea:fc:3c:eb:b0:37:10:2e:f6:cd:4f:
                    ac:5c:f0:96:06:8c:9f:da:e7:24:e0:e8:9b:0c:e6:
                    13:fa:d5:99:d0:30:b9:8a:0b:52:0c:d5:d4:42:8b:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B1:CD:B6:86:08:00:0A:B5:E0:84:60:9E:AC:B0:66:C2:55:1C:BE
            X509v3 Authority Key Identifier:
                keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34382d3438203d3e20323131363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:83:7f:cc:6f:62:08:e0:57:f2:c8:8b:c7:5d:94:8e:2c:77:
         54:c4:62:1c:89:2b:4f:ce:01:25:4f:1f:6b:75:e4:78:36:38:
         66:2e:6c:0a:13:ed:90:08:0c:a9:76:79:cb:1c:75:3e:d3:80:
         5c:18:bf:c6:a4:88:eb:33:ac:8f:7b:9d:5c:c3:ca:cd:1e:52:
         ff:3f:48:aa:1f:c9:f6:bb:53:70:3b:98:5c:61:5b:6c:4e:7f:
         a1:b0:f3:9e:40:e4:b5:d7:27:4e:98:a4:15:18:13:4d:92:ca:
         74:1d:d2:69:53:cc:cc:d3:7d:a1:b9:e7:4d:5f:7b:15:30:44:
         a1:6e:38:34:ba:9a:aa:4d:96:9c:a7:cb:94:82:8c:07:c1:92:
         d0:cd:c1:b4:04:9c:22:cd:18:d3:4f:cb:89:a2:42:f6:f6:c9:
         28:ae:f5:7b:bd:f8:bc:66:52:2b:1f:70:89:f1:b0:94:12:bd:
         52:9e:72:e9:6e:f1:5f:b4:b8:0d:9c:55:a8:b7:6a:fd:3d:e0:
         3f:6a:9c:2c:18:b2:c4:fc:be:f5:7a:a9:f1:a8:27:ec:77:56:
         1b:3d:e8:fe:93:cb:4e:fc:27:c8:a7:4f:21:8a:c7:bd:07:33:
         44:bd:1a:be:26:d5:b3:23:81:45:1d:13:e7:ef:bb:47:a7:80:
         2f:8b:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----