Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS134478.roa
File:                     AS134478.roa (raw, json)
Hash identifier:          LMVH60kjjUycvSqAisVNluUw8gznZ/xImt2QruFO1Is=
Subject key identifier:   B3:C4:11:38:59:59:C9:95:71:81:19:84:B6:7C:58:87:27:90:F5:90
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       654843F598D85F0444EEC89679B284B6D954ACFE
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS134478.roa
Signing time:             Sat 08 Apr 2023 09:22:25 +0000
ROA not before:           Sat 08 Apr 2023 09:17:25 +0000
ROA not after:            Sat 06 Apr 2024 09:22:25 +0000
asID:                     134478
IP address blocks:        2a12:dd47:80d0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:48:43:f5:98:d8:5f:04:44:ee:c8:96:79:b2:84:b6:d9:54:ac:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:25 2023 GMT
            Not After : Apr  6 09:22:25 2024 GMT
        Subject: CN=B3C411385959C99571811984B67C58872790F590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:e6:1d:c5:37:31:9d:f4:a8:fd:89:4a:23:
                    53:12:b0:82:55:27:ba:25:8a:30:88:4f:26:ab:4a:
                    a4:ad:9e:af:2a:a1:c8:ab:da:23:bb:96:1e:70:76:
                    bd:2e:ff:40:05:5d:91:cd:d0:b7:be:43:02:05:d5:
                    a6:37:13:ac:27:09:3d:d2:df:31:a3:22:7a:41:d7:
                    4e:01:16:b2:00:84:85:77:26:eb:06:1c:5a:cc:e9:
                    0d:07:94:09:f8:93:1a:9e:22:07:c2:5a:81:60:1f:
                    e6:c2:b6:d6:2b:e8:0c:db:a4:7d:f1:ca:5c:81:ef:
                    38:09:88:b3:03:06:ce:93:0d:4a:ce:79:25:43:7f:
                    d8:8b:c2:54:e7:79:81:03:af:db:f7:74:ab:78:5d:
                    97:ac:f2:09:ad:6e:d8:8a:f8:16:bb:17:a7:0c:9a:
                    09:e2:aa:58:52:a1:a1:e2:c3:b3:ab:5f:aa:3f:79:
                    99:11:c6:a5:00:39:32:6e:4d:28:0f:b7:c2:10:6b:
                    3e:e4:f7:2a:d0:8e:ca:4e:2d:00:64:7d:c1:57:ba:
                    17:8d:75:ed:5d:10:3e:75:31:ea:e5:6e:43:bc:16:
                    8b:5a:23:5e:19:c8:3b:21:85:b4:1a:c9:70:a8:59:
                    bf:5c:4a:1d:fa:b2:cf:1e:f7:52:fd:c6:3d:f2:d9:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C4:11:38:59:59:C9:95:71:81:19:84:B6:7C:58:87:27:90:F5:90
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS134478.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         64:9a:e9:14:aa:20:07:c5:bd:c2:92:b4:4c:55:3a:59:2b:a0:
         8c:6e:28:3b:60:f1:2f:2e:32:1e:02:09:e4:21:eb:c9:e7:b4:
         a0:2a:91:a9:fe:a1:ac:d1:bb:20:5f:6e:cb:bb:a0:ec:43:86:
         a1:6d:7e:85:94:93:39:6b:75:f8:66:57:a4:5f:7d:31:e0:fc:
         8b:04:cb:c3:5c:d8:f7:1b:2e:21:19:b7:c1:b1:f1:22:ca:b2:
         83:f1:09:3b:c1:87:93:60:ce:1f:bb:2d:2b:85:e9:4c:05:83:
         59:da:92:13:e2:82:d0:0b:1a:6c:ec:24:22:27:15:d2:a8:be:
         b3:75:33:b4:5d:b4:8b:49:39:c9:65:b9:87:76:12:3b:a4:14:
         f5:43:be:66:4e:45:15:3f:51:19:01:d6:68:48:24:c4:11:64:
         dd:69:a8:9f:96:3b:06:c0:40:34:2c:67:55:80:de:17:8e:9e:
         1b:fa:e2:6f:41:b2:35:82:39:d2:f7:88:69:c8:c0:7e:c5:6b:
         94:a2:ca:10:9d:69:f4:dc:38:cb:fd:d8:05:20:f0:17:ed:f5:
         b9:c1:4f:4e:a5:c3:ee:ff:9b:94:a1:46:fb:ba:d2:54:b4:bc:
         66:83:66:ae:ca:9a:f7:a3:88:0d:5f:c4:eb:ea:d8:67:96:3e:
         b0:1e:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----