Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS142598.roa
File:                     AS142598.roa (raw, json)
Hash identifier:          tRWVnamD0NBdUCSP3r49C1Uf93d9B/Y0sWGNdfRBXa4=
Subject key identifier:   88:44:9A:F7:AA:5A:48:12:3F:D2:D4:42:78:5B:EB:01:C7:E1:5C:1F
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6AEA003A7D120C38EBAB88F4A0BC9251D578CDFC
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS142598.roa
Signing time:             Sat 08 Apr 2023 09:22:19 +0000
ROA not before:           Sat 08 Apr 2023 09:17:19 +0000
ROA not after:            Sat 06 Apr 2024 09:22:19 +0000
asID:                     142598
IP address blocks:        2a12:dd46:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ea:00:3a:7d:12:0c:38:eb:ab:88:f4:a0:bc:92:51:d5:78:cd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:19 2023 GMT
            Not After : Apr  6 09:22:19 2024 GMT
        Subject: CN=88449AF7AA5A48123FD2D442785BEB01C7E15C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:30:1f:bb:af:ad:55:56:0b:c3:39:b8:0c:
                    95:c9:b8:78:5c:da:70:05:71:86:a5:75:18:1a:ac:
                    82:40:7e:13:c1:ea:19:0c:24:8a:92:18:fe:8a:24:
                    5d:7e:98:77:46:ed:08:48:d0:63:9f:f9:de:ed:e6:
                    28:d1:f9:b1:3c:d2:da:a0:5e:76:b8:0e:15:87:97:
                    b6:15:29:90:c9:ce:70:ac:7b:1d:6e:d0:3e:2c:3f:
                    06:73:a9:23:63:5f:4d:a6:f2:24:9f:7b:08:14:d3:
                    d8:78:f7:35:85:48:4d:c4:34:bb:d5:4c:e3:28:20:
                    6d:64:95:1a:a8:4d:b9:62:fe:e5:f8:4d:32:d2:b1:
                    49:f7:35:65:71:c2:7b:f2:86:f1:d9:70:7b:c4:c5:
                    04:8a:8a:b1:ac:bc:d3:60:f1:14:10:70:ce:eb:b0:
                    85:d4:4d:60:8b:5a:62:d9:f1:71:f0:63:cb:3e:c5:
                    cd:b1:be:0b:64:c3:54:5f:13:5c:98:d7:d5:3f:dc:
                    b6:2c:07:ff:d2:88:0b:ba:6a:06:b7:7a:9b:2a:be:
                    82:c4:3a:73:cc:8e:1d:ae:ff:03:5f:d2:c3:6e:3b:
                    99:3a:9f:34:8a:ba:bf:48:92:0d:a1:1c:c6:49:51:
                    c5:c9:76:f7:52:38:5e:25:37:15:a6:5c:08:e5:96:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:44:9A:F7:AA:5A:48:12:3F:D2:D4:42:78:5B:EB:01:C7:E1:5C:1F
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS142598.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:3e:50:32:c5:64:fd:cc:cc:9d:68:d8:7d:64:74:dc:50:c9:
         e1:e7:d4:c5:19:74:b9:10:8c:82:1c:18:ed:dc:73:df:97:95:
         03:bb:1e:16:b7:78:f9:cf:66:1f:9e:60:da:ef:ab:61:00:4b:
         45:99:e1:29:17:36:93:5d:39:58:82:7b:f7:31:b1:24:7b:34:
         75:01:90:3a:15:a4:b4:28:a1:5b:2a:7f:20:6a:af:1d:3e:e1:
         e7:e6:3b:81:00:dd:08:7d:c8:b4:8c:be:27:71:5d:3f:bd:33:
         2b:47:99:9d:53:c7:1c:31:8d:db:f6:2e:54:a1:2c:4e:01:37:
         c0:3b:b9:8d:2c:64:e1:69:f0:9f:95:70:ba:21:0e:07:7c:9e:
         13:a6:e8:71:02:6a:1c:30:c0:3d:a9:c4:57:64:08:ec:91:a9:
         fd:44:99:a7:d0:cc:65:87:11:e3:d1:bb:ed:ec:6c:dd:69:55:
         5e:de:c8:04:fe:b8:44:b5:b1:92:80:78:eb:c0:32:2d:14:a9:
         13:6c:88:90:e1:9d:10:01:19:45:c5:af:9c:04:45:6d:ef:5c:
         f4:42:5a:79:e9:d2:80:e9:70:28:78:ff:92:99:c3:7f:81:64:
         4a:6f:c0:7b:23:35:f4:db:90:23:8a:41:c3:45:5e:fb:39:cf:
         fc:c2:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----