Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS198954.roa
File:                     AS198954.roa (raw, json)
Hash identifier:          X7uu4vnfNHGCBGOy4lulR6d2+2A8ufMtqG76rbmGLto=
Subject key identifier:   69:4A:7B:DC:61:D6:05:83:BA:30:B0:73:2E:79:2D:E3:24:4E:2C:76
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       0409713B55546ED0EF4728D0B89AF651E4295053
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS198954.roa
Signing time:             Sat 08 Apr 2023 09:22:19 +0000
ROA not before:           Sat 08 Apr 2023 09:17:19 +0000
ROA not after:            Sat 06 Apr 2024 09:22:19 +0000
asID:                     198954
IP address blocks:        2a12:dd47:5e20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:71:3b:55:54:6e:d0:ef:47:28:d0:b8:9a:f6:51:e4:29:50:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:19 2023 GMT
            Not After : Apr  6 09:22:19 2024 GMT
        Subject: CN=694A7BDC61D60583BA30B0732E792DE3244E2C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:c4:6d:e8:f3:8e:70:17:f9:4c:3c:4e:41:
                    de:04:38:66:50:56:d5:58:79:2b:6f:43:ab:98:30:
                    fa:30:5a:6b:3d:a0:b4:a4:51:95:99:7e:29:08:4a:
                    c1:cf:d6:30:e6:ea:e0:3a:d1:1a:d6:b4:aa:ef:a9:
                    58:1d:93:45:91:cb:43:cd:53:fb:a4:e9:2e:8b:3d:
                    03:12:09:7d:13:5f:d0:3b:50:3b:c8:f0:9c:03:20:
                    7c:37:09:ac:05:a3:5e:7e:91:ef:ac:01:c9:90:d8:
                    4a:2f:8d:32:a1:54:ac:2b:7e:ca:a0:4e:5d:54:54:
                    b8:d0:3d:c0:54:28:0c:6c:08:1c:d8:2f:2b:3b:01:
                    20:02:50:22:f8:ba:37:18:26:15:92:13:48:46:ec:
                    c0:c7:59:61:68:e9:2c:46:b9:3a:79:75:23:21:f5:
                    95:08:e7:68:36:9b:e8:3c:75:2f:43:c5:60:b0:80:
                    59:8a:c9:9f:bf:80:1c:7d:61:80:8d:a9:2f:ed:c7:
                    05:aa:78:2d:8e:67:48:e4:4a:6a:b4:6b:e5:af:9c:
                    29:a8:d8:12:0b:0f:af:d9:16:df:82:5a:b0:b7:c9:
                    a0:44:48:71:99:ab:c8:f8:57:15:fc:1c:4f:bd:63:
                    ad:e1:f8:88:e3:51:26:57:fb:48:8e:6a:33:71:c5:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4A:7B:DC:61:D6:05:83:BA:30:B0:73:2E:79:2D:E3:24:4E:2C:76
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS198954.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:1c:8d:70:22:e2:99:78:35:14:a6:32:e1:21:ea:c9:30:d6:
         0e:69:65:1d:f9:6f:52:af:eb:45:87:58:90:58:a1:1a:e1:02:
         6f:b7:67:a3:41:26:03:a0:94:b2:23:6f:f2:80:08:61:59:6e:
         4e:8f:10:8f:3d:ab:69:20:1a:f6:cd:f8:08:29:e2:04:3b:16:
         ad:f8:2e:11:bd:57:0e:92:1a:1f:e4:fe:2e:ce:c6:7c:87:b5:
         6b:65:39:3d:4c:80:4c:d7:90:13:3a:f9:fd:d3:c0:c9:cd:f0:
         ae:cf:3a:4d:ac:9b:08:93:86:d0:fc:13:e2:c0:bd:3c:71:4d:
         e2:97:57:be:6e:e1:11:de:58:68:97:fa:aa:4a:52:da:60:63:
         8c:88:e3:e5:a2:f4:11:f7:1b:cd:bf:c3:aa:68:b1:39:17:84:
         81:30:d1:22:26:7c:92:cc:ce:b0:db:fb:cb:69:a7:9d:3b:24:
         75:48:7f:dc:65:cf:03:21:31:58:ab:ad:bd:f8:72:2d:5f:30:
         4e:da:6d:7c:9d:d3:ed:d1:28:4c:dc:40:70:c6:95:84:a7:0d:
         98:ac:1f:54:d3:e6:c3:a4:fb:20:a8:c0:dd:e6:0b:3c:83:33:
         5f:68:f2:3d:ad:c1:86:50:65:4f:f7:03:c9:37:58:25:14:ab:
         cb:ca:a2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----