Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199203.roa
File:                     AS199203.roa (raw, json)
Hash identifier:          IyJcm78fDgvjnY1AzGcFv14qB4XTUzK2tsL+hn/S+Rs=
Subject key identifier:   9A:F3:7B:B3:F3:9B:45:07:11:EE:91:92:67:59:DF:82:26:C4:F2:0B
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1B62DEF7F46951D5A81E1BCAC7EC2FD772A26973
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199203.roa
Signing time:             Sat 08 Apr 2023 09:22:26 +0000
ROA not before:           Sat 08 Apr 2023 09:17:26 +0000
ROA not after:            Sat 06 Apr 2024 09:22:26 +0000
asID:                     199203
IP address blocks:        2a12:dd47:3000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:62:de:f7:f4:69:51:d5:a8:1e:1b:ca:c7:ec:2f:d7:72:a2:69:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:26 2023 GMT
            Not After : Apr  6 09:22:26 2024 GMT
        Subject: CN=9AF37BB3F39B450711EE91926759DF8226C4F20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:30:0b:5d:df:12:dd:ea:d8:ef:dd:fb:7d:
                    f0:1b:3f:88:91:64:7d:93:a6:b3:3f:a6:08:f3:f6:
                    f0:50:65:a3:22:2b:03:22:a0:12:f2:18:cd:97:78:
                    21:38:9f:0c:84:e3:61:07:3c:c1:5e:0f:3a:e4:05:
                    a5:fb:28:09:1f:0a:73:b4:32:7b:36:58:b8:0e:83:
                    b2:d1:ce:16:83:2b:19:0f:36:f6:4b:b3:3e:61:ec:
                    f7:a1:5c:3a:5b:29:a3:23:47:4d:5d:14:16:9d:74:
                    65:c2:f0:5b:e5:69:9e:ee:bb:d7:13:7e:96:d7:88:
                    6c:3e:08:5d:9b:fe:59:f8:5d:e0:1e:f3:76:ba:f5:
                    86:f1:44:55:63:f5:aa:36:c2:27:8e:e0:4c:79:db:
                    26:65:a1:72:de:21:86:8c:91:f0:f9:63:18:8b:97:
                    fd:d9:31:a4:31:2b:47:d0:1f:62:ad:9f:fa:6e:6b:
                    3d:f8:8b:6d:ad:64:77:12:80:54:44:73:31:bc:74:
                    ed:8a:2c:97:b9:4d:a9:a2:50:65:c5:39:78:42:5f:
                    93:61:e9:c8:cd:0f:75:e3:d5:92:d2:17:1e:20:25:
                    f8:1f:e0:0f:53:8a:d0:cd:b9:33:f3:e2:2a:29:65:
                    fe:95:6e:20:db:e4:ea:e5:72:7b:c9:3d:24:9e:e2:
                    c9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F3:7B:B3:F3:9B:45:07:11:EE:91:92:67:59:DF:82:26:C4:F2:0B
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199203.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:56:aa:e2:c8:dd:0d:b6:aa:2f:1d:05:37:61:90:8f:07:c0:
         af:17:12:ab:5b:5c:c5:bc:36:29:69:05:af:71:9f:99:d5:59:
         d6:6f:dd:5a:0f:95:35:b0:39:a8:a7:8f:36:ba:48:7d:10:f9:
         6d:4e:ee:5c:ca:b7:74:9b:2c:6e:d9:89:e7:82:d7:b0:ad:d7:
         67:3d:f4:ee:ed:9c:27:90:60:e8:cd:dd:41:93:ff:1c:69:57:
         8f:f6:76:89:a3:ca:6c:a1:b2:f5:7d:b4:7a:82:5f:af:92:3d:
         3a:dd:28:4b:47:a8:47:3a:ec:71:ed:24:da:a0:8e:a5:40:3f:
         ed:28:84:71:4e:ef:36:c0:c9:49:ab:6f:49:8d:5c:dc:74:9b:
         e4:50:e0:72:98:7a:29:79:a1:be:a1:7a:4c:76:0f:57:d4:07:
         92:ba:0a:a5:63:51:ae:0f:b4:5c:a4:5b:90:3c:6e:f6:78:ed:
         83:b0:ab:db:99:8d:de:52:b6:c0:f2:04:df:ed:fd:14:37:c7:
         34:f1:10:59:91:de:26:00:90:eb:f6:6b:49:c8:92:10:e6:66:
         a6:b8:e9:d9:a5:c3:86:d2:84:fe:c3:a5:ad:ed:7c:0c:97:53:
         d6:1e:65:b9:0f:e0:5b:5c:3e:5e:39:1e:cd:fd:7c:8b:86:6b:
         32:f8:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----