Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199304.roa
File:                     AS199304.roa (raw, json)
Hash identifier:          H0EPuE5I/dw7zsAJCJ1vRQsWOBOs4eNgRF8k9JzgBvo=
Subject key identifier:   BF:F0:B7:DB:C6:15:62:6A:F5:FB:39:BA:14:3C:96:96:10:3E:8D:CF
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       25999C4AF95C6C6E85E1D565C7746761FFD235BF
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199304.roa
Signing time:             Sat 08 Apr 2023 09:22:27 +0000
ROA not before:           Sat 08 Apr 2023 09:17:27 +0000
ROA not after:            Sat 06 Apr 2024 09:22:27 +0000
asID:                     199304
IP address blocks:        2a12:dd47:df10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:99:9c:4a:f9:5c:6c:6e:85:e1:d5:65:c7:74:67:61:ff:d2:35:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:27 2023 GMT
            Not After : Apr  6 09:22:27 2024 GMT
        Subject: CN=BFF0B7DBC615626AF5FB39BA143C9696103E8DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:48:08:4f:1b:7a:38:28:fa:bb:02:8a:b2:
                    4d:cb:3d:64:0b:a5:d0:47:ea:11:ed:4f:d3:29:ed:
                    a4:75:e7:20:f4:11:cb:5c:b2:50:b6:35:38:b5:5b:
                    91:b9:01:05:16:b6:16:d3:90:3a:1a:8a:93:0f:33:
                    7d:0c:cb:f4:fe:37:6e:38:bf:0b:49:7b:a5:a6:5e:
                    6b:b7:5a:65:16:84:3e:04:aa:87:7c:fe:cc:10:bd:
                    33:b2:c8:1f:8b:84:96:d5:fa:ed:69:00:7e:de:7f:
                    43:15:07:d8:53:4e:59:38:82:97:4f:12:8b:a0:4e:
                    fa:f3:9a:26:2c:1c:64:b3:24:2d:c6:23:8c:34:77:
                    72:a7:c5:77:4c:ba:8f:a2:00:b7:07:b2:f1:34:3c:
                    8f:3e:d6:16:03:4c:da:4e:19:98:86:df:dc:12:7c:
                    1e:1b:94:e5:b6:20:4c:67:0f:dd:ed:fe:a7:f9:5a:
                    a9:8d:22:fd:ef:4c:e9:76:e8:0e:00:8c:e4:8a:0e:
                    88:94:29:b5:d9:14:14:a7:ab:9d:82:a9:c2:e3:1a:
                    c7:71:a9:97:e7:5d:f3:1f:56:b3:9f:ec:24:40:7e:
                    98:80:8a:5b:c6:a5:5f:bd:76:be:a2:54:53:e1:37:
                    a8:e3:60:da:a8:e8:37:3a:5a:28:1f:c0:28:74:6b:
                    d2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F0:B7:DB:C6:15:62:6A:F5:FB:39:BA:14:3C:96:96:10:3E:8D:CF
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:df10::/44

    Signature Algorithm: sha256WithRSAEncryption
         22:48:32:05:1c:5b:38:19:5d:81:0f:56:25:43:5b:69:1c:3d:
         15:1c:2f:1e:f8:65:42:30:e7:97:b4:48:2a:7d:32:7c:16:16:
         5a:62:f8:2f:aa:22:cb:48:1b:32:ce:e6:35:0b:8f:77:5a:fa:
         aa:bb:ca:5b:c7:53:db:59:e3:c4:f3:c2:e2:c6:79:e4:25:cb:
         6a:08:63:91:1c:3a:e5:e9:33:bd:9b:e5:e6:b3:95:89:a9:c3:
         78:35:d1:d7:ee:78:b3:79:68:2a:a3:20:c1:7c:6e:11:93:39:
         36:b8:ee:84:16:4c:8f:ad:9d:29:c8:cb:db:11:c8:25:fa:cc:
         50:eb:9b:31:b0:3c:c1:80:bd:3f:93:d7:01:6e:65:fb:79:75:
         ff:ac:45:aa:90:fd:38:65:d5:60:82:b8:4e:22:7b:87:59:76:
         78:2b:f6:4e:de:07:d9:c5:be:67:b5:b6:bb:a1:13:37:d0:24:
         06:c7:33:ac:b1:53:27:42:4b:39:f1:8b:8f:9f:bd:5c:4f:d2:
         49:1f:0d:3f:d9:03:1f:26:86:16:30:93:04:f0:13:e8:69:e1:
         f2:89:c0:62:3b:c5:93:99:7c:46:3f:04:ab:c7:ce:db:c5:6c:
         a2:cf:74:ed:1f:fe:3a:f5:8c:24:41:4d:f1:f8:ea:6d:c0:35:
         51:89:cd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----