Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199331.roa
File:                     AS199331.roa (raw, json)
Hash identifier:          DRkYdqrzV4WLZpMUEeVKFkkLx8SWbuEqlKQhQq7SabA=
Subject key identifier:   A6:A5:81:A3:F8:80:9D:B4:8E:EB:C1:C9:00:42:8B:49:3E:CD:CF:B2
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       58494C19BE9ED1F5E59AA9AEC391D48A235B4160
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199331.roa
Signing time:             Sat 08 Apr 2023 09:22:25 +0000
ROA not before:           Sat 08 Apr 2023 09:17:25 +0000
ROA not after:            Sat 06 Apr 2024 09:22:25 +0000
asID:                     199331
IP address blocks:        2a12:dd47:3100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:49:4c:19:be:9e:d1:f5:e5:9a:a9:ae:c3:91:d4:8a:23:5b:41:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:25 2023 GMT
            Not After : Apr  6 09:22:25 2024 GMT
        Subject: CN=A6A581A3F8809DB48EEBC1C900428B493ECDCFB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:57:85:36:9c:c8:bd:09:5a:55:27:57:d6:
                    80:af:df:2a:68:1c:a2:b6:1b:11:8e:ce:cf:6f:14:
                    3d:c6:49:1c:02:75:02:aa:99:70:99:8a:f5:d8:fb:
                    bf:97:cc:f6:87:e3:b5:46:1c:1e:53:b4:9f:83:68:
                    35:3b:60:1a:2b:ab:ee:6a:b2:44:4a:31:50:f3:72:
                    50:c0:4e:82:58:18:42:cb:f2:f8:62:c8:da:de:48:
                    7b:8c:7e:fe:28:53:fa:ab:bb:ae:2c:47:ec:4b:4b:
                    3d:73:6c:1b:d4:25:60:16:a9:3f:7c:c1:6c:0b:4f:
                    39:b3:36:fd:1c:28:9e:c8:95:c5:d9:88:06:02:86:
                    64:1d:d7:9a:0d:6f:6b:c0:68:02:e9:81:35:3a:93:
                    ef:a2:1a:1b:62:26:d8:46:63:f1:04:28:cd:e6:cc:
                    10:38:0a:01:e4:e1:1d:6f:6f:d8:e1:b0:aa:01:62:
                    17:84:cb:3b:ff:09:3b:1f:7a:85:be:c5:90:6a:bb:
                    68:b5:18:14:32:f1:ad:e7:5b:b5:8d:ef:83:05:06:
                    a9:6c:5c:d2:a6:76:2f:ff:a0:7f:2b:91:d2:bb:67:
                    0e:da:1f:fb:3d:df:f8:06:3b:4f:7e:47:a5:c0:3c:
                    5e:b3:54:b4:9d:90:92:01:fc:7c:fd:58:86:8c:e6:
                    27:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A5:81:A3:F8:80:9D:B4:8E:EB:C1:C9:00:42:8B:49:3E:CD:CF:B2
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:92:63:7e:46:41:c9:ad:e9:91:d7:6a:d2:b9:db:7f:20:64:
         be:4e:97:dd:96:4b:17:62:bb:29:9e:26:c9:8d:85:5b:16:56:
         5a:e2:c9:b2:5b:b4:da:3e:78:6b:8a:af:0b:94:08:26:bf:5a:
         5f:ca:51:a4:6b:36:35:d6:12:68:fa:c0:77:de:1f:76:22:e8:
         2b:d6:65:30:00:c9:88:56:6f:b4:cf:46:a3:29:b9:c3:02:27:
         cf:76:e3:6d:4b:d3:a8:fc:52:0e:78:44:a8:0f:19:ed:8f:83:
         4e:ed:15:0b:56:50:60:22:ea:22:aa:8a:fe:8f:55:a7:06:96:
         f1:12:ee:bd:d4:8a:98:d2:75:ac:45:8b:fd:14:a7:09:29:25:
         e0:0e:32:30:a4:d1:66:15:2d:fd:ac:cb:5b:0d:fa:69:2c:83:
         66:4a:be:8b:a6:26:02:fc:b5:53:28:f7:b3:61:47:d5:f4:fd:
         be:31:5b:6f:ce:83:72:5a:e7:4f:87:09:74:1a:56:2f:62:ef:
         82:a2:33:ed:61:65:c9:e0:26:44:10:4b:a7:43:2c:5c:be:d0:
         3c:68:2f:ed:94:e9:64:35:10:a1:36:71:e0:0e:1e:be:70:f4:
         63:e7:ba:19:e9:ce:88:a4:1a:8c:73:ca:f4:ac:6e:c7:b5:d0:
         9b:10:22:fe
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUWElMGb6e0fXlmqmuw5HUiiNbQWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjVaFw0yNDA0MDYwOTIyMjVaMDMxMTAvBgNV
BAMTKEE2QTU4MUEzRjg4MDlEQjQ4RUVCQzFDOTAwNDI4QjQ5M0VDRENGQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUFeFNpzIvQlaVSdX1oCv3ypo
HKK2GxGOzs9vFD3GSRwCdQKqmXCZivXY+7+XzPaH47VGHB5TtJ+DaDU7YBorq+5q
skRKMVDzclDAToJYGELL8vhiyNreSHuMfv4oU/qru64sR+xLSz1zbBvUJWAWqT98
wWwLTzmzNv0cKJ7IlcXZiAYChmQd15oNb2vAaALpgTU6k++iGhtiJthGY/EEKM3m
zBA4CgHk4R1vb9jhsKoBYheEyzv/CTsfeoW+xZBqu2i1GBQy8a3nW7WN74MFBqls
XNKmdi//oH8rkdK7Zw7aH/s93/gGO09+R6XAPF6zVLSdkJIB/Hz9WIaM5ienAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUpqWBo/iAnbSO68HJAEKLST7Nz7IwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMxOTkzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1HMTANBgkqhkiG9w0BAQsF
AAOCAQEAXJJjfkZBya3pkddq0rnbfyBkvk6X3ZZLF2K7KZ4myY2FWxZWWuLJslu0
2j54a4qvC5QIJr9aX8pRpGs2NdYSaPrAd94fdiLoK9ZlMADJiFZvtM9Goym5wwIn
z3bjbUvTqPxSDnhEqA8Z7Y+DTu0VC1ZQYCLqIqqK/o9VpwaW8RLuvdSKmNJ1rEWL
/RSnCSkl4A4yMKTRZhUt/azLWw36aSyDZkq+i6YmAvy1Uyj3s2FH1fT9vjFbb86D
clrnT4cJdBpWL2LvgqIz7WFlyeAmRBBLp0MsXL7QPGgv7ZTpZDUQoTZx4A4evnD0
Y+e6GenOiKQajHPK9Kxux7XQmxAi/g==
-----END CERTIFICATE-----