Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199582.roa
File:                     AS199582.roa (raw, json)
Hash identifier:          DcDBgvGDScnODirdf4kIzoKSNHs3R9NbpU4UnyXBdqM=
Subject key identifier:   B5:73:B0:FE:90:F6:9B:F7:B8:07:B2:88:39:7C:42:51:3E:9C:66:E7
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       515E2643460F856F825C1312FFFF585E1C778212
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199582.roa
Signing time:             Sat 08 Apr 2023 09:22:25 +0000
ROA not before:           Sat 08 Apr 2023 09:17:25 +0000
ROA not after:            Sat 06 Apr 2024 09:22:25 +0000
asID:                     199582
IP address blocks:        2a12:dd47:80e6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5e:26:43:46:0f:85:6f:82:5c:13:12:ff:ff:58:5e:1c:77:82:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:25 2023 GMT
            Not After : Apr  6 09:22:25 2024 GMT
        Subject: CN=B573B0FE90F69BF7B807B288397C42513E9C66E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:7a:8d:07:29:ac:78:37:6e:7d:f4:30:8e:
                    4f:e1:ea:d1:e5:12:c4:28:39:22:e7:94:98:6e:a8:
                    8b:d7:2b:c8:22:5d:44:b9:92:57:26:0e:17:dc:81:
                    00:31:b0:5c:0e:e9:76:15:95:01:92:76:31:3e:89:
                    47:50:44:94:ef:95:24:a2:17:28:d8:11:eb:7d:26:
                    f6:3d:69:26:ca:4c:1a:a1:8e:73:6e:b7:ea:5a:bd:
                    cf:fa:60:c6:c6:94:61:aa:b7:74:84:f2:1b:56:be:
                    6e:9a:f5:23:56:24:ee:26:12:68:06:8a:29:08:26:
                    97:1f:58:69:31:fa:06:7a:ca:70:1b:a9:fe:61:b9:
                    c7:13:c8:76:51:34:cc:5d:b6:cb:41:46:77:15:81:
                    75:d0:df:cc:ef:f8:91:aa:1e:4e:2b:79:ec:d2:06:
                    09:3d:d5:6c:61:da:b9:66:5b:93:da:31:46:b8:84:
                    cd:56:34:98:03:7a:b0:3e:0d:18:72:17:2b:63:39:
                    de:09:73:7e:f5:48:26:70:9a:32:a8:32:35:d3:de:
                    72:32:3b:9d:23:8b:d5:29:96:23:40:33:9a:8d:bc:
                    0a:28:54:60:49:1e:55:72:fc:01:ea:fd:fd:01:e7:
                    93:a6:c9:e5:ad:71:ba:da:3f:f8:1a:16:2a:96:72:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:73:B0:FE:90:F6:9B:F7:B8:07:B2:88:39:7C:42:51:3E:9C:66:E7
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199582.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e6::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:9f:4d:b4:ca:18:64:26:be:a7:5c:f7:69:7a:81:27:fa:02:
         d1:1f:34:0e:bd:67:e4:43:2f:a1:8a:91:52:71:38:a7:fd:7e:
         5b:dd:72:ff:8b:b4:bb:4b:77:61:0b:ce:e1:71:67:11:96:00:
         e6:7b:15:45:e3:f2:a1:4f:08:03:6b:a0:9c:c0:0f:08:5d:55:
         8a:d9:cd:1c:e7:16:4c:6e:c1:4a:ab:47:f9:c5:10:50:13:37:
         70:73:d1:c7:76:18:1d:3d:04:6e:13:cf:42:dc:af:7a:ef:c9:
         73:6b:67:98:3c:82:44:70:4e:d1:ea:92:8c:2a:0c:87:74:a0:
         d9:ea:af:21:f7:cc:b8:bb:01:f4:a4:97:95:71:22:a4:1e:fc:
         c0:89:0c:6b:7f:97:7a:a6:ee:9e:03:2f:04:16:64:90:b9:54:
         1c:9e:e1:da:d7:48:f5:b8:11:39:d5:59:08:7d:26:41:bf:d4:
         1e:3d:b4:b2:87:a9:b0:7c:48:47:63:1f:14:09:ae:95:23:b5:
         0d:dc:8b:b0:f7:90:59:3b:3d:71:de:67:53:89:d3:a4:1f:e1:
         0a:54:0f:3b:b9:87:af:e2:9f:90:29:0e:13:1a:70:72:6a:85:
         bd:c8:ac:fa:98:be:ca:0c:3b:0b:90:19:0c:a8:4f:2c:7d:cd:
         4f:48:23:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----