Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199656.roa
File:                     AS199656.roa (raw, json)
Hash identifier:          rbNtxkg0cnYx1FLyfNJStqvnDAkFWoy39XKdYdG4R6o=
Subject key identifier:   E5:F9:F8:1E:C2:44:75:B5:89:74:8C:16:43:90:F8:A9:64:1F:92:4C
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       656EF2DB8592BA802A63E304EC711A18FC5873EC
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199656.roa
Signing time:             Sat 08 Apr 2023 09:22:12 +0000
ROA not before:           Sat 08 Apr 2023 09:17:12 +0000
ROA not after:            Sat 06 Apr 2024 09:22:12 +0000
asID:                     199656
IP address blocks:        2a12:dd47:8ed0::/44 maxlen: 48
                          2a12:dd47:f700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6e:f2:db:85:92:ba:80:2a:63:e3:04:ec:71:1a:18:fc:58:73:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:12 2023 GMT
            Not After : Apr  6 09:22:12 2024 GMT
        Subject: CN=E5F9F81EC24475B589748C164390F8A9641F924C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:5c:3d:4a:0b:59:1f:7a:33:b9:9b:3f:97:
                    e7:84:26:df:39:d5:1a:37:d7:ef:ca:f5:56:b0:13:
                    dc:a6:82:ef:82:0a:ab:31:a6:c7:36:be:3f:2c:72:
                    8b:48:c0:04:c3:ed:26:75:22:6c:73:27:57:7a:f0:
                    a7:11:6c:9a:7a:ea:e5:cd:54:1d:b6:7b:8b:c1:fc:
                    4f:4b:b1:1b:89:71:44:55:e3:6a:72:e5:eb:91:7e:
                    98:9e:d8:8d:dc:e1:42:95:3a:1b:78:d7:b7:a3:c6:
                    ec:85:1b:d8:d2:4b:24:f5:e9:7e:a2:91:d2:3e:f2:
                    00:89:77:36:06:e3:af:88:9d:77:0f:1d:49:72:0f:
                    cf:93:87:42:62:67:b3:b0:33:5e:6e:ed:17:e7:44:
                    d2:53:05:49:17:61:5c:83:20:25:66:e4:7e:a7:e2:
                    46:ef:ba:8e:c2:25:02:26:49:81:f0:73:3e:d4:7e:
                    33:cf:36:aa:3c:04:5d:6f:24:67:19:7b:be:cc:5a:
                    af:fb:34:f4:a3:85:9a:f5:62:7d:23:d4:61:43:c0:
                    1e:7b:d8:02:0e:ad:ac:98:91:3e:cb:20:56:62:41:
                    8d:54:d6:24:9f:42:53:ac:a1:03:85:be:ae:f0:ac:
                    c3:5f:9d:25:7d:4d:fc:66:34:5c:cf:a7:7d:83:85:
                    cf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F9:F8:1E:C2:44:75:B5:89:74:8C:16:43:90:F8:A9:64:1F:92:4C
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199656.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ed0::/44
                  2a12:dd47:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:e7:df:8b:83:cc:c5:59:3f:d7:99:a2:14:ff:a9:dd:37:69:
         78:f3:55:70:4e:6b:80:67:63:c1:2f:7a:88:03:b5:55:1a:c0:
         02:4a:eb:02:79:76:98:86:2f:85:67:74:86:32:66:ee:d2:71:
         58:3b:91:51:bd:5c:88:71:bf:f4:52:03:5f:20:9a:e7:52:7a:
         53:aa:6c:a0:8f:03:fa:8b:83:fa:67:04:f7:65:df:4b:e3:44:
         08:27:75:db:d6:a2:d6:54:fc:c7:03:f3:47:17:e9:dc:ac:4d:
         94:02:e0:e5:f7:13:9e:d5:96:59:21:a8:29:ff:1f:ef:b0:a0:
         3c:8f:81:49:b7:74:d1:3d:e9:60:55:00:46:c9:8c:0b:83:a2:
         3d:40:a8:ca:e1:22:c5:d6:33:77:3d:65:c5:76:45:cf:55:5e:
         36:80:14:98:b6:6f:54:f8:6d:9b:bf:af:15:e4:34:66:33:3c:
         c8:47:26:95:9a:57:5e:f9:fa:4f:7b:bb:71:8b:5a:dd:69:6e:
         00:d7:64:aa:27:a0:06:12:74:63:1e:81:7c:2a:24:82:fd:4e:
         94:61:a8:af:96:d0:ab:87:96:cc:e3:75:a0:d7:23:eb:f6:57:
         e4:80:be:c8:57:2b:bd:3d:33:88:bc:40:f3:ab:51:73:b5:a0:
         54:99:f7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----