Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199676.roa
File:                     AS199676.roa (raw, json)
Hash identifier:          r3KnFPUJcDOo1YVhhDgPNr5fwSWFJMF2r5wOHr4YZJY=
Subject key identifier:   9E:5D:25:FE:59:51:A6:9E:E9:76:4D:B4:FB:81:BC:60:F0:37:40:B6
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       756151D8BFECF88C9F8365D8B5CF4DA4325C1688
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199676.roa
Signing time:             Sat 08 Apr 2023 09:22:14 +0000
ROA not before:           Sat 08 Apr 2023 09:17:14 +0000
ROA not after:            Sat 06 Apr 2024 09:22:14 +0000
asID:                     199676
IP address blocks:        2a12:dd47:80e7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:61:51:d8:bf:ec:f8:8c:9f:83:65:d8:b5:cf:4d:a4:32:5c:16:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:14 2023 GMT
            Not After : Apr  6 09:22:14 2024 GMT
        Subject: CN=9E5D25FE5951A69EE9764DB4FB81BC60F03740B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:93:cd:70:d8:b6:5b:db:d6:4e:81:b0:5e:13:
                    ed:a4:c6:1c:fc:66:bb:04:d4:09:51:85:a3:13:35:
                    4f:aa:d1:f9:0d:fb:e5:aa:9b:af:ee:1c:93:1d:f5:
                    a5:e1:de:cc:13:af:4d:9f:a7:6c:7b:95:ff:3b:0d:
                    fe:ef:b5:77:03:0f:7e:a1:9a:92:aa:c4:84:4b:57:
                    f6:98:1f:16:db:70:29:02:b5:54:5b:f1:c3:46:17:
                    39:e6:60:41:e2:7c:8a:2f:5e:42:d7:eb:8a:01:38:
                    d6:5f:7c:81:3e:e4:b1:fe:e5:93:94:fa:9a:a6:0d:
                    d5:61:05:78:ca:47:5d:24:ce:c2:98:7d:92:e1:95:
                    5a:38:6e:14:ff:7a:da:68:0f:da:ef:46:e9:63:e2:
                    93:3d:ff:0d:23:c8:46:b9:51:3f:f4:43:23:75:e7:
                    fb:56:81:64:ad:69:83:27:cc:36:cd:d3:82:e3:37:
                    b3:9c:0b:4a:a7:25:d9:ee:46:e1:74:a5:80:88:a9:
                    e9:f1:69:33:90:5c:bd:c0:3d:0f:72:0a:dd:a2:1b:
                    45:4b:66:be:a6:c6:17:cc:88:0d:1c:d0:99:f8:01:
                    16:74:33:69:53:6c:cb:40:ac:d6:6d:aa:bb:7e:89:
                    c3:a9:14:bb:ff:4a:96:44:b6:1c:a9:ee:1f:2f:c2:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5D:25:FE:59:51:A6:9E:E9:76:4D:B4:FB:81:BC:60:F0:37:40:B6
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e7::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:ba:5c:28:9e:f2:da:70:46:15:20:53:e1:60:91:ad:ff:5b:
         26:23:0c:02:51:68:f0:53:6e:3b:e9:f2:7f:c9:17:c5:fc:98:
         00:b5:b4:a4:e0:94:06:e4:dc:50:c2:f0:54:2d:aa:58:b3:66:
         5b:26:9c:5c:48:86:9b:51:af:73:0c:ed:c9:9b:7d:e3:03:df:
         a7:bc:77:21:18:9d:09:16:4c:bb:6e:ee:07:d7:50:00:48:1f:
         5c:2e:fe:a2:e7:2d:08:7b:69:3e:be:7e:50:51:24:d4:95:b5:
         10:96:ff:de:60:75:d5:b9:54:0b:c6:47:2c:d9:64:bc:47:77:
         1f:13:60:9e:ab:8c:c8:be:0d:0f:88:d8:63:8e:29:2f:e2:42:
         ea:18:84:de:65:49:88:15:dd:e2:8a:29:9c:7a:d7:ba:45:a7:
         25:8d:4a:4f:46:00:74:7f:2f:12:a3:91:9b:87:c1:e6:f5:f8:
         1e:89:15:5f:e1:28:4d:e5:8d:28:6c:64:00:81:0f:56:c9:1e:
         94:a5:73:92:4d:05:5c:64:2d:c1:43:93:a0:cc:aa:d0:a6:73:
         dd:4a:88:fd:0a:cc:16:c0:30:61:da:12:15:ea:5f:32:3a:74:
         9d:a1:cf:44:84:41:78:5d:34:68:d5:46:a1:40:62:b7:dc:9a:
         79:11:e6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----