Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199682.roa
File:                     AS199682.roa (raw, json)
Hash identifier:          lAHOL8MEFD3wsckWq9O/79Yo6DxkRYQLq04Qowdoc7A=
Subject key identifier:   16:0A:97:1F:F9:6B:2A:C6:2C:9D:DE:50:2F:A9:66:53:B9:41:69:EF
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1B3342E5B34718376CB19963154DAE9516BA0D93
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199682.roa
Signing time:             Sat 08 Apr 2023 09:22:17 +0000
ROA not before:           Sat 08 Apr 2023 09:17:17 +0000
ROA not after:            Sat 06 Apr 2024 09:22:17 +0000
asID:                     199682
IP address blocks:        2a12:dd47:8333::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:33:42:e5:b3:47:18:37:6c:b1:99:63:15:4d:ae:95:16:ba:0d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:17 2023 GMT
            Not After : Apr  6 09:22:17 2024 GMT
        Subject: CN=160A971FF96B2AC62C9DDE502FA96653B94169EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:3f:df:92:5a:ba:72:4b:2e:6c:a8:47:c7:
                    80:10:50:05:90:7e:b7:9d:a5:a0:a2:62:17:29:90:
                    4f:ea:b7:ea:92:f6:e7:18:b0:7d:cb:22:f8:69:5c:
                    00:7f:2d:1a:94:02:d2:0b:83:f9:7f:7b:ca:2e:67:
                    e4:4c:ac:73:b0:8b:3d:c9:8b:71:c7:61:93:10:31:
                    d5:0f:ef:ac:56:32:6e:ff:85:a7:bf:37:e7:cc:0a:
                    45:60:04:7d:97:ae:f2:fe:c1:75:e3:56:d4:ca:08:
                    10:29:dc:52:09:d4:4b:42:a1:96:4f:4c:e7:c2:7e:
                    97:7c:d9:a1:68:cd:10:d9:2b:56:20:29:d7:63:f9:
                    c2:d0:f6:d0:80:ae:e6:3f:c1:17:15:3d:34:eb:e9:
                    20:78:95:bb:33:94:91:37:7f:d3:d6:e1:c9:ce:0c:
                    e0:8b:c1:75:40:1e:2c:1c:2e:2b:fb:84:d0:7b:1a:
                    fb:19:f2:6a:b3:49:88:10:99:b0:b4:f4:b5:b5:c4:
                    bf:7d:df:8b:a9:cd:b9:c9:4a:99:26:04:bb:01:60:
                    9f:71:28:a2:74:32:c6:fa:7f:75:05:fa:62:fe:18:
                    76:08:9d:0a:9c:77:9d:b0:92:c9:ae:05:84:db:5e:
                    d1:f9:c7:06:bd:20:31:6e:ea:7c:a4:3c:ca:f8:bf:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0A:97:1F:F9:6B:2A:C6:2C:9D:DE:50:2F:A9:66:53:B9:41:69:EF
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199682.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8333::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:18:d0:1d:42:d9:8c:3c:b2:cc:b9:7e:66:73:3d:cc:bf:21:
         e0:19:e6:70:45:f0:20:9b:83:f1:8b:6a:25:33:c6:0f:95:d6:
         ca:5f:e2:ab:f8:c8:8c:27:4f:4b:f5:6b:41:a0:18:00:36:36:
         7e:76:f0:e0:96:d4:d8:f2:69:bd:d4:05:a5:6a:0c:05:70:01:
         1a:66:cb:35:0d:72:04:dd:1e:98:b5:0f:1c:0f:3c:29:98:fc:
         c9:9f:c1:e9:80:67:bc:fa:e4:b7:08:9c:0d:7f:7a:ef:1c:d2:
         36:7e:22:fd:98:1b:4a:f1:92:60:a1:22:7f:87:28:3b:2d:44:
         34:b7:84:a2:1f:e1:06:4c:01:e7:b3:0b:af:78:ef:c6:a1:7b:
         dd:3d:dc:43:39:87:22:19:17:b4:12:f1:93:55:5e:69:ac:6c:
         c9:24:f7:d4:a5:a0:da:da:57:67:94:14:af:bd:25:b4:ce:b9:
         b8:93:1a:97:d5:e7:85:fc:ae:b7:5a:21:eb:d6:3e:41:de:5d:
         5a:62:4d:c6:56:b6:91:6a:62:6e:d5:95:3b:17:02:b1:00:8a:
         7f:28:15:eb:30:5b:76:35:ec:98:09:11:91:a9:df:94:f6:b2:
         09:d7:6b:13:ca:5e:4e:30:94:21:a0:57:48:f2:c5:ee:0d:75:
         f7:d1:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----