Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199693.roa
File:                     AS199693.roa (raw, json)
Hash identifier:          vpjkBwRAgNHMPUPqq7USMPfNjF3Gw3pl+yTmAOew1Qg=
Subject key identifier:   CC:B0:33:D7:05:2D:55:84:A4:C1:23:A9:E3:D5:55:10:60:0B:B5:B6
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       32750238B384F0D4537C3757099172A090A02BAD
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199693.roa
Signing time:             Sat 08 Apr 2023 09:22:24 +0000
ROA not before:           Sat 08 Apr 2023 09:17:24 +0000
ROA not after:            Sat 06 Apr 2024 09:22:24 +0000
asID:                     199693
IP address blocks:        2a12:dd47:da00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:75:02:38:b3:84:f0:d4:53:7c:37:57:09:91:72:a0:90:a0:2b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:24 2023 GMT
            Not After : Apr  6 09:22:24 2024 GMT
        Subject: CN=CCB033D7052D5584A4C123A9E3D55510600BB5B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:50:d9:79:d9:12:8c:73:c8:69:a6:5c:40:
                    a8:7b:36:7b:78:02:4a:b3:f2:4b:c4:7d:65:b6:f8:
                    9c:da:28:8c:d3:8e:d2:87:96:23:53:8e:19:70:6e:
                    77:ba:50:7d:71:4b:a8:68:53:a1:22:30:7a:77:71:
                    39:50:b7:9e:7d:f4:1d:2f:fa:ba:43:45:7d:e7:ef:
                    50:54:84:c6:e9:5e:96:c6:56:2f:55:95:42:3c:b0:
                    f5:aa:36:e9:67:e5:7a:81:73:ee:8a:9d:7c:82:e2:
                    94:9b:df:4b:d7:dd:38:eb:91:9f:56:86:cb:f7:5e:
                    3b:d3:52:17:33:9b:7a:81:f0:be:49:c3:95:d6:50:
                    78:34:a5:fb:1c:0a:77:37:49:d8:01:db:24:4d:af:
                    6f:5e:62:d8:a4:1b:f6:99:64:df:46:20:09:bc:75:
                    86:b3:5c:90:72:8c:58:47:6d:8d:b3:34:11:2b:6f:
                    ee:4e:0a:8e:c5:79:84:62:9e:4f:4e:9c:f2:a6:52:
                    a3:7e:44:08:a4:fb:ae:a5:99:b7:72:c0:88:f2:50:
                    9f:94:0f:f0:64:db:fc:fa:d2:cf:bc:0f:81:47:5d:
                    34:b9:59:f6:b7:76:5d:90:e1:a7:49:3e:bd:d0:75:
                    13:55:67:cd:d2:07:ab:c5:20:1e:f5:58:02:6b:94:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B0:33:D7:05:2D:55:84:A4:C1:23:A9:E3:D5:55:10:60:0B:B5:B6
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199693.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:da00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c2:92:c1:f6:64:19:65:9f:7f:90:ea:7a:70:05:c4:d1:55:5d:
         67:c2:43:53:cf:48:79:57:de:bc:9e:b3:36:86:4d:a4:e0:41:
         80:c5:a0:b2:90:3e:b2:f4:ca:64:d0:81:e3:11:26:bf:ed:15:
         3b:49:34:3f:31:e1:cd:76:d0:14:86:a7:a7:6e:6d:32:3a:a1:
         80:6e:62:11:4f:d3:4c:87:59:d0:4c:bf:58:b5:6f:fc:3b:d1:
         50:75:28:24:b1:53:dc:a4:61:fa:88:7e:20:f8:3d:d6:5f:7d:
         a0:ba:4f:27:f2:c2:59:36:8e:f4:82:f9:8c:34:cb:6d:1d:a7:
         e9:ce:f6:58:7c:2b:5c:81:99:c9:b2:d0:d5:4b:67:93:cc:f7:
         64:1f:79:22:e8:65:91:be:ea:de:25:03:97:24:45:1f:eb:38:
         4a:e2:a8:9c:15:95:c5:11:71:bb:78:fd:7f:84:59:a8:95:ff:
         d6:9e:99:45:b8:13:f5:99:4d:71:9e:22:b5:da:d2:5b:9a:38:
         72:16:d3:60:24:2f:3f:00:94:f4:18:88:0c:7a:de:fe:93:8e:
         2c:30:d3:88:51:81:cc:82:01:57:32:5a:b7:83:c7:a3:fa:6d:
         5f:32:e2:23:dd:9d:92:5e:94:82:13:ff:98:5f:56:71:32:bb:
         82:1f:10:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----