Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199956.roa
File:                     AS199956.roa (raw, json)
Hash identifier:          c+lHiz0HT3JgEX4119mvE96mAWXNfQPWO0QoJyEr3Xg=
Subject key identifier:   3A:7E:28:11:5F:23:C1:15:40:06:AC:5C:D0:69:D9:04:54:B7:3E:57
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1904A56466E9FCB4D9C8BA75B3FC82202C2CDDE5
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199956.roa
Signing time:             Sat 08 Apr 2023 09:22:12 +0000
ROA not before:           Sat 08 Apr 2023 09:17:12 +0000
ROA not after:            Sat 06 Apr 2024 09:22:12 +0000
asID:                     199956
IP address blocks:        2a12:dd47:5d00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:04:a5:64:66:e9:fc:b4:d9:c8:ba:75:b3:fc:82:20:2c:2c:dd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:12 2023 GMT
            Not After : Apr  6 09:22:12 2024 GMT
        Subject: CN=3A7E28115F23C1154006AC5CD069D90454B73E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:2f:84:2f:3c:c0:1d:20:3d:38:60:4b:bb:
                    d4:8d:63:29:a0:8e:f3:9c:f2:e1:ca:9b:2b:40:31:
                    28:93:4d:1e:90:2c:3c:d8:ae:db:f8:ea:02:2f:6c:
                    99:a5:0e:67:11:70:08:bb:2a:90:77:31:df:99:27:
                    14:e1:9f:f9:db:08:74:8e:0f:2b:36:19:23:d7:8b:
                    34:3b:36:cc:d0:1d:d2:e1:75:56:88:92:55:0d:d7:
                    09:00:cd:ef:24:9f:a0:72:ae:61:cf:34:64:31:e2:
                    ba:93:2c:9c:eb:b7:ff:71:d7:02:e6:0a:46:56:22:
                    5f:fd:cd:28:30:e4:8f:f4:81:e7:49:33:d1:ff:04:
                    7b:9b:14:e9:29:f9:ee:1a:41:50:a4:77:bb:91:75:
                    92:68:e3:d4:cf:52:96:74:29:47:99:d2:ca:a6:77:
                    3c:46:9a:44:33:c9:86:7b:f7:82:e8:86:92:7b:4f:
                    a8:a7:e0:1e:13:7c:60:fc:c9:e4:8a:55:42:c1:20:
                    64:4d:27:24:56:f9:ec:67:2e:45:c7:d2:0e:31:4b:
                    01:8c:9f:6a:ed:38:68:c3:a1:98:e4:20:15:ca:6f:
                    7f:41:39:51:7a:a2:e3:a0:96:da:12:1a:e2:6d:fd:
                    56:de:26:54:58:32:77:6b:2d:be:a8:22:c9:be:55:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7E:28:11:5F:23:C1:15:40:06:AC:5C:D0:69:D9:04:54:B7:3E:57
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199956.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:d1:e2:79:6c:d3:15:06:27:5a:d4:2c:2d:ca:3e:b5:25:42:
         2b:e3:c0:39:a3:13:25:d6:b8:8c:b4:e2:2f:44:76:85:53:fe:
         cf:15:e9:b0:c1:29:3f:0d:51:6f:7e:ad:0c:a0:99:fd:32:84:
         9e:65:4f:d5:a2:23:63:3f:e6:ef:8a:11:c6:c2:89:b7:d3:62:
         2b:cc:d9:33:9e:0c:39:ef:ba:d9:3c:cb:b6:68:01:d2:11:25:
         35:8a:1b:41:c3:d6:85:56:8c:12:07:88:b6:cd:17:26:fe:44:
         e5:a3:4d:77:88:08:5c:ea:e8:7d:ce:0b:07:70:c5:e9:35:a7:
         0a:36:b1:10:d9:8d:37:7a:f9:0c:7e:5b:d6:8f:5a:62:eb:01:
         eb:3a:3f:17:59:17:07:d9:2b:5e:cc:3a:52:23:c7:84:31:9b:
         1e:63:b0:42:ec:60:fd:e1:c6:a0:01:81:d1:99:8a:23:bd:d3:
         d8:d2:a9:b6:a5:cf:ce:21:1e:bf:ba:90:7f:b9:c8:b0:0e:76:
         3f:33:fd:c7:48:2f:1d:d9:73:16:ea:dd:6a:a5:51:4a:bd:6b:
         ee:91:11:57:85:8c:76:f0:f2:52:e4:4f:d5:dc:a5:bf:70:8c:
         bc:00:b8:64:67:77:f7:1a:90:19:ee:dc:7b:1d:76:e5:1f:ef:
         42:31:23:7d
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUGQSlZGbp/LTZyLp1s/yCICws3eUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MTJaFw0yNDA0MDYwOTIyMTJaMDMxMTAvBgNV
BAMTKDNBN0UyODExNUYyM0MxMTU0MDA2QUM1Q0QwNjlEOTA0NTRCNzNFNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOS+ELzzAHSA9OGBLu9SNYymg
jvOc8uHKmytAMSiTTR6QLDzYrtv46gIvbJmlDmcRcAi7KpB3Md+ZJxThn/nbCHSO
Dys2GSPXizQ7NszQHdLhdVaIklUN1wkAze8kn6ByrmHPNGQx4rqTLJzrt/9x1wLm
CkZWIl/9zSgw5I/0gedJM9H/BHubFOkp+e4aQVCkd7uRdZJo49TPUpZ0KUeZ0sqm
dzxGmkQzyYZ794LohpJ7T6in4B4TfGD8yeSKVULBIGRNJyRW+exnLkXH0g4xSwGM
n2rtOGjDoZjkIBXKb39BOVF6ouOgltoSGuJt/VbeJlRYMndrLb6oIsm+VfSpAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUOn4oEV8jwRVABqxc0GnZBFS3PlcwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMxOTk5NTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1HXTANBgkqhkiG9w0BAQsF
AAOCAQEAXNHieWzTFQYnWtQsLco+tSVCK+PAOaMTJda4jLTiL0R2hVP+zxXpsMEp
Pw1Rb36tDKCZ/TKEnmVP1aIjYz/m74oRxsKJt9NiK8zZM54MOe+62TzLtmgB0hEl
NYobQcPWhVaMEgeIts0XJv5E5aNNd4gIXOrofc4LB3DF6TWnCjaxENmNN3r5DH5b
1o9aYusB6zo/F1kXB9krXsw6UiPHhDGbHmOwQuxg/eHGoAGB0ZmKI73T2NKptqXP
ziEev7qQf7nIsA52PzP9x0gvHdlzFurdaqVRSr1r7pERV4WMdvDyUuRP1dylv3CM
vAC4ZGd39xqQGe7cex125R/vQjEjfQ==
-----END CERTIFICATE-----