Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200021.roa
File:                     AS200021.roa (raw, json)
Hash identifier:          4d8Qm+64CUPsB/PtrJ7gjKHPbxyQJtiH4439AYlc7r4=
Subject key identifier:   5C:A9:DB:DD:A1:52:93:DE:1B:23:3D:20:E1:F8:51:8F:4F:C0:A4:2D
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1251C514A6A4596B2AB07C99037B33469FEE5F85
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200021.roa
Signing time:             Sat 08 Apr 2023 09:22:12 +0000
ROA not before:           Sat 08 Apr 2023 09:17:12 +0000
ROA not after:            Sat 06 Apr 2024 09:22:12 +0000
asID:                     200021
IP address blocks:        2a12:dd47:5c00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:51:c5:14:a6:a4:59:6b:2a:b0:7c:99:03:7b:33:46:9f:ee:5f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:12 2023 GMT
            Not After : Apr  6 09:22:12 2024 GMT
        Subject: CN=5CA9DBDDA15293DE1B233D20E1F8518F4FC0A42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:b3:29:a2:af:f8:f7:2f:33:41:59:94:43:
                    64:49:b9:88:00:01:91:79:c7:f8:59:73:33:08:cd:
                    5b:ee:c2:a5:d6:1f:e6:18:cd:b3:70:0f:36:c6:28:
                    6a:7a:43:3a:b2:4b:0b:e9:51:36:c0:17:60:1a:2f:
                    6a:07:c0:f3:93:39:a7:a1:81:ca:20:ce:1b:78:79:
                    1e:1a:f6:93:b9:e4:8c:08:4c:e4:bb:e6:4f:16:87:
                    ed:4d:9a:50:4c:df:79:fb:b6:e3:a9:bc:c1:4c:82:
                    ab:b3:68:c3:44:59:8e:19:ca:e3:d2:e8:ae:97:3f:
                    f5:e5:15:80:64:72:c1:de:ee:eb:24:da:6f:19:05:
                    e1:b2:1c:af:9f:7b:1f:75:71:2c:60:02:fd:49:5a:
                    51:02:c3:1c:47:51:79:55:fb:0a:52:15:b1:63:92:
                    0f:20:2c:15:fa:e6:6e:02:e4:09:b4:37:4b:99:ca:
                    a4:df:2f:9f:4a:5e:b9:39:ec:f0:7d:68:29:e3:fc:
                    20:29:a1:42:47:6c:73:30:4c:b9:36:e5:ed:42:89:
                    a2:0f:55:ce:cd:47:50:ab:ec:38:6a:8a:7c:ce:99:
                    c0:d5:60:dd:a6:60:b7:bd:ae:c1:83:7f:6b:43:19:
                    45:a8:f9:e2:5c:95:54:f7:64:8c:b7:85:4f:e2:69:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A9:DB:DD:A1:52:93:DE:1B:23:3D:20:E1:F8:51:8F:4F:C0:A4:2D
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200021.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:ed:1f:4f:9f:55:75:32:82:45:8f:4b:25:81:f3:1d:b4:fa:
         74:24:de:b6:9d:5d:86:3f:00:f1:95:b3:59:7a:d7:fc:f8:5c:
         55:b2:c9:9f:cc:1c:aa:7f:30:70:d6:99:db:fd:db:51:84:a0:
         88:25:d2:e7:a2:78:01:47:75:f4:bb:31:51:bd:88:c5:fc:a4:
         5d:e9:3c:6a:03:23:18:d6:b0:8e:c0:f3:ee:63:cd:b5:6f:54:
         5e:7d:fd:e6:d9:82:71:fb:55:c3:67:7e:36:ca:32:d9:b1:7e:
         dd:0a:f7:7e:a4:62:21:90:42:ee:96:06:1d:a7:21:c5:c4:d5:
         23:76:9c:42:e2:03:c2:96:90:1c:7b:97:bd:b4:9d:38:fe:80:
         ae:d0:3e:0d:04:a6:fd:09:7c:1a:22:50:bf:68:19:5e:9c:b7:
         53:53:f1:46:2a:a9:e4:02:a1:f2:c9:65:e9:ab:45:a2:de:8d:
         0a:12:31:e7:d2:ac:49:2e:6e:87:05:35:05:e9:40:69:9f:8e:
         91:1e:d1:0a:28:5f:69:46:51:23:7e:f2:6d:78:a9:ed:ac:3e:
         e2:69:f6:20:0e:a3:a6:eb:c6:08:1c:af:8d:f8:6f:a5:46:a2:
         95:92:20:e3:a7:0a:c7:54:ad:76:4a:23:8c:70:a0:cf:16:d8:
         d9:e5:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----