Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200160.roa
File:                     AS200160.roa (raw, json)
Hash identifier:          Si0hugngFb+gaMCxelNTQc0f7NS4Yl7YmQxrZu22KEM=
Subject key identifier:   52:1E:CB:B3:E1:83:A6:6D:C9:C8:09:39:D5:0E:B3:B5:85:D1:38:15
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       171053CB96FFFF532A011539C020D6F2461D66DC
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200160.roa
Signing time:             Sat 08 Apr 2023 09:22:28 +0000
ROA not before:           Sat 08 Apr 2023 09:17:28 +0000
ROA not after:            Sat 06 Apr 2024 09:22:28 +0000
asID:                     200160
IP address blocks:        2a12:dd47:5200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:10:53:cb:96:ff:ff:53:2a:01:15:39:c0:20:d6:f2:46:1d:66:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:28 2023 GMT
            Not After : Apr  6 09:22:28 2024 GMT
        Subject: CN=521ECBB3E183A66DC9C80939D50EB3B585D13815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:58:d3:51:12:8f:3f:ca:92:86:84:48:08:
                    01:16:08:fd:12:be:ef:31:b0:c7:5e:9f:26:07:90:
                    7d:3c:67:00:d6:30:43:af:59:78:ea:5a:83:94:39:
                    1a:7e:18:df:c2:66:9f:d9:5c:91:ef:39:9e:5e:14:
                    cf:f8:c8:c5:9c:b0:40:e3:9c:b0:3a:cf:93:3f:a8:
                    bb:3a:09:32:c3:fc:11:dd:eb:34:da:7a:7a:fc:ec:
                    cb:13:5a:71:6c:8f:c5:1e:dc:76:00:39:53:b8:e1:
                    9d:16:71:55:9c:f7:87:ce:65:20:48:1d:a8:72:2c:
                    9f:e5:f5:96:a4:b8:31:99:85:40:c3:c6:f4:35:64:
                    d7:dd:ea:ee:0c:7a:7d:56:3c:32:f0:2d:24:55:c2:
                    4c:79:7b:4b:70:18:11:a1:fc:b8:3f:2c:36:ce:53:
                    50:44:e0:bb:23:51:45:3d:9b:ca:52:66:ff:fc:91:
                    1a:90:10:78:3f:49:7c:48:6d:56:f3:c1:e7:b7:6a:
                    2f:51:ea:d9:3b:92:18:bb:11:4d:07:70:03:a8:6d:
                    35:c8:d6:cd:d9:8e:91:03:7d:33:ad:c0:b8:70:41:
                    9a:d5:2f:e7:43:61:59:d4:bf:52:34:aa:24:31:fe:
                    19:cd:8a:18:62:77:8a:32:c7:12:62:92:33:ff:7a:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1E:CB:B3:E1:83:A6:6D:C9:C8:09:39:D5:0E:B3:B5:85:D1:38:15
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200160.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:55:a2:77:f9:b1:47:48:8b:b4:44:fb:d4:af:af:0d:dc:ef:
         84:4f:84:da:51:12:d9:5e:28:37:ad:4f:f3:91:c9:b1:b5:98:
         ef:cd:9d:43:95:fc:47:ed:62:6c:be:d3:6d:aa:60:81:02:c3:
         1b:ef:62:cf:6d:56:54:26:95:b3:47:e8:be:af:9b:ac:09:21:
         87:eb:7a:6a:67:19:af:9e:bd:13:0b:23:ee:fe:e3:70:9a:c3:
         a8:d0:6e:96:14:82:b4:eb:f8:54:1c:4c:c1:6d:3e:82:68:5d:
         45:f9:a9:0b:d8:08:2e:5b:a7:d9:ae:65:81:5d:e4:40:5d:70:
         0c:67:e9:59:b3:7c:19:8f:09:fb:a8:e0:6c:a5:03:08:ae:82:
         49:59:3f:b5:da:53:77:5a:46:da:00:12:eb:71:19:46:3a:ea:
         81:90:71:b8:cf:bf:ef:1f:7a:d0:05:77:1c:3f:e4:fb:15:36:
         bf:8f:91:16:08:65:d5:44:93:18:e5:3a:fd:e3:46:ca:28:4d:
         92:ae:90:f7:ce:a7:69:7a:f1:c2:44:a9:8d:f2:4d:c8:c4:2c:
         91:54:20:ed:be:45:9b:38:18:38:c3:eb:f3:de:6b:9b:23:35:
         73:08:44:4e:e8:b4:ee:ff:0c:17:a0:85:9d:3e:33:12:b3:e5:
         86:a8:42:74
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUFxBTy5b//1MqARU5wCDW8kYdZtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjhaFw0yNDA0MDYwOTIyMjhaMDMxMTAvBgNV
BAMTKDUyMUVDQkIzRTE4M0E2NkRDOUM4MDkzOUQ1MEVCM0I1ODVEMTM4MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kVjTURKPP8qShoRICAEWCP0S
vu8xsMdenyYHkH08ZwDWMEOvWXjqWoOUORp+GN/CZp/ZXJHvOZ5eFM/4yMWcsEDj
nLA6z5M/qLs6CTLD/BHd6zTaenr87MsTWnFsj8Ue3HYAOVO44Z0WcVWc94fOZSBI
HahyLJ/l9ZakuDGZhUDDxvQ1ZNfd6u4Men1WPDLwLSRVwkx5e0twGBGh/Lg/LDbO
U1BE4LsjUUU9m8pSZv/8kRqQEHg/SXxIbVbzwee3ai9R6tk7khi7EU0HcAOobTXI
1s3ZjpEDfTOtwLhwQZrVL+dDYVnUv1I0qiQx/hnNihhid4oyxxJikjP/ejCDAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUUh7Ls+GDpm3JyAk51Q6ztYXROBUwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDAxNjAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1HUjANBgkqhkiG9w0BAQsF
AAOCAQEAV1Wid/mxR0iLtET71K+vDdzvhE+E2lES2V4oN61P85HJsbWY782dQ5X8
R+1ibL7TbapggQLDG+9iz21WVCaVs0fovq+brAkhh+t6amcZr569Ewsj7v7jcJrD
qNBulhSCtOv4VBxMwW0+gmhdRfmpC9gILlun2a5lgV3kQF1wDGfpWbN8GY8J+6jg
bKUDCK6CSVk/tdpTd1pG2gAS63EZRjrqgZBxuM+/7x960AV3HD/k+xU2v4+RFghl
1USTGOU6/eNGyihNkq6Q986naXrxwkSpjfJNyMQskVQg7b5FmzgYOMPr895rmyM1
cwhETui07v8MF6CFnT4zErPlhqhCdA==
-----END CERTIFICATE-----