Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200226.roa
File:                     AS200226.roa (raw, json)
Hash identifier:          hiqrdSEEQB5WW+F1+C3XDJJDmihCH0JUtN9hEPGxTgo=
Subject key identifier:   DD:9F:A9:A9:A7:3F:59:F4:7C:9A:6C:8C:27:D0:14:A8:8D:06:3A:49
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6016F1F21FA686E2148427EE5E351E0CBCAB339E
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200226.roa
Signing time:             Sat 08 Apr 2023 09:22:23 +0000
ROA not before:           Sat 08 Apr 2023 09:17:23 +0000
ROA not after:            Sat 06 Apr 2024 09:22:23 +0000
asID:                     200226
IP address blocks:        2a12:dd47:5e00::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:16:f1:f2:1f:a6:86:e2:14:84:27:ee:5e:35:1e:0c:bc:ab:33:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:23 2023 GMT
            Not After : Apr  6 09:22:23 2024 GMT
        Subject: CN=DD9FA9A9A73F59F47C9A6C8C27D014A88D063A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5c:e5:97:ca:f5:4a:40:12:f4:67:5b:3c:9b:
                    6e:9f:2d:1e:75:b3:9b:d1:bf:b2:25:c0:59:90:ea:
                    40:65:a0:e6:c8:23:9d:cc:76:90:7c:af:33:e6:56:
                    d8:b2:8e:b4:9f:e0:e0:6a:98:c3:ce:8d:b9:7f:55:
                    d2:54:64:ec:dd:0c:86:55:70:97:cd:ed:ed:6f:45:
                    a9:7e:31:a3:81:49:dc:f2:01:8f:3e:82:27:47:3b:
                    9a:a1:50:cf:67:26:2f:09:8a:77:ba:ec:0e:72:8b:
                    74:9e:cc:06:a4:7b:54:a5:63:95:fb:16:db:4f:99:
                    da:13:22:c0:f4:92:2b:a2:51:30:b0:ed:24:77:fb:
                    39:92:c6:88:d7:28:a4:19:77:e9:c3:8f:cc:5b:df:
                    28:e5:08:ec:c1:38:23:f1:d9:22:a1:32:55:23:3f:
                    49:db:0b:1d:ee:7e:12:ee:2c:71:60:96:cd:72:52:
                    d8:cb:e0:aa:09:79:1f:44:65:36:92:84:42:63:b8:
                    34:65:3e:d0:f7:b1:3e:6b:6d:68:28:08:8c:6f:5a:
                    eb:56:32:7a:f4:f2:83:92:09:86:66:5a:bb:fd:1e:
                    62:f8:88:de:25:bc:83:99:2e:12:01:b5:0e:e9:9f:
                    ac:e0:5d:82:62:1d:95:f6:88:db:5a:87:ca:6c:d2:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9F:A9:A9:A7:3F:59:F4:7C:9A:6C:8C:27:D0:14:A8:8D:06:3A:49
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200226.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5e00::/44

    Signature Algorithm: sha256WithRSAEncryption
         4c:5e:4e:77:5e:1c:2a:5a:b6:d0:0f:92:7d:61:f3:a1:1d:9f:
         32:48:9d:5d:0d:d7:d1:54:cd:4a:18:30:6e:4c:f0:77:91:6d:
         d9:22:7d:a2:37:27:09:ce:51:a9:f2:9e:88:c4:37:73:aa:e0:
         c1:66:e1:39:11:fe:69:eb:1d:e0:43:8d:4f:58:ff:38:b8:0f:
         76:c1:7c:ca:3d:cc:df:2f:72:1f:2e:b3:ae:60:b4:c8:56:b9:
         21:3e:f5:b8:4a:16:c8:0f:2c:80:7e:7a:66:89:9e:85:2b:b2:
         33:9b:54:84:3e:ed:0e:5b:cb:d7:2f:e0:42:ea:7c:f6:64:14:
         cd:ce:1a:60:bf:f4:e6:05:9b:96:6f:ab:46:e6:72:ae:e1:05:
         0e:5c:ac:7e:40:c1:70:58:0a:7d:4e:89:9f:e7:e4:96:29:ae:
         77:11:89:ae:4a:57:06:de:9e:eb:53:3b:f0:e7:92:4c:43:bf:
         26:cb:de:0a:8e:5c:20:f2:74:8e:36:d0:5c:3b:e1:db:42:54:
         bb:a5:ca:ed:88:6f:21:83:53:df:fd:7a:55:13:6f:48:7c:73:
         23:6b:97:88:fd:86:c7:ec:ae:bc:bc:be:ed:91:54:f9:5e:0e:
         13:be:c4:b1:16:d0:08:c8:5c:b8:33:7d:5d:1c:1a:59:32:49:
         71:02:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----