Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200240.roa
File:                     AS200240.roa (raw, json)
Hash identifier:          FUS0YnL5XAm5I6ubBiNvCBzT3ceF6Ly0PzlIrDu9sYU=
Subject key identifier:   5C:44:80:A0:35:08:E1:79:ED:C0:12:E8:6C:DD:DD:02:07:85:75:62
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       7EDD1BA186232140295FC06ADBE470617C0A052B
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200240.roa
Signing time:             Sat 08 Apr 2023 09:22:15 +0000
ROA not before:           Sat 08 Apr 2023 09:17:15 +0000
ROA not after:            Sat 06 Apr 2024 09:22:15 +0000
asID:                     200240
IP address blocks:        2a12:dd47:8340::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:dd:1b:a1:86:23:21:40:29:5f:c0:6a:db:e4:70:61:7c:0a:05:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:15 2023 GMT
            Not After : Apr  6 09:22:15 2024 GMT
        Subject: CN=5C4480A03508E179EDC012E86CDDDD0207857562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:2e:24:9a:39:40:47:53:c2:89:32:e8:4a:
                    51:a0:0c:0a:3e:e9:41:ee:c1:f7:ca:6a:bf:9d:39:
                    32:e2:17:2b:f2:cb:57:68:f9:99:20:ad:e1:9b:f1:
                    36:42:5e:bc:55:ce:49:f1:f0:0a:86:99:1d:02:38:
                    d0:39:d5:ee:2e:f4:37:0f:b5:d4:da:ce:46:4e:76:
                    37:a1:90:b7:50:3e:71:ed:1b:cf:c4:0a:ab:e0:0b:
                    f1:b6:58:e5:a5:eb:1d:ef:b9:4c:83:2e:f9:1b:5d:
                    2d:f6:28:c4:60:88:72:d5:19:0b:ae:74:45:06:a3:
                    67:6a:49:2d:99:8a:a6:ca:53:68:8b:54:9b:28:e8:
                    ff:fe:96:61:ee:ca:9f:e5:c7:d5:95:7d:f0:89:e5:
                    de:e2:97:e0:3d:5b:ac:1b:30:d2:4e:0f:f0:59:5e:
                    62:73:0c:0a:51:45:ee:be:57:4f:73:8f:fc:ab:2d:
                    ab:7a:f2:19:98:8d:68:ab:74:41:bc:5c:5b:71:40:
                    79:24:d8:56:6c:30:bb:57:11:88:2f:07:c7:0a:01:
                    c6:ef:22:4f:54:12:44:25:a6:f8:32:0a:a9:b1:65:
                    6a:f9:31:53:5f:ff:da:7f:d7:c8:1d:4d:1f:58:25:
                    1f:22:a9:6a:52:be:0d:dd:dc:9f:5a:e8:24:4a:03:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:44:80:A0:35:08:E1:79:ED:C0:12:E8:6C:DD:DD:02:07:85:75:62
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8340::/44

    Signature Algorithm: sha256WithRSAEncryption
         70:3f:3e:64:29:ca:8b:e7:0a:68:2c:c7:77:58:21:0b:da:7c:
         f3:87:58:c3:0b:d7:93:94:64:80:14:8b:24:b2:46:c9:84:a0:
         19:7e:4a:7d:a4:df:2a:fd:1e:35:e8:ed:15:13:cd:ea:ba:f9:
         b6:30:24:ff:9d:01:c7:96:81:b7:4a:29:fe:d2:0d:89:dc:2e:
         e6:39:58:b3:86:b7:ef:cf:df:d9:21:f5:ea:80:e9:de:77:7a:
         d1:92:9d:75:be:66:06:00:d1:6e:e5:83:13:3c:d4:4b:a0:03:
         34:97:37:03:cf:e3:ef:70:d5:7f:1f:50:0d:08:85:ea:3c:5c:
         8f:34:23:4e:ac:3d:b2:04:66:03:e5:0e:ea:dd:1f:b9:b4:1d:
         71:57:96:88:a8:49:ec:d0:41:af:65:bd:5f:27:a8:43:2a:ba:
         73:c1:fe:ee:bf:89:97:18:ba:2a:ea:f7:22:f3:59:a2:f3:b0:
         5e:e9:3d:ec:64:91:da:0f:93:80:de:f2:62:9d:38:7b:f8:c6:
         e2:ba:f3:de:be:35:12:5d:7c:8f:7b:f4:87:63:d2:1d:b6:3e:
         91:d8:10:c1:8d:41:9b:cd:7d:e6:2d:ab:fc:f1:d9:88:ce:91:
         7a:38:1e:d0:e3:b8:bf:fd:6a:cd:bc:b2:2d:2a:b7:aa:53:d7:
         b0:df:e0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----