Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200394.roa
File:                     AS200394.roa (raw, json)
Hash identifier:          w4++2+5kd5refF3TlQiaeMrh5dRKKNkEwlVKODq40rQ=
Subject key identifier:   53:48:34:7A:99:C7:91:54:91:EC:AF:FE:3A:80:F2:C8:AA:9C:66:30
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3F4DC215D422EC1261F9393E40B8AB280FD55B75
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200394.roa
Signing time:             Sat 08 Apr 2023 09:22:09 +0000
ROA not before:           Sat 08 Apr 2023 09:17:09 +0000
ROA not after:            Sat 06 Apr 2024 09:22:09 +0000
asID:                     200394
IP address blocks:        2a12:dd47:8eb0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4d:c2:15:d4:22:ec:12:61:f9:39:3e:40:b8:ab:28:0f:d5:5b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:09 2023 GMT
            Not After : Apr  6 09:22:09 2024 GMT
        Subject: CN=5348347A99C7915491ECAFFE3A80F2C8AA9C6630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bb:93:b6:60:6b:8d:55:a0:6e:a2:dc:05:c3:
                    90:98:dd:58:5a:1d:c9:56:d1:a3:ca:e7:97:bf:56:
                    14:d2:fb:11:d3:7b:94:f0:a7:6d:09:f4:df:c8:cb:
                    5a:fe:7e:d8:a7:d3:81:f3:fc:49:16:b6:36:71:47:
                    a9:18:29:df:ee:de:7c:49:ba:0f:55:3c:6e:18:9e:
                    42:1d:c0:57:94:6c:a9:20:b1:7c:cc:4d:a3:eb:14:
                    b3:a7:42:ab:b7:0e:a5:70:47:cf:43:d5:04:d7:bc:
                    60:be:5e:65:9d:ee:e4:21:b8:a0:ae:e9:42:a0:a6:
                    79:b7:14:d1:a7:ab:a0:ea:c4:dd:6a:e1:54:92:a2:
                    13:98:ba:cd:d0:d7:d0:f0:3e:01:f6:52:0e:1d:5f:
                    c7:8a:a5:8d:cc:df:f6:80:87:5f:28:03:ff:47:81:
                    66:d4:5c:a8:fd:98:f6:19:b0:91:25:cd:e7:da:da:
                    37:95:09:1e:0f:74:93:a9:3a:ca:b9:82:8f:0e:90:
                    7f:45:5a:b3:0c:d7:2a:ed:2d:47:66:27:f8:6d:8e:
                    b8:b3:a5:be:04:55:97:b9:7e:78:7f:14:c4:a6:57:
                    ed:cc:f2:8c:7a:a0:e2:d1:55:82:e3:e2:d5:7c:25:
                    09:70:7a:f4:e0:77:22:f8:8a:9e:f9:8a:bb:bf:24:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:48:34:7A:99:C7:91:54:91:EC:AF:FE:3A:80:F2:C8:AA:9C:66:30
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200394.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8eb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:9c:3d:d1:0b:38:05:85:94:2e:c4:d3:20:2f:57:41:35:
         45:d0:58:be:0b:33:66:82:2c:46:95:d5:51:47:32:f1:50:a1:
         e4:73:8a:d6:1e:b8:8f:39:11:38:ea:ac:47:c0:ac:fe:d8:f7:
         12:d7:73:a6:3a:eb:5b:71:07:8c:3b:0d:35:1f:a0:c9:1d:32:
         20:72:93:73:77:6d:b0:b0:a2:73:21:f7:e0:5c:ff:b5:58:97:
         ec:aa:24:90:b9:73:5f:ac:b0:7a:9c:e0:5a:5c:18:f1:a8:e5:
         6b:be:16:35:49:bf:98:c2:99:46:9f:82:7b:45:54:63:ef:10:
         73:e3:b4:21:a1:31:2d:5f:aa:d2:8e:f9:24:f5:ee:85:7e:eb:
         cf:09:65:23:f6:0f:be:99:bf:33:73:80:f1:55:45:53:55:e5:
         c7:e2:76:d6:81:a1:8a:72:b5:56:ba:bb:64:9d:ed:90:51:b7:
         70:db:85:1b:ea:bb:f6:ca:6a:28:0c:55:07:98:a5:ac:1e:e1:
         c5:e9:2c:15:92:0a:85:16:14:82:3a:e0:a8:dd:fc:5e:9a:15:
         ac:7c:3e:2f:21:18:a4:af:11:75:0c:30:a1:37:42:83:b9:4f:
         19:71:a2:eb:f2:b3:06:a8:b6:a6:1f:6f:be:e3:90:89:23:ef:
         5d:6e:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----