Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200529.roa
File:                     AS200529.roa (raw, json)
Hash identifier:          RZjzVrpFIcZi4JxKK77zepJT1R85g2y9/mu/4yW4rg4=
Subject key identifier:   A3:D9:1A:63:AF:F3:4A:F0:E3:3D:B3:C2:E5:E9:1D:1A:03:82:3A:09
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       68AC8CC6E4DFE258A3AEAB14700A1DED012A6A5A
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200529.roa
Signing time:             Sat 08 Apr 2023 09:22:21 +0000
ROA not before:           Sat 08 Apr 2023 09:17:21 +0000
ROA not after:            Sat 06 Apr 2024 09:22:21 +0000
asID:                     200529
IP address blocks:        2a12:dd47:d500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ac:8c:c6:e4:df:e2:58:a3:ae:ab:14:70:0a:1d:ed:01:2a:6a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:21 2023 GMT
            Not After : Apr  6 09:22:21 2024 GMT
        Subject: CN=A3D91A63AFF34AF0E33DB3C2E5E91D1A03823A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:57:96:ef:23:b6:43:83:96:69:a9:d9:c2:
                    bb:50:66:6e:ef:79:4b:16:2c:71:c0:2e:8e:25:f7:
                    74:6a:92:0a:47:d6:d7:77:ba:d1:05:98:c6:0a:92:
                    0f:07:84:62:be:ea:84:3b:76:81:a3:0c:66:6c:f5:
                    ca:2c:49:8b:e9:55:ae:6e:17:37:76:5f:55:94:5e:
                    f7:c6:f5:c5:57:f0:cc:b9:83:bb:78:98:25:95:de:
                    b3:a6:6d:b8:05:ad:cd:51:3b:5f:4d:d6:81:dc:b9:
                    10:2a:4d:a9:fd:68:26:0b:85:f4:e0:9a:cd:ab:8f:
                    78:cb:01:31:14:7e:8c:ce:3e:67:fa:b9:b6:b2:39:
                    20:df:30:e9:74:9c:85:cb:ba:85:b9:5d:04:30:1d:
                    af:61:60:db:38:7b:e3:c6:bb:e5:2b:48:e1:d0:b3:
                    a7:eb:da:1f:0f:18:80:05:71:62:84:b4:97:65:e0:
                    58:09:76:0e:7e:45:e8:a9:60:dd:e6:d4:ae:8b:1e:
                    75:53:f3:1f:83:da:5c:e2:93:a9:4a:08:78:97:7e:
                    44:d2:ec:8a:31:75:10:5a:4d:16:e5:bb:8e:94:70:
                    ea:a8:29:86:4b:04:22:13:41:19:73:b2:7d:3a:67:
                    fd:32:6c:ec:3c:8b:22:10:6b:06:30:c4:8a:4e:39:
                    22:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:1A:63:AF:F3:4A:F0:E3:3D:B3:C2:E5:E9:1D:1A:03:82:3A:09
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d500::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:a1:00:8e:08:70:8b:94:f3:a6:fd:12:db:3d:f2:e0:b5:99:
         bc:aa:54:1b:02:ec:05:d7:da:4f:02:47:59:c6:68:ae:fb:69:
         74:21:6c:63:e1:c1:35:87:83:33:29:ee:2b:da:0e:2f:3d:f9:
         a3:5b:35:be:29:67:81:fa:ae:6a:a2:2f:af:18:c0:45:df:77:
         a5:c4:22:90:94:8d:4d:71:6e:3d:6a:0b:ea:94:3a:80:c2:90:
         21:07:c5:74:44:04:de:0b:5a:d5:1c:75:66:02:d2:02:f9:d5:
         fe:d5:d8:0b:81:83:d0:b2:1b:52:83:61:82:18:99:ca:14:65:
         4a:f2:74:03:56:cb:ba:4e:df:74:5a:2f:23:ec:79:eb:f3:14:
         d5:cf:f5:a9:de:10:32:3e:2d:c5:f3:2f:34:92:99:f9:c2:59:
         95:98:62:2e:bb:7f:fd:df:19:fd:52:c3:18:11:52:21:e9:da:
         14:2d:8f:ed:03:84:84:bb:ed:10:f7:00:f7:13:81:b5:32:8b:
         64:22:8a:16:a6:b3:76:ba:8d:41:3c:7d:05:2b:f6:84:af:f8:
         7b:ba:00:bb:1e:4c:ca:cb:b4:1b:06:c0:e8:a9:6d:41:6d:ea:
         41:ca:ee:a6:93:f8:8b:e5:0e:be:54:37:b2:5f:5d:e0:4b:7a:
         43:71:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----