Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200566.roa
File:                     AS200566.roa (raw, json)
Hash identifier:          nxVJl2VKvoKPVQ62+l8dypSMy+OAjgNWOr1beozf0mU=
Subject key identifier:   38:0D:A1:40:F1:BA:12:4D:78:CE:1C:29:F0:E8:A1:DE:92:F1:E2:2E
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       0EA6E44DCDEBD2171E208D629F601A9FE5E8831D
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200566.roa
Signing time:             Sat 08 Apr 2023 09:22:18 +0000
ROA not before:           Sat 08 Apr 2023 09:17:18 +0000
ROA not after:            Sat 06 Apr 2024 09:22:18 +0000
asID:                     200566
IP address blocks:        2a12:dd47:d300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a6:e4:4d:cd:eb:d2:17:1e:20:8d:62:9f:60:1a:9f:e5:e8:83:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:18 2023 GMT
            Not After : Apr  6 09:22:18 2024 GMT
        Subject: CN=380DA140F1BA124D78CE1C29F0E8A1DE92F1E22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:47:b1:46:57:51:52:53:b5:c9:66:30:68:
                    9b:6c:57:15:6c:b4:66:5b:54:85:cd:5e:1e:15:24:
                    0e:06:06:2f:d3:a2:b8:e2:63:5b:d9:ce:0d:8c:f4:
                    3b:d3:3b:ba:98:cd:13:78:f7:41:cb:bd:5c:72:d2:
                    6d:83:06:4a:d7:17:d5:a8:b9:1c:70:e9:d8:2f:62:
                    e5:d8:e6:45:f4:dc:da:0c:dd:10:28:0f:ce:f1:6f:
                    8f:3a:87:fc:17:11:d1:33:4e:3d:a6:e4:1c:e9:2d:
                    54:b6:54:74:3c:e7:e9:bd:09:50:28:74:0f:95:bd:
                    df:d8:d1:24:23:94:be:ec:88:9e:c5:3c:c4:74:40:
                    02:05:f1:28:8c:47:bb:c5:5c:c0:93:97:95:34:43:
                    a3:c1:4b:e2:43:71:61:f4:a2:4e:f6:0b:fe:8c:fe:
                    e3:89:21:74:42:13:37:bc:64:8f:61:04:14:02:e5:
                    0f:2a:fa:19:11:d9:29:fc:84:fa:c8:31:6f:19:f7:
                    7a:95:34:c9:27:2b:a0:44:ea:a4:9a:d9:7b:7c:8c:
                    39:57:6a:a6:27:44:59:a8:8b:2d:a0:fb:32:0c:72:
                    8c:89:ee:a1:ca:3e:1d:a5:26:2c:4f:0f:92:04:ba:
                    e5:78:f1:c9:ab:19:1b:24:c6:32:de:f2:f1:35:89:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0D:A1:40:F1:BA:12:4D:78:CE:1C:29:F0:E8:A1:DE:92:F1:E2:2E
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200566.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d300::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:76:bd:cd:dc:47:22:28:be:db:e3:44:f9:12:1e:f0:f5:75:
         d8:ef:f8:de:f9:70:44:e8:c9:c1:ee:e6:01:68:ad:65:94:99:
         70:cf:40:d4:25:35:b7:7d:a7:0e:5b:ee:b0:61:7f:a3:c9:3b:
         b4:8d:48:b8:04:f3:43:28:d4:88:31:1f:35:90:3a:62:bd:58:
         43:24:0c:51:31:4b:74:03:94:e1:9f:d2:d1:d5:df:ec:ef:c9:
         06:52:66:42:d5:97:b8:02:14:35:ab:95:e3:ca:db:1d:10:a7:
         ef:c9:33:4a:85:c3:d2:9f:6a:2b:8b:f2:89:61:c8:eb:0d:e7:
         2f:a4:88:ac:89:c3:c4:88:9d:60:cb:98:9c:50:14:61:f5:ad:
         2c:1f:2f:33:49:3f:31:38:c1:5d:a0:08:3d:a0:69:80:d1:18:
         55:40:33:f9:1a:9f:b7:80:3b:55:4a:01:4d:f0:b9:06:c2:7e:
         0d:b7:8c:13:11:f7:d6:51:a3:62:a1:bb:33:a2:52:c9:d6:5a:
         0e:4e:e1:02:00:87:f9:26:70:64:54:18:b3:d4:26:af:c4:ec:
         12:66:01:38:84:90:8d:c7:49:22:7d:43:60:d4:a4:25:49:70:
         6c:e5:09:62:16:c7:3a:12:e8:bc:b3:85:04:1c:77:0b:a6:24:
         55:22:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----