Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200579.roa
File:                     AS200579.roa (raw, json)
Hash identifier:          SpmDEkbIsbTOlO84fEjKZ4UaspphgA51cuo/fXs5tCk=
Subject key identifier:   8F:A3:35:D5:F1:55:27:27:D8:F6:48:F8:8F:45:9E:D6:69:86:DF:C2
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       7A40BDD4EAC281125E1E40E5BBCE16015940E63C
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200579.roa
Signing time:             Sat 08 Apr 2023 09:22:13 +0000
ROA not before:           Sat 08 Apr 2023 09:17:13 +0000
ROA not after:            Sat 06 Apr 2024 09:22:13 +0000
asID:                     200579
IP address blocks:        2a12:dd47:8700::/40 maxlen: 48
                          2a12:dd47:d000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:40:bd:d4:ea:c2:81:12:5e:1e:40:e5:bb:ce:16:01:59:40:e6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:13 2023 GMT
            Not After : Apr  6 09:22:13 2024 GMT
        Subject: CN=8FA335D5F1552727D8F648F88F459ED66986DFC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:b7:5d:9b:2b:ec:67:3d:c3:b7:a6:24:de:
                    34:2c:c9:bb:5f:17:b0:31:23:87:64:6e:fe:6d:36:
                    08:c9:c8:b5:7d:9e:cf:0b:7e:73:1b:09:b0:e5:55:
                    95:be:c5:fe:fa:65:1c:8e:15:09:52:3f:50:ab:33:
                    31:02:ac:d4:1b:c2:4f:1e:5f:f8:af:58:30:33:76:
                    1a:32:50:d1:cc:15:b8:99:c0:bb:bc:db:14:c6:cb:
                    63:02:64:06:57:49:94:6c:23:28:5b:26:1f:c4:13:
                    91:50:ca:67:4a:7f:a9:5f:f9:3c:09:e6:0f:84:04:
                    6f:af:0f:89:98:8b:26:2b:e8:5a:dd:10:54:8b:4d:
                    28:c4:42:51:7b:c7:4b:2d:5a:92:eb:7a:63:c6:39:
                    c2:c3:a9:4d:e4:5b:16:34:fd:be:ff:94:39:3c:b7:
                    ba:00:2c:03:6f:29:01:9e:b6:33:c7:57:0c:62:4e:
                    67:53:a8:a6:d9:9f:bb:84:9a:7d:cd:d7:f3:5a:95:
                    99:0e:0f:4c:ee:d0:01:0e:38:4e:61:df:7d:c7:1d:
                    7d:2d:8b:10:4d:1a:57:3b:15:a8:bc:25:1b:a8:8f:
                    5f:8e:29:c7:f7:4b:d9:7a:a5:ce:9c:3c:0a:f1:c0:
                    95:c3:a6:fb:8a:8e:4a:00:56:2e:80:d5:fc:b5:7b:
                    fd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A3:35:D5:F1:55:27:27:D8:F6:48:F8:8F:45:9E:D6:69:86:DF:C2
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200579.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8700::/40
                  2a12:dd47:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:a9:82:1d:cb:cc:68:71:d8:70:54:f5:33:19:77:1a:8f:1c:
         4b:cc:15:d4:ed:1e:f8:c8:d9:a4:43:50:90:4f:d2:61:99:e5:
         00:20:86:52:70:25:ef:cd:5e:df:72:26:8c:32:a4:2f:ca:a6:
         d3:30:5e:43:47:97:a5:92:d2:84:f0:70:e6:b8:60:cf:ed:03:
         7f:01:4c:3d:54:2c:4a:2b:27:99:2e:43:32:d5:e8:ab:92:ca:
         eb:b6:d2:cc:4f:90:6a:f9:2e:03:02:ae:24:c6:c1:1f:4d:71:
         80:d5:cf:57:d0:cd:36:f9:fd:8c:f2:28:c7:31:b5:53:5f:f9:
         96:19:7e:b1:ad:ef:30:d9:a8:bb:a1:10:83:d9:f0:35:3e:0e:
         f6:0b:5b:9d:33:34:ee:18:fe:63:82:10:03:59:38:2d:2a:7c:
         52:c5:83:77:8e:7f:a9:dc:4c:b9:c2:9f:30:b2:02:df:50:39:
         58:1f:84:d0:ab:b9:45:c8:4c:53:29:8f:05:16:d2:9f:b6:ad:
         e0:93:31:41:92:e6:d0:4e:09:22:dc:c0:0b:04:c2:1e:7f:af:
         09:2f:8f:f5:0f:1a:6c:45:76:b5:e0:96:3b:6b:5f:8d:5d:d2:
         90:a6:f6:b1:a5:37:a1:42:4e:8f:92:9b:1f:2f:5e:31:1d:10:
         50:43:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----