Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200866.roa
File:                     AS200866.roa (raw, json)
Hash identifier:          Lcxv8sUqeWvKJjseGiORZv3eQYDRLqq9mJ0jbcxjCo8=
Subject key identifier:   A1:2C:A5:C0:1B:7A:83:52:87:3F:BC:1D:60:DA:6D:B3:47:53:74:6E
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       7F053571E1C31F261580A727BC958C363DE77DCE
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200866.roa
Signing time:             Sat 08 Apr 2023 09:22:23 +0000
ROA not before:           Sat 08 Apr 2023 09:17:23 +0000
ROA not after:            Sat 06 Apr 2024 09:22:23 +0000
asID:                     200866
IP address blocks:        2a12:dd47:81c0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:05:35:71:e1:c3:1f:26:15:80:a7:27:bc:95:8c:36:3d:e7:7d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:23 2023 GMT
            Not After : Apr  6 09:22:23 2024 GMT
        Subject: CN=A12CA5C01B7A8352873FBC1D60DA6DB34753746E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:10:39:28:cd:64:3e:40:8d:8f:6f:58:b6:97:
                    43:61:c0:88:76:29:ab:17:b0:a0:6c:7d:3a:38:49:
                    fa:33:3d:3e:0d:de:9c:9a:7b:ad:5d:11:6c:b8:fb:
                    48:81:0f:be:50:79:9d:6e:fc:82:fb:ca:11:83:c4:
                    a5:af:62:58:d1:fa:5d:6a:72:c0:4f:2c:4a:77:f0:
                    1e:36:6a:9c:d1:21:4e:1e:ca:a3:c2:bd:ab:8f:6f:
                    82:07:6b:71:64:84:d1:94:cf:61:48:ac:c6:1c:d0:
                    08:9f:2f:6c:a3:97:86:e4:fd:94:61:8e:3f:ac:da:
                    8e:40:00:f7:fa:22:5f:47:f5:f5:f8:c5:12:21:47:
                    9e:34:1f:f2:1c:63:4e:1a:71:fd:08:2a:69:fb:36:
                    6d:b4:63:34:36:5a:4d:3f:02:06:64:d3:12:c7:d6:
                    d6:92:7a:88:5e:09:b8:67:bb:20:4d:1e:81:45:97:
                    11:c2:6a:79:85:e8:88:6a:78:83:83:85:44:59:73:
                    2c:f5:e1:15:14:28:b1:2a:dc:42:16:3b:14:9c:31:
                    8f:fe:1c:6a:6f:e5:14:bc:c6:c4:0f:ce:2b:59:8d:
                    e7:3a:cf:09:fb:ae:e8:d9:2d:c3:da:5e:1e:df:7a:
                    5a:88:15:12:55:6e:93:93:61:5c:d4:90:38:af:65:
                    e0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2C:A5:C0:1B:7A:83:52:87:3F:BC:1D:60:DA:6D:B3:47:53:74:6E
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c3:55:65:1c:d6:ec:30:62:e6:2e:dd:3b:03:4f:ab:e1:0d:bc:
         05:21:4a:f5:de:c7:9a:8a:73:06:f7:5c:4a:9a:b5:50:61:24:
         92:90:64:0a:f2:12:06:29:49:2a:0e:ba:d3:1e:00:d3:4e:ed:
         90:5f:22:ac:70:5b:df:9f:9f:4b:1f:0a:d2:3f:2a:8c:c1:75:
         1b:42:95:28:a0:70:e4:de:2e:a4:b9:b0:77:78:cc:14:ef:22:
         a6:2b:fc:3a:c5:6e:17:af:38:e0:7c:14:a9:d2:0d:65:e6:76:
         9a:e8:8a:86:3e:52:ce:4a:4a:fe:c4:e8:bf:02:4e:a6:c9:4c:
         f7:33:52:b6:46:60:13:90:a8:65:d7:ab:de:59:8e:68:da:d5:
         46:26:92:38:47:fa:f1:55:9b:69:d5:db:da:52:e3:c9:5a:7b:
         a8:0d:07:8d:47:09:e5:11:7e:ce:21:bb:9a:eb:08:e1:7b:f7:
         fd:cd:92:40:a5:e3:20:c4:70:86:7f:c9:13:a0:18:43:64:43:
         06:75:d6:3c:8b:9f:fe:cf:bb:ea:51:bf:29:9b:64:61:28:22:
         62:32:23:69:aa:61:1b:af:a8:4f:36:a8:b8:94:e9:a3:00:fb:
         88:30:06:68:6e:c2:92:e0:d9:46:23:c0:7e:c1:d3:b8:2f:16:
         4d:13:d6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----