Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200879.roa
File:                     AS200879.roa (raw, json)
Hash identifier:          06DBVvaIgE58wdlGzLfcHP+IL58qb6QR/VPndBTDgP0=
Subject key identifier:   F0:8E:95:51:F0:71:49:ED:C7:D4:1B:8C:F1:F5:78:9B:FA:A8:6C:8E
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       090E381E2449D5803F2A800CC9B2C00BBF27A185
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200879.roa
Signing time:             Sat 08 Apr 2023 09:22:25 +0000
ROA not before:           Sat 08 Apr 2023 09:17:25 +0000
ROA not after:            Sat 06 Apr 2024 09:22:25 +0000
asID:                     200879
IP address blocks:        2a12:dd47:df00::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0e:38:1e:24:49:d5:80:3f:2a:80:0c:c9:b2:c0:0b:bf:27:a1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:25 2023 GMT
            Not After : Apr  6 09:22:25 2024 GMT
        Subject: CN=F08E9551F07149EDC7D41B8CF1F5789BFAA86C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:c2:da:b5:80:0a:56:c7:45:67:3d:a3:86:
                    b5:dd:1c:c4:c6:ab:6b:a8:4e:dc:b1:f6:c3:81:a1:
                    08:72:fa:36:3b:ff:71:c2:eb:fb:ab:e5:90:0a:6c:
                    7f:fb:54:ef:74:dd:79:65:84:df:53:65:23:c4:11:
                    67:db:20:4f:02:5a:13:0c:02:cf:5f:e4:7f:ce:a9:
                    a9:29:5e:ad:06:cb:aa:05:54:8b:0d:1c:68:3a:f3:
                    a2:e4:b3:b8:36:d4:f1:24:5c:fc:2f:72:d9:6a:96:
                    0d:9f:ab:59:bd:53:50:4a:29:44:d7:86:35:f9:88:
                    b1:2c:22:71:7a:bb:ca:bb:73:84:e4:49:09:6b:93:
                    c2:58:55:36:04:57:c4:8e:2a:7b:d3:cd:24:40:85:
                    b9:14:12:55:90:5c:3c:35:3f:9b:56:d7:c2:a4:a7:
                    81:7b:a2:34:03:63:42:3a:1b:05:29:16:35:6d:0c:
                    3c:49:00:84:80:73:bc:bf:1c:f7:26:43:c5:e7:6c:
                    60:e1:54:45:0c:97:5b:81:8b:55:cb:72:99:3f:09:
                    01:f9:7f:f9:ab:30:5d:23:4e:a9:28:1a:fe:72:80:
                    ea:ab:bf:97:7f:eb:54:3f:ed:18:18:47:22:d5:6e:
                    00:45:84:4c:c0:83:b5:de:6f:a0:37:74:78:56:73:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8E:95:51:F0:71:49:ED:C7:D4:1B:8C:F1:F5:78:9B:FA:A8:6C:8E
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200879.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:df00::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:3b:ef:53:bf:a3:34:30:98:7e:89:32:5f:52:46:05:de:2e:
         e4:29:e8:4e:13:3a:b0:13:9a:6c:65:14:02:49:a1:e2:d3:27:
         5e:0e:ad:af:bd:cf:c4:c4:c5:42:0b:34:1c:e7:4d:74:99:ca:
         d4:62:a4:2a:5a:c5:6e:79:63:14:14:50:67:c8:5a:d9:87:4a:
         d6:74:e4:91:e0:f8:44:41:04:33:6c:4f:24:87:5e:61:90:d1:
         09:9d:31:74:25:7b:a6:c5:74:bf:65:1d:87:00:42:b5:f9:4e:
         a0:c7:d7:73:7a:0e:ac:d7:4e:e5:75:86:e3:cb:36:00:f3:00:
         eb:bf:77:5c:f9:0b:a5:8c:95:e8:90:b1:4b:43:6f:80:64:05:
         be:25:85:0d:fe:a0:fe:8d:d4:65:36:77:8a:e0:24:63:9e:e3:
         e7:60:89:a2:32:d0:d3:2e:45:92:0b:16:98:b8:bd:86:53:d7:
         f0:62:94:2c:91:eb:9b:dc:fe:30:f6:75:11:38:68:fc:2a:f1:
         fa:32:0c:31:91:5d:32:c5:47:a9:8d:67:4b:9e:ed:9e:92:42:
         f5:4b:3a:24:9c:92:d2:51:5b:a6:33:4a:c8:b2:da:3c:96:2e:
         9f:e3:7e:ab:25:98:d8:e1:53:93:fb:2a:85:e1:86:10:83:83:
         76:34:a4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----