Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200950.roa
File:                     AS200950.roa (raw, json)
Hash identifier:          2LipFStypDaPblBTpx3Cw7MMXfqP0WbtMxykXDfLDzU=
Subject key identifier:   7A:13:1C:42:10:19:81:05:3B:9D:13:46:62:E2:86:B6:20:11:2A:7A
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2B1D86032FB7A0A0D09AE2FE33DA6F6D94D862B9
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200950.roa
Signing time:             Sat 08 Apr 2023 09:22:13 +0000
ROA not before:           Sat 08 Apr 2023 09:17:13 +0000
ROA not after:            Sat 06 Apr 2024 09:22:13 +0000
asID:                     200950
IP address blocks:        2a12:dd47:8e90::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1d:86:03:2f:b7:a0:a0:d0:9a:e2:fe:33:da:6f:6d:94:d8:62:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:13 2023 GMT
            Not After : Apr  6 09:22:13 2024 GMT
        Subject: CN=7A131C42101981053B9D134662E286B620112A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:7b:b5:2d:34:4b:bd:8c:e0:95:f1:58:77:
                    08:85:f6:94:0c:92:59:91:ec:39:09:b8:4e:69:0c:
                    0e:51:29:5e:15:59:e5:14:2b:cd:2f:ec:49:7f:3f:
                    d4:c6:23:13:d0:2e:cf:37:71:40:0d:06:45:eb:bb:
                    e8:73:59:24:9a:d0:44:f7:47:b1:97:4b:0a:b9:8e:
                    95:7c:fc:36:1c:72:2b:e5:19:df:63:78:6e:56:4b:
                    f1:c3:27:24:8f:65:36:4f:ce:a4:eb:e5:78:73:64:
                    07:91:01:0a:2a:f0:e0:32:8d:a3:ff:a8:3e:46:48:
                    95:75:18:89:07:65:03:24:ae:1f:fe:c5:11:2e:80:
                    32:6c:7c:8c:11:38:54:dc:ee:4b:e2:55:96:e3:ee:
                    db:0c:3f:12:17:ac:92:9a:90:ee:09:d7:f9:56:41:
                    c6:7c:57:6e:7b:38:49:d2:e0:55:b0:ef:8b:b1:bf:
                    5c:4f:73:32:20:42:88:41:29:54:2e:8e:b4:18:74:
                    ca:4c:2b:0c:56:d7:e1:92:e4:0d:8f:e5:c9:38:63:
                    0f:c8:bb:ae:64:7d:4d:21:d2:b9:7b:83:be:cc:9b:
                    eb:3a:85:18:c2:d1:20:16:d8:3c:a3:63:11:71:c9:
                    fb:5d:fa:c6:99:94:d7:95:5e:53:82:86:49:af:db:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:13:1C:42:10:19:81:05:3B:9D:13:46:62:E2:86:B6:20:11:2A:7A
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200950.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e90::/44

    Signature Algorithm: sha256WithRSAEncryption
         3f:16:43:44:69:e3:68:19:ac:cf:da:13:57:2c:3c:96:eb:fe:
         3d:e2:8d:2b:d8:34:36:89:3e:44:fb:df:df:18:7b:08:d4:0b:
         14:c4:81:fe:82:29:d5:48:fe:12:e9:4d:52:6c:4b:fe:ce:f5:
         8f:f0:b9:09:ef:36:f8:6d:e5:0e:33:3d:e0:23:39:c9:f0:f7:
         cf:a4:4b:ca:9d:eb:f0:26:76:86:08:f7:1a:bd:21:19:d9:80:
         c0:8f:b8:55:3f:ce:a1:71:d9:5e:4f:d6:ca:e0:5b:c8:16:0d:
         6e:9e:d2:a4:ab:4c:5d:8e:7f:f1:13:65:d8:87:54:69:97:a9:
         73:4a:50:44:66:39:98:fe:b3:eb:99:45:00:2e:73:57:bf:b9:
         a1:13:ca:38:16:28:6b:05:86:35:f5:33:70:4e:5c:d8:39:bf:
         c3:1d:ed:da:3f:fa:6b:1c:b1:f8:9a:c2:98:70:59:d2:00:5a:
         84:f7:e3:12:68:76:26:b5:8c:46:b6:0d:dd:62:92:82:8a:8e:
         89:4d:0e:8f:50:72:b4:15:5e:f5:fd:5a:4e:73:7b:59:11:47:
         4d:e1:9a:d7:28:11:62:ac:9b:05:a3:11:7c:8c:21:80:2d:de:
         35:a6:bb:e1:06:73:03:ac:17:d2:cb:33:5c:07:09:ab:79:e3:
         e4:99:5c:89
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUKx2GAy+3oKDQmuL+M9pvbZTYYrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MTNaFw0yNDA0MDYwOTIyMTNaMDMxMTAvBgNV
BAMTKDdBMTMxQzQyMTAxOTgxMDUzQjlEMTM0NjYyRTI4NkI2MjAxMTJBN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCidnu1LTRLvYzglfFYdwiF9pQM
klmR7DkJuE5pDA5RKV4VWeUUK80v7El/P9TGIxPQLs83cUANBkXru+hzWSSa0ET3
R7GXSwq5jpV8/DYccivlGd9jeG5WS/HDJySPZTZPzqTr5XhzZAeRAQoq8OAyjaP/
qD5GSJV1GIkHZQMkrh/+xREugDJsfIwROFTc7kviVZbj7tsMPxIXrJKakO4J1/lW
QcZ8V257OEnS4FWw74uxv1xPczIgQohBKVQujrQYdMpMKwxW1+GS5A2P5ck4Yw/I
u65kfU0h0rl7g77Mm+s6hRjC0SAW2DyjYxFxyftd+saZlNeVXlOChkmv23phAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUehMcQhAZgQU7nRNGYuKGtiARKnowHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDA5NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HjpAwDQYJKoZIhvcNAQEL
BQADggEBAD8WQ0Rp42gZrM/aE1csPJbr/j3ijSvYNDaJPkT7398YewjUCxTEgf6C
KdVI/hLpTVJsS/7O9Y/wuQnvNvht5Q4zPeAjOcnw98+kS8qd6/AmdoYI9xq9IRnZ
gMCPuFU/zqFx2V5P1srgW8gWDW6e0qSrTF2Of/ETZdiHVGmXqXNKUERmOZj+s+uZ
RQAuc1e/uaETyjgWKGsFhjX1M3BOXNg5v8Md7do/+mscsfiawphwWdIAWoT34xJo
dia1jEa2Dd1ikoKKjolNDo9QcrQVXvX9Wk5ze1kRR03hmtcoEWKsmwWjEXyMIYAt
3jWmu+EGcwOsF9LLM1wHCat54+SZXIk=
-----END CERTIFICATE-----