Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS201251.roa
File:                     AS201251.roa (raw, json)
Hash identifier:          V1333/QzOiAYjB9wvhqbhwg9q25PotLPn9EsNjynk6I=
Subject key identifier:   C2:74:5B:54:64:D6:5D:78:16:0F:84:8D:96:13:81:9B:F4:44:1A:42
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       013EEEC0D2AEE26F4C7FE4A38DFBF091B6F81E79
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS201251.roa
Signing time:             Sat 08 Apr 2023 09:22:18 +0000
ROA not before:           Sat 08 Apr 2023 09:17:18 +0000
ROA not after:            Sat 06 Apr 2024 09:22:18 +0000
asID:                     201251
IP address blocks:        2a12:dd47:8074::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3e:ee:c0:d2:ae:e2:6f:4c:7f:e4:a3:8d:fb:f0:91:b6:f8:1e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:18 2023 GMT
            Not After : Apr  6 09:22:18 2024 GMT
        Subject: CN=C2745B5464D65D78160F848D9613819BF4441A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:4a:1a:52:6c:f5:96:7f:f2:05:d0:0c:15:
                    d1:3c:9e:d2:30:b7:78:0a:41:15:5c:af:5c:ca:be:
                    b4:2b:31:41:34:7c:49:99:e4:db:e5:6c:2f:87:d2:
                    02:52:3d:1f:2d:87:ea:20:65:99:aa:e4:a5:3e:25:
                    ef:57:12:f2:0a:f4:be:0a:61:8c:88:c3:85:13:7a:
                    48:6e:75:ed:2f:b6:04:f8:21:5b:93:e4:be:24:82:
                    dd:8f:e4:f0:51:d8:5d:cd:32:16:5b:c4:d5:da:cb:
                    e2:1c:b4:c1:50:3a:38:81:60:75:6b:fa:aa:e4:b0:
                    fd:7b:76:2c:03:5d:42:d3:5e:e2:3e:22:54:dd:11:
                    9c:2b:3d:8c:67:b2:36:2e:f0:55:51:50:60:e0:c5:
                    53:be:4f:59:26:df:d5:58:0d:ef:75:7a:c3:64:b0:
                    13:bb:4c:7c:54:0a:79:14:cc:8f:8a:d0:4f:b3:21:
                    dd:68:d9:e7:08:d2:d5:09:c2:8b:92:8b:c9:49:6c:
                    17:fe:97:e3:48:b4:9e:91:ba:86:fd:60:15:99:28:
                    e8:32:e8:32:62:03:93:e3:3d:eb:c5:6f:83:4e:4b:
                    ca:1e:50:20:6f:e3:0e:ac:22:f3:39:96:0c:c7:9d:
                    a5:b2:9c:2d:88:ee:a9:86:02:68:31:96:2a:0b:bf:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:74:5B:54:64:D6:5D:78:16:0F:84:8D:96:13:81:9B:F4:44:1A:42
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS201251.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8074::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:dc:6d:fa:c9:a2:f7:6f:4b:a1:33:49:ca:2e:f4:ad:fb:26:
         85:55:34:98:bb:34:7f:5d:24:e4:f7:29:68:46:de:5e:3f:f6:
         f6:41:ed:d9:13:60:2b:67:a6:13:12:5f:5b:cd:fe:70:a8:c6:
         b0:8a:5e:cf:32:70:69:1d:41:f1:6b:87:49:ed:3f:e4:b2:50:
         bc:b1:85:d5:05:ba:64:3a:ba:9e:f3:78:e4:b3:89:63:9b:cf:
         f9:b5:1e:a4:bd:48:3c:1d:58:7d:72:88:d0:85:63:8e:1b:c2:
         5f:58:07:3f:83:0a:9c:18:7c:6e:7b:6d:85:f6:31:ae:55:ba:
         ae:74:b3:32:1f:f8:37:59:fa:18:ac:e8:92:c6:dc:55:c4:05:
         10:2e:02:db:a3:f3:2e:18:b9:e5:38:f8:79:a7:97:ad:7a:a8:
         86:e8:ea:09:b7:5a:ea:0d:4e:87:39:97:5f:e4:ea:03:71:15:
         eb:42:8c:c9:cb:fd:f2:9b:15:56:bb:cc:7c:23:6f:fa:93:59:
         c1:e8:c7:41:5c:28:56:75:37:7e:61:ac:81:d6:ea:01:66:79:
         76:61:03:6f:07:f9:8c:58:5c:c5:61:e4:70:a2:fd:ed:28:20:
         20:75:bd:9b:f2:2c:0a:b2:1b:66:c2:b4:12:94:87:ab:fa:7b:
         3d:ec:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----