Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS201257.roa
File:                     AS201257.roa (raw, json)
Hash identifier:          Z2CMXFainmblw7jBK1V+FWh/Xeok/bI7kNBVVznM92M=
Subject key identifier:   09:CE:D6:2B:4D:5B:8E:48:A0:AA:57:D2:02:22:09:66:B4:08:59:E4
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2509374715FE8B482B4581BEA569D6C4ECF4560F
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS201257.roa
Signing time:             Sat 08 Apr 2023 09:22:26 +0000
ROA not before:           Sat 08 Apr 2023 09:17:26 +0000
ROA not after:            Sat 06 Apr 2024 09:22:26 +0000
asID:                     201257
IP address blocks:        2a12:dd47:80e2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:09:37:47:15:fe:8b:48:2b:45:81:be:a5:69:d6:c4:ec:f4:56:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:26 2023 GMT
            Not After : Apr  6 09:22:26 2024 GMT
        Subject: CN=09CED62B4D5B8E48A0AA57D202220966B40859E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:43:41:cf:e7:65:c1:b7:ae:92:02:48:52:
                    d3:40:7e:72:6c:8c:19:1a:6f:f3:23:b4:5a:6b:e5:
                    b7:86:57:28:83:82:06:40:83:64:ba:cf:46:5e:be:
                    ea:7b:44:11:51:5c:22:d1:f5:c8:9c:ac:09:0f:7f:
                    51:67:54:42:ee:ae:81:ee:10:62:67:9d:1e:c3:24:
                    3c:ed:0a:21:bf:a6:de:61:be:8b:ba:e6:18:e8:f5:
                    98:f6:b6:00:42:fc:de:ee:1b:7f:d5:7e:48:f8:1f:
                    f9:3e:d7:90:45:af:55:f4:14:3b:08:0d:3b:1d:82:
                    4e:e3:b8:a4:c8:a9:95:c5:7b:7e:77:1a:6a:10:10:
                    c9:85:21:3c:91:c6:7c:c0:36:37:ac:4e:09:9e:bc:
                    53:fe:64:ff:42:a0:28:52:d7:e6:81:fb:45:aa:21:
                    ed:b7:96:a7:bf:51:44:51:4c:07:ed:43:0d:86:80:
                    fe:35:78:d3:d7:17:a6:6b:54:2c:f4:06:00:a4:d2:
                    d8:61:e9:05:03:ae:82:af:99:15:e6:c9:7a:da:9b:
                    b9:b9:73:fa:2f:7c:1a:5e:bd:0e:24:ba:54:a4:48:
                    96:ea:71:4e:96:ac:e8:97:bd:46:eb:56:ab:5d:64:
                    3a:3d:77:fa:ff:b7:d6:89:ce:3a:cb:3e:54:14:23:
                    9a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CE:D6:2B:4D:5B:8E:48:A0:AA:57:D2:02:22:09:66:B4:08:59:E4
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS201257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e2::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:a3:2a:ab:a6:53:04:3a:b0:c7:90:e2:9f:ae:3d:15:fe:
         d4:5b:9f:37:82:4f:1a:93:16:23:6d:62:e9:49:d0:dd:23:4d:
         d1:99:81:74:3a:f7:9c:ea:71:62:c4:19:0a:2c:2a:3f:fe:f0:
         aa:21:67:94:a9:78:7b:86:46:3e:8d:2c:1a:1b:22:fa:3b:c6:
         39:9f:e4:38:b1:56:cf:13:49:7b:e5:fb:3d:3a:8a:75:55:a7:
         11:2c:28:7b:5d:86:94:b8:d9:e0:fd:d0:8b:07:ad:17:97:ba:
         9a:be:45:dc:b7:05:5d:99:76:d3:6e:0e:16:a6:e6:9c:bb:19:
         49:e4:58:91:57:af:38:e4:13:56:3b:d0:10:26:e1:8c:85:4a:
         e2:f0:59:b1:ec:5c:c9:87:62:40:3e:cc:25:54:34:4f:72:16:
         a2:d6:d0:31:9d:6c:b4:69:09:9a:c1:68:e5:0a:86:1f:3e:04:
         d3:98:fb:ed:6b:68:61:9b:50:92:82:c2:a3:c3:2e:36:a4:7f:
         7e:51:45:93:81:51:26:b8:a1:9c:77:0a:c2:92:75:d6:6e:95:
         b6:71:5b:84:fb:35:5b:40:5f:c9:70:4e:d4:0c:79:a5:77:70:
         95:e0:c9:67:60:ae:b4:e6:96:fa:97:5f:70:4a:66:48:b2:c9:
         95:b9:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----