Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS201386.roa
File:                     AS201386.roa (raw, json)
Hash identifier:          Hi4L3dthSXG48HOKPtX/ykPnH99OFT0cYsM2nwck7KI=
Subject key identifier:   06:66:A4:51:1C:01:0E:20:C6:41:55:A9:2D:D0:03:48:B4:97:4A:17
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3742D56E7FF68FF50A8467F2C68E94CF20003239
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS201386.roa
Signing time:             Sat 08 Apr 2023 09:22:11 +0000
ROA not before:           Sat 08 Apr 2023 09:17:11 +0000
ROA not after:            Sat 06 Apr 2024 09:22:11 +0000
asID:                     201386
IP address blocks:        2a12:dd47:83d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:42:d5:6e:7f:f6:8f:f5:0a:84:67:f2:c6:8e:94:cf:20:00:32:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:11 2023 GMT
            Not After : Apr  6 09:22:11 2024 GMT
        Subject: CN=0666A4511C010E20C64155A92DD00348B4974A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d0:e9:45:3b:68:e0:73:3b:e0:52:6b:23:22:
                    98:c1:8d:7e:88:fa:21:07:b0:91:ce:91:20:99:b5:
                    89:0a:db:98:fd:33:0d:cf:73:05:c5:6c:93:bd:a2:
                    79:de:cb:53:e9:ac:9c:bd:28:a1:e9:85:1b:76:ae:
                    19:05:82:f8:54:74:2c:37:4b:32:47:c4:ae:27:25:
                    e8:8e:59:4a:b2:ce:4f:8f:82:6d:c5:ce:44:4f:60:
                    dd:b4:56:93:c6:1f:4f:72:1c:21:b1:08:80:4f:e4:
                    c8:43:7f:fb:9b:36:1a:c1:e4:a8:b5:8a:fb:8a:68:
                    20:47:80:cf:92:67:2a:6a:6e:43:7b:ba:98:4f:74:
                    9f:45:fb:1a:51:55:ca:8d:73:49:73:51:10:a6:78:
                    81:c1:48:79:3e:93:6a:3f:bc:4e:16:61:34:27:5b:
                    a7:e6:36:fa:fe:ce:87:62:69:3d:b7:a1:a5:87:a8:
                    8f:82:09:e8:a8:12:08:86:e5:4e:92:78:86:95:c9:
                    4a:81:72:aa:cc:dd:4d:7d:7f:fd:5f:3d:6b:09:d1:
                    d1:2f:31:f4:e5:e3:1c:2e:27:e0:f6:26:a5:74:3f:
                    7b:33:77:b8:d7:eb:87:55:79:f0:00:64:b3:64:4b:
                    5b:98:90:ca:69:7a:7b:61:39:d4:85:e0:89:65:a5:
                    e5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:66:A4:51:1C:01:0E:20:C6:41:55:A9:2D:D0:03:48:B4:97:4A:17
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS201386.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:a1:c7:ae:e7:3c:08:2f:50:a6:12:29:c7:0b:04:40:3f:1d:
         8e:a6:53:38:94:eb:21:ad:d7:0f:be:b2:12:39:b7:76:74:27:
         0d:42:82:27:ac:76:41:0c:6e:16:41:73:61:40:0f:b4:4b:c1:
         ae:12:18:73:03:5b:44:7c:03:d4:65:b9:3b:09:1f:bc:7c:a4:
         ad:a9:17:44:9e:d6:ef:27:17:8b:eb:16:f7:9b:4b:aa:68:50:
         75:17:6e:88:49:0f:83:f2:2b:1d:7a:e7:22:4d:26:cf:4b:c1:
         61:96:3f:65:34:19:f3:22:20:ba:c2:6d:ea:dc:0c:70:cc:29:
         80:9e:8b:0d:85:55:ed:1d:f4:f4:be:9f:48:71:4c:96:b6:36:
         00:0e:44:1e:4d:c8:f7:ee:b7:fc:ec:ef:80:70:30:36:00:8b:
         65:d5:62:55:d5:75:a8:51:71:2b:19:4d:32:da:f2:b3:5c:2c:
         46:6a:92:14:da:a2:e5:61:91:05:ba:48:06:02:2b:53:01:f0:
         3d:05:cf:8d:43:ba:ec:22:0e:0f:84:34:56:10:d3:cf:1e:b4:
         50:1f:25:68:f4:d7:04:d5:f4:7f:6f:f7:d8:71:3e:d5:58:47:
         df:e3:21:c7:3b:e3:d2:25:50:f6:25:02:12:f3:b2:5e:46:31:
         da:88:53:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----