Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS201658.roa
File:                     AS201658.roa (raw, json)
Hash identifier:          83xD9TRhm6oiIJK+GV0yEnf7hn5xLMXvaSwfrQ/Iqvs=
Subject key identifier:   3C:64:31:79:B0:08:20:7D:70:4A:47:DF:3A:76:3B:F2:F0:35:A7:A1
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2625A4779ECA4E56D6A57F5AB66B380384EEE7B7
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS201658.roa
Signing time:             Sat 08 Apr 2023 09:22:24 +0000
ROA not before:           Sat 08 Apr 2023 09:17:24 +0000
ROA not after:            Sat 06 Apr 2024 09:22:24 +0000
asID:                     201658
IP address blocks:        2a12:dd47:83b0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:25:a4:77:9e:ca:4e:56:d6:a5:7f:5a:b6:6b:38:03:84:ee:e7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:24 2023 GMT
            Not After : Apr  6 09:22:24 2024 GMT
        Subject: CN=3C643179B008207D704A47DF3A763BF2F035A7A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:31:ad:76:a6:8d:c4:b9:fd:b4:30:3a:28:8e:
                    d8:12:ca:9c:eb:a0:d6:b8:6b:14:26:f6:ed:3f:7d:
                    62:13:7c:04:a4:d2:b8:37:0a:4e:3c:49:3e:02:64:
                    8d:8c:b1:45:a3:f6:07:7a:e2:31:9b:2c:3f:14:01:
                    07:24:96:68:d0:58:1f:80:bf:c0:87:df:e9:73:61:
                    c2:6f:16:da:cd:74:3d:24:a9:17:85:dc:bb:d7:dd:
                    70:f0:61:0d:ba:de:1c:cd:61:dc:94:87:a6:1d:32:
                    10:69:d6:32:3d:63:ba:a6:08:9b:5f:5a:a3:57:8b:
                    80:4f:ba:33:27:5b:e9:0f:2d:bb:64:5c:f4:7f:39:
                    ec:b4:4a:26:65:a0:06:d6:19:0e:dd:6f:36:08:63:
                    c4:97:89:bd:ff:4d:ad:d3:ba:15:26:12:c7:18:71:
                    9a:38:a2:f0:03:f3:e0:d0:78:58:6f:87:f7:4a:d8:
                    8b:5b:c4:b6:0e:98:b7:d3:64:c7:ca:3c:a5:f4:a1:
                    a4:23:a2:b3:91:9f:e1:44:55:2f:53:b3:91:d4:71:
                    2f:40:ae:54:0e:75:54:04:89:14:7c:4c:f7:15:66:
                    bc:d9:89:bc:a4:6f:56:08:4f:d2:54:77:ff:99:19:
                    0c:84:2b:4f:08:9c:0c:5f:ae:0f:d2:81:3d:f0:bc:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:64:31:79:B0:08:20:7D:70:4A:47:DF:3A:76:3B:F2:F0:35:A7:A1
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS201658.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b2:67:59:8c:73:fb:8f:91:c6:07:ae:15:f5:f6:69:36:b8:93:
         79:4b:d2:63:1f:5c:45:84:e0:fd:bc:0b:de:8c:af:67:b6:aa:
         16:f0:ea:f8:a3:8e:0c:f9:e7:47:41:8a:b8:4b:f3:25:3b:ca:
         a2:a8:96:6c:5e:a2:01:be:b6:14:54:7b:20:eb:8d:8f:a8:8a:
         fb:34:7a:86:86:8f:c5:13:a7:c4:f1:88:eb:7e:be:1f:7d:e3:
         b7:d3:0b:88:a7:92:f6:ae:97:f2:33:c2:4a:e6:ec:a2:e1:13:
         95:01:55:4d:09:a4:6d:b0:d1:cf:21:be:6c:ef:67:d7:35:3f:
         b4:4b:1b:17:d9:61:6b:d7:80:18:d4:23:91:80:27:50:0e:5e:
         44:53:90:65:ba:38:b6:ea:32:50:71:cb:ab:3d:a6:9c:27:4a:
         c9:b1:a5:0b:d9:cc:1c:59:81:4d:fb:6b:b8:97:8b:d0:b6:71:
         fb:e6:ef:f8:37:79:a0:76:44:a9:bc:d3:cd:e8:43:6a:37:bb:
         82:a6:93:fd:b4:3e:96:95:11:ef:54:6b:9f:5c:a6:e0:b1:42:
         df:d1:16:3b:cd:b2:7d:c8:ca:52:1e:1f:0c:c1:10:49:47:ab:
         a3:d0:0c:b5:49:d5:2b:20:50:5d:b5:2a:3f:ee:45:cc:40:6b:
         40:1f:7a:42
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUJiWkd57KTlbWpX9atms4A4Tu57cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjRaFw0yNDA0MDYwOTIyMjRaMDMxMTAvBgNV
BAMTKDNDNjQzMTc5QjAwODIwN0Q3MDRBNDdERjNBNzYzQkYyRjAzNUE3QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMa12po3Euf20MDoojtgSypzr
oNa4axQm9u0/fWITfASk0rg3Ck48ST4CZI2MsUWj9gd64jGbLD8UAQcklmjQWB+A
v8CH3+lzYcJvFtrNdD0kqReF3LvX3XDwYQ263hzNYdyUh6YdMhBp1jI9Y7qmCJtf
WqNXi4BPujMnW+kPLbtkXPR/Oey0SiZloAbWGQ7dbzYIY8SXib3/Ta3TuhUmEscY
cZo4ovAD8+DQeFhvh/dK2ItbxLYOmLfTZMfKPKX0oaQjorORn+FEVS9Ts5HUcS9A
rlQOdVQEiRR8TPcVZrzZibykb1YIT9JUd/+ZGQyEK08InAxfrg/SgT3wvCWfAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUPGQxebAIIH1wSkffOnY78vA1p6EwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDE2NTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1Hg7AwDQYJKoZIhvcNAQEL
BQADggEBALJnWYxz+4+RxgeuFfX2aTa4k3lL0mMfXEWE4P28C96Mr2e2qhbw6vij
jgz550dBirhL8yU7yqKolmxeogG+thRUeyDrjY+oivs0eoaGj8UTp8TxiOt+vh99
47fTC4inkvaul/Izwkrm7KLhE5UBVU0JpG2w0c8hvmzvZ9c1P7RLGxfZYWvXgBjU
I5GAJ1AOXkRTkGW6OLbqMlBxy6s9ppwnSsmxpQvZzBxZgU37a7iXi9C2cfvm7/g3
eaB2RKm8083oQ2o3u4Kmk/20PpaVEe9Ua59cpuCxQt/RFjvNsn3IylIeHwzBEElH
q6PQDLVJ1SsgUF21Kj/uRcxAa0AfekI=
-----END CERTIFICATE-----