Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS201751.roa
File:                     AS201751.roa (raw, json)
Hash identifier:          qg1pYxE1me+kJYzRlEPgyUC5W5osjYAggUEu0Vp52fk=
Subject key identifier:   98:18:00:D6:2E:55:D6:01:03:BA:1F:04:12:20:41:95:04:AB:25:40
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2E52579E8D7EC4ABBD3AE534AC7B4590770766
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS201751.roa
Signing time:             Sat 08 Apr 2023 09:22:17 +0000
ROA not before:           Sat 08 Apr 2023 09:17:17 +0000
ROA not after:            Sat 06 Apr 2024 09:22:17 +0000
asID:                     201751
IP address blocks:        2a12:dd47:83a0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:52:57:9e:8d:7e:c4:ab:bd:3a:e5:34:ac:7b:45:90:77:07:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:17 2023 GMT
            Not After : Apr  6 09:22:17 2024 GMT
        Subject: CN=981800D62E55D60103BA1F041220419504AB2540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:0e:22:c5:a9:f8:58:1a:c8:ee:32:d5:70:
                    e3:82:17:4a:9c:01:40:7a:05:83:26:30:17:55:b2:
                    40:66:1f:c5:78:6d:bc:3c:44:ef:eb:c6:cc:9b:7a:
                    7e:44:7e:9b:8e:fe:9b:13:ea:f4:77:47:3f:f2:b7:
                    6f:a2:2e:2e:7f:f3:80:37:73:ed:51:c0:57:bb:be:
                    03:0a:37:e5:2b:56:48:0a:9a:53:e0:77:37:71:c7:
                    02:bf:e4:f6:ee:a9:45:48:06:ef:3e:50:44:59:f3:
                    77:97:83:1d:64:c0:87:c1:6c:5b:68:83:fe:18:72:
                    ab:03:fd:86:15:8b:54:af:d3:11:f1:c8:04:7e:84:
                    65:8f:bb:5c:fa:bf:a2:ce:89:77:0c:d8:15:fb:ba:
                    3d:b7:68:4a:74:3e:7e:ca:b2:08:e7:70:f0:e5:b7:
                    bb:8a:a1:b2:1d:22:63:b5:fa:35:f4:0c:52:fb:5e:
                    01:b8:93:4f:6b:10:3c:95:88:ed:82:f1:60:20:6d:
                    c8:9c:48:18:8b:06:05:a1:df:3f:11:89:9b:6e:91:
                    43:51:51:99:1d:07:cb:24:6d:44:54:64:d0:ea:07:
                    93:70:a4:1d:0b:e4:8d:41:2c:c3:e9:00:0a:13:72:
                    f7:3f:c1:96:0c:ad:b9:97:cb:d5:d1:3c:47:f6:82:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:18:00:D6:2E:55:D6:01:03:BA:1F:04:12:20:41:95:04:AB:25:40
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS201751.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:ca:9b:7e:db:ef:d1:63:04:d6:14:a2:05:07:b4:45:4c:00:
         91:53:52:71:6e:08:1b:97:4b:e0:ef:be:9c:08:c3:33:31:01:
         9b:c8:94:1d:4b:12:50:9f:94:13:fe:d9:da:1a:74:f8:49:f7:
         13:a7:3c:46:ee:cd:5b:f3:38:1d:b4:55:d4:77:2f:59:d4:d2:
         a2:c7:7b:5d:8b:df:6d:14:b3:e5:fe:75:68:4c:51:c8:3d:98:
         41:6b:ef:0b:cb:50:eb:25:fb:a0:b6:2d:f4:06:0c:08:1d:af:
         61:ef:98:32:2e:8c:f5:2f:c6:92:9d:9f:5e:9a:7b:f4:73:5c:
         7b:60:27:c3:f1:93:f0:54:2f:b7:d4:a1:21:5f:07:04:2a:c7:
         9f:62:c1:55:51:c3:f9:fb:b0:80:7e:97:b8:83:71:94:66:53:
         43:69:55:0c:aa:45:3a:ee:9e:f6:56:48:7b:97:06:b2:0b:bb:
         57:ac:0d:4a:9a:65:5b:a5:b2:f0:97:16:59:15:a3:c0:17:fa:
         ec:ce:42:40:dc:93:22:13:0b:2f:fd:6e:37:95:60:65:9e:33:
         2f:9e:d8:3e:bc:31:a8:c3:60:2f:56:f3:2c:4e:72:c6:91:64:
         06:8f:73:a5:c4:44:f0:61:83:a3:b6:bf:91:71:d1:5b:4a:69:
         8c:2b:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----