Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS201765.roa
File:                     AS201765.roa (raw, json)
Hash identifier:          LdibhMyUW+kcS7g+vRyjeMfACqVE8RSxRz8zMzW0d3Q=
Subject key identifier:   C3:14:0D:E5:38:4E:79:1F:F0:72:1E:55:C5:6E:3F:0A:75:4C:2D:B8
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       55103A77B4A3A3887334A114CC8C5A7CA54E90
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS201765.roa
Signing time:             Sat 08 Apr 2023 09:22:11 +0000
ROA not before:           Sat 08 Apr 2023 09:17:11 +0000
ROA not after:            Sat 06 Apr 2024 09:22:11 +0000
asID:                     201765
IP address blocks:        2a12:dd47:8360::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:10:3a:77:b4:a3:a3:88:73:34:a1:14:cc:8c:5a:7c:a5:4e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:11 2023 GMT
            Not After : Apr  6 09:22:11 2024 GMT
        Subject: CN=C3140DE5384E791FF0721E55C56E3F0A754C2DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fb:4c:79:07:c6:a7:7c:47:13:87:74:7c:91:
                    58:20:67:c8:68:91:13:80:f4:bf:14:ae:af:d5:01:
                    02:a1:8d:45:77:c2:5e:76:90:ab:1a:77:e2:3e:84:
                    d3:fa:ab:7b:ce:ae:f9:e6:82:ce:3f:35:50:93:b7:
                    c2:45:be:53:2a:5f:ea:00:54:d0:4a:d4:fe:e9:d5:
                    bf:df:e0:fe:cc:e4:0d:f5:f2:39:ac:fd:fc:a5:a6:
                    b6:c7:17:78:9a:23:ee:45:9e:35:52:86:96:8a:e0:
                    03:d7:74:03:b0:b2:4e:4c:05:cf:a1:b5:0e:84:af:
                    a0:5c:c8:d6:74:43:c8:6c:e1:e9:25:9f:85:58:27:
                    c5:e3:a8:97:c6:d7:93:29:10:d6:eb:18:38:64:8e:
                    b1:c0:ea:95:0f:73:95:14:bc:b6:15:f1:e0:62:17:
                    3e:75:4f:d5:9b:58:66:94:d2:34:89:c9:42:9d:67:
                    3f:9b:f7:b6:44:13:74:5e:a2:47:a3:82:89:ea:ec:
                    6b:32:99:5b:66:58:f6:87:b3:bd:5c:76:9c:da:93:
                    14:e0:33:bd:f0:15:83:1e:14:24:94:6e:ad:19:b1:
                    76:84:f9:41:63:37:44:a5:fc:87:e2:f5:41:4c:50:
                    18:cd:ba:3a:e4:e4:ee:54:f6:c2:8b:f6:52:34:05:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:14:0D:E5:38:4E:79:1F:F0:72:1E:55:C5:6E:3F:0A:75:4C:2D:B8
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS201765.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8360::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:e0:c2:b2:ea:3d:24:c4:5a:9f:38:20:8b:3f:d6:c6:45:a5:
         42:65:51:af:67:5b:79:73:3b:f9:e4:7a:4b:04:2b:5f:14:63:
         09:dd:d0:8d:06:34:90:8c:75:cb:31:f0:be:fe:0e:1e:e5:ef:
         0c:d8:cf:00:07:ee:79:e9:70:3f:97:0f:14:74:fd:15:d1:05:
         29:64:a7:1a:a5:3b:ec:df:51:49:29:b5:f2:1e:8b:39:ff:31:
         10:a2:70:c5:96:c4:3e:12:be:5a:48:f5:eb:64:fb:03:c1:63:
         22:bd:b7:6c:ce:b4:74:c2:70:5a:23:6a:2e:da:ec:69:96:06:
         28:c7:52:b2:e1:3a:32:40:3d:42:81:4c:c3:5c:64:bb:92:58:
         10:c5:c7:65:04:b4:06:b8:9a:79:d2:ed:e1:ad:88:b3:9b:97:
         36:3b:51:3a:1f:0d:5e:1e:74:bb:69:95:9f:cc:32:ae:cb:89:
         34:8b:20:a8:6c:cc:bb:b3:71:3a:ba:cc:73:63:be:ab:10:ba:
         af:9a:c1:a2:f7:00:99:8c:6d:73:ec:6d:12:c5:ba:05:60:b9:
         91:b3:ff:18:f4:a7:28:68:78:64:b9:6f:fe:ae:40:6f:d3:85:
         89:bb:a3:0d:0d:d8:cb:ed:7e:3d:69:c4:6b:e7:a1:c3:a2:8a:
         9e:a9:e9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----