Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS201865.roa
File:                     AS201865.roa (raw, json)
Hash identifier:          ubnfFLV5j+vWUrKTjvJxymKE8RpMPKzxwV46ZvfgH/I=
Subject key identifier:   8A:9B:07:CC:F2:C6:DD:9C:23:F1:5D:82:38:A6:27:A2:2E:DC:27:92
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       77528CFAF1BDAD4FABDCA4FF64F98BB9B91CA6C9
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS201865.roa
Signing time:             Sat 08 Apr 2023 09:22:15 +0000
ROA not before:           Sat 08 Apr 2023 09:17:15 +0000
ROA not after:            Sat 06 Apr 2024 09:22:15 +0000
asID:                     201865
IP address blocks:        2a12:dd47:8168::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:52:8c:fa:f1:bd:ad:4f:ab:dc:a4:ff:64:f9:8b:b9:b9:1c:a6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:15 2023 GMT
            Not After : Apr  6 09:22:15 2024 GMT
        Subject: CN=8A9B07CCF2C6DD9C23F15D8238A627A22EDC2792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:75:78:c2:2a:41:a5:b5:d4:2c:74:15:eb:
                    4e:9d:9d:01:59:20:cf:42:35:cf:f4:9c:f7:42:67:
                    88:94:02:e9:e6:32:54:c0:44:ec:79:1a:6d:c4:0c:
                    55:70:77:e2:25:a2:e5:6a:a2:61:08:8b:eb:bd:c3:
                    9d:fc:c2:5a:13:2b:9d:2e:81:cb:ff:3a:0d:0f:62:
                    86:aa:15:93:4b:26:0a:b0:be:96:78:19:5e:53:54:
                    99:ed:02:0a:79:39:c3:52:5c:8f:fa:65:6f:40:1f:
                    5c:b3:2b:f3:79:97:eb:e2:4a:88:ab:b6:2c:f0:5b:
                    21:68:7c:62:f7:17:bb:3a:00:ef:88:e3:45:bf:69:
                    7c:1f:42:af:ce:e8:a0:e6:30:b9:ac:b4:a6:a5:0f:
                    3d:70:88:c5:cf:c3:77:a1:d1:23:cb:22:82:50:d6:
                    89:e9:c2:59:e0:89:be:34:4f:2d:17:d6:ae:e3:f7:
                    d0:f3:86:01:79:7f:61:a8:53:47:8a:74:f5:b3:11:
                    00:90:bb:d5:de:b9:0c:7e:89:45:b8:a4:f6:44:59:
                    c0:10:39:02:3a:df:8f:13:00:b7:fd:54:ae:50:cc:
                    73:90:06:79:3a:0f:82:93:f5:f6:51:08:36:96:24:
                    1c:78:18:38:e4:87:f0:04:52:46:40:34:8a:85:8d:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9B:07:CC:F2:C6:DD:9C:23:F1:5D:82:38:A6:27:A2:2E:DC:27:92
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS201865.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8168::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:83:09:60:a9:18:db:74:98:05:fd:f3:70:f8:61:25:71:
         d4:1a:c6:93:9e:ac:7a:04:45:d6:45:7e:8d:18:d1:de:29:6d:
         44:0a:88:da:27:41:90:b5:08:1c:d7:5f:93:ea:93:66:da:01:
         d9:37:fb:e1:a9:0b:a0:c6:e8:de:a7:d5:1e:6d:4d:a2:36:9f:
         e2:76:ac:c2:14:b1:d5:e3:f0:39:35:78:fa:c7:00:21:13:0e:
         76:f7:4a:bd:0b:3d:2d:cc:ab:27:d3:73:c6:16:46:89:87:6d:
         68:11:66:df:9f:e6:70:e3:0d:6c:ff:72:79:3e:2b:6f:05:87:
         78:30:59:58:a9:62:1f:02:87:96:ae:22:71:66:83:fe:68:7f:
         86:be:9c:07:17:4b:4a:ee:bf:8c:c7:b3:fa:ae:22:8f:d4:35:
         b9:54:32:02:33:30:91:a4:6a:18:63:37:17:4e:20:68:60:41:
         da:d1:dc:4d:4e:23:33:f6:1b:3a:b4:0e:6a:8c:1a:95:2f:3e:
         15:7d:55:d0:3f:1b:9a:d8:c1:dd:07:d8:d0:3d:03:af:b1:2a:
         3a:73:40:fb:f6:c3:12:26:41:9d:d1:a4:16:8d:37:ea:1f:02:
         b1:00:81:6f:28:37:18:be:33:4c:85:bc:01:ac:a6:f0:ce:a2:
         ad:26:50:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----