Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS201938.roa
File:                     AS201938.roa (raw, json)
Hash identifier:          znizisq0+isuSefQFndKO4q2eLB6ULh8Xdkmd//rooE=
Subject key identifier:   92:D9:3F:C3:74:F6:AB:CA:D5:2E:18:AA:12:0D:4B:C8:8D:09:B1:0D
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       485DFCE426990B4BB773808E62B7D4ECB6827F8C
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS201938.roa
Signing time:             Sun 09 Apr 2023 20:59:26 +0000
ROA not before:           Sun 09 Apr 2023 20:54:26 +0000
ROA not after:            Sun 07 Apr 2024 20:59:26 +0000
asID:                     201938
IP address blocks:        2a12:dd47:8167::/48 maxlen: 48
                          2a12:dd47:8e00::/44 maxlen: 48
                          2a12:dd47:8e50::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5d:fc:e4:26:99:0b:4b:b7:73:80:8e:62:b7:d4:ec:b6:82:7f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  9 20:54:26 2023 GMT
            Not After : Apr  7 20:59:26 2024 GMT
        Subject: CN=92D93FC374F6ABCAD52E18AA120D4BC88D09B10D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bc:8f:cb:52:b9:00:85:40:d8:c2:24:8e:24:
                    d1:fa:e5:ba:53:b1:9c:89:3f:37:2f:10:ad:f1:65:
                    d0:33:f2:34:3a:b5:b2:5f:b3:a4:c3:09:cb:d3:30:
                    19:7e:5c:03:f9:16:f1:ba:ad:a5:6b:58:c5:2c:19:
                    c3:90:4c:a3:b8:7c:e7:bd:7b:0a:c2:4b:d7:a6:cb:
                    96:57:21:21:1f:a0:05:94:6f:cd:38:b1:8c:2c:7d:
                    88:97:42:cd:f2:ed:c7:d1:66:78:b0:a1:87:14:39:
                    ef:c5:b1:9f:8f:f3:fa:2a:62:f6:93:82:65:d9:da:
                    80:fa:a6:12:3e:5d:4f:ad:86:23:b4:77:71:c7:e1:
                    19:ea:6b:1b:98:6e:d0:4d:9e:e4:b2:78:a0:73:7c:
                    b2:51:5f:d6:4d:b7:39:a0:3b:94:98:d6:f1:ea:b8:
                    dd:9e:cb:83:0e:51:8c:bf:a9:5f:6b:22:35:9b:d6:
                    ed:7f:b5:7e:cd:65:78:5e:81:6e:c9:b9:8d:73:68:
                    a1:4a:fc:bf:89:8c:0d:a1:4d:83:61:a8:e7:19:32:
                    ea:a3:7f:47:6a:61:6c:b6:ce:7a:de:00:9e:8f:a3:
                    20:3c:63:69:45:ea:e8:95:72:3f:01:96:97:46:b2:
                    45:5a:32:10:9c:a9:85:05:69:8c:ba:69:c6:6e:6a:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D9:3F:C3:74:F6:AB:CA:D5:2E:18:AA:12:0D:4B:C8:8D:09:B1:0D
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS201938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8167::/48
                  2a12:dd47:8e00::/44
                  2a12:dd47:8e50::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:41:99:b2:84:ce:65:f1:56:7f:05:74:93:34:c0:d5:34:
         3d:53:0b:ad:c7:86:42:a2:91:2e:94:8e:cc:47:05:aa:dc:fe:
         50:9c:fe:ce:b5:5c:d9:fd:8f:b5:29:21:f0:d3:2b:3d:88:60:
         37:a2:1a:f4:48:37:ee:08:e0:94:01:92:5d:41:e8:2b:8d:a5:
         4c:64:82:49:b0:f3:ba:4b:43:1c:c1:4a:cd:99:17:a9:ca:c4:
         fe:2e:5e:fc:0d:ee:2a:66:d9:ad:8e:ba:0a:60:c5:68:e6:60:
         63:f7:a7:74:e3:eb:bc:07:b5:d2:1e:f5:06:bf:90:03:cf:f4:
         e7:98:a6:7a:2d:0a:d7:f5:1c:46:8c:42:22:fb:73:f1:66:58:
         a5:08:b5:94:c3:d7:d3:d9:c7:3e:5c:a5:d9:39:87:c6:4d:17:
         25:c1:e8:52:d1:2a:cd:fa:c2:8e:dc:dc:45:1a:17:d3:b6:58:
         d9:05:36:7a:4e:8b:d0:88:02:68:82:02:56:96:7e:d5:de:4b:
         ad:ab:fe:c4:c5:22:62:0e:14:cf:5c:61:22:23:37:da:bb:c9:
         61:69:e5:01:dc:88:89:26:2f:74:78:8c:ab:b0:1b:d3:36:9c:
         f2:73:45:7b:ef:5a:ef:71:21:90:1e:1a:d6:4a:cf:36:90:c8:
         6a:48:33:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----