Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202118.roa
File:                     AS202118.roa (raw, json)
Hash identifier:          svmsDNI1xXbGFxEHcLq3eCWwPxczOb5ttnTz+XM3Auk=
Subject key identifier:   6B:E0:48:A0:67:E1:5D:7F:70:CF:F5:B6:73:CD:6C:20:45:48:57:96
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       48172EFB6DDAE4FF58BCA80467D36C481292A5DE
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202118.roa
Signing time:             Sat 08 Apr 2023 09:22:22 +0000
ROA not before:           Sat 08 Apr 2023 09:17:22 +0000
ROA not after:            Sat 06 Apr 2024 09:22:22 +0000
asID:                     202118
IP address blocks:        2a12:dd47:8350::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:17:2e:fb:6d:da:e4:ff:58:bc:a8:04:67:d3:6c:48:12:92:a5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:22 2023 GMT
            Not After : Apr  6 09:22:22 2024 GMT
        Subject: CN=6BE048A067E15D7F70CFF5B673CD6C2045485796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:79:ed:49:0f:07:30:ba:dc:01:05:98:30:
                    dc:18:60:c8:7b:50:66:73:d7:6c:40:3c:e9:d9:a8:
                    db:08:a5:8e:11:44:21:53:40:e6:53:59:6e:b7:0a:
                    c1:fa:c4:70:60:8c:b1:db:6a:13:ff:91:93:95:1b:
                    11:a3:18:6b:c3:7c:04:e3:bf:f3:3f:44:42:02:19:
                    e1:17:c9:5a:60:34:2d:e5:9a:ab:86:7a:ad:8e:35:
                    b4:7a:ab:6e:d1:a7:9e:01:fa:0e:57:57:93:69:82:
                    b2:89:a8:ef:08:c1:31:2d:76:ae:17:6b:e1:76:0d:
                    03:8e:71:7a:9f:7b:56:36:de:f9:a4:e7:60:fa:84:
                    bb:e2:93:1e:a8:26:e0:c9:a2:24:88:d9:80:78:94:
                    e4:6c:78:09:c4:c4:af:65:5b:6c:e2:22:aa:8f:ec:
                    40:40:05:71:67:8b:83:f1:d2:d1:13:48:73:8e:6c:
                    05:c8:ff:55:4f:c9:b5:c7:a1:4f:d6:32:dc:9a:86:
                    61:e6:19:7f:52:13:6b:c3:4b:95:73:2e:fe:e4:bc:
                    36:61:2d:29:b6:32:91:3c:b7:91:d4:d3:4d:37:84:
                    f1:58:6e:c7:61:bc:bd:86:18:df:dc:51:03:8f:02:
                    66:04:2f:67:96:9f:83:41:1c:b0:83:49:41:5c:d6:
                    25:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E0:48:A0:67:E1:5D:7F:70:CF:F5:B6:73:CD:6C:20:45:48:57:96
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202118.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8350::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:f9:f0:88:87:1a:67:8b:2c:26:0c:b8:f7:ed:ba:13:54:ac:
         86:a0:c4:e9:47:0c:47:2c:d2:42:6f:64:b2:94:d4:f8:61:ed:
         1e:37:53:90:6a:a3:ba:27:79:71:b5:91:2e:fa:d3:d6:1e:ce:
         b6:0e:ef:c6:8a:97:9a:3f:97:3c:ee:07:54:e9:7c:40:10:5c:
         d8:d8:28:83:49:34:8b:75:9f:13:21:bd:95:2a:55:c7:49:bf:
         3a:f4:f8:53:90:41:ba:8a:a2:e5:cb:e0:32:2f:db:5c:eb:63:
         44:ae:ed:6d:f5:7c:db:47:1d:7f:ba:74:b3:f2:47:a9:5c:64:
         2f:54:22:b5:eb:e0:32:9d:d1:6b:bb:fb:49:d4:c8:3a:1b:92:
         85:ae:62:a1:d8:2d:21:29:b1:7b:5b:d0:bb:92:95:c0:4c:53:
         09:6d:49:0b:87:73:a1:2b:eb:23:78:61:31:c4:d0:65:b9:cf:
         c9:1f:f0:20:db:82:35:79:db:8f:ff:7b:65:51:da:01:04:55:
         3a:6e:26:be:0b:bb:60:e6:28:5b:29:55:b8:d8:cf:51:89:85:
         c7:1d:86:6c:60:e0:90:fb:62:55:63:d6:3f:61:f1:b3:9e:ee:
         9a:54:cc:e5:29:17:d8:2b:11:74:0f:67:43:86:da:d9:c4:5a:
         0c:23:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----