Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202199.roa
File:                     AS202199.roa (raw, json)
Hash identifier:          XiB2efbvuQ6Jtk2jqaTv9dR1KLwuUxea12IiDbJ58Ik=
Subject key identifier:   E2:7E:AD:6E:60:01:F2:22:C0:F2:C8:9A:ED:F9:1D:A3:D5:1C:80:7E
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       4D8563EC929AC5D1BC1877C1D463BFC51D1A9885
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202199.roa
Signing time:             Sat 08 Apr 2023 09:22:13 +0000
ROA not before:           Sat 08 Apr 2023 09:17:13 +0000
ROA not after:            Sat 06 Apr 2024 09:22:13 +0000
asID:                     202199
IP address blocks:        2a12:dd47:8165::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:85:63:ec:92:9a:c5:d1:bc:18:77:c1:d4:63:bf:c5:1d:1a:98:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:13 2023 GMT
            Not After : Apr  6 09:22:13 2024 GMT
        Subject: CN=E27EAD6E6001F222C0F2C89AEDF91DA3D51C807E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:9d:cc:b2:c4:3d:50:de:d8:b9:e7:60:a7:
                    33:85:d7:5b:00:31:ce:f0:3f:42:ca:d6:72:f3:26:
                    7e:97:e1:60:2e:7a:a9:65:8d:bc:ec:d5:7d:c7:64:
                    74:75:ee:93:09:a1:d5:c9:62:99:a3:b0:f4:51:c4:
                    dc:bc:b1:72:87:19:e1:cc:8e:ad:ec:6b:19:f2:74:
                    4a:ea:dd:62:af:24:ed:05:aa:83:0f:d0:90:13:fb:
                    5c:21:28:f0:bd:c5:e4:74:4d:38:e9:62:8b:48:f3:
                    12:67:4b:05:75:fb:27:1a:ca:17:97:36:ee:ef:36:
                    f0:64:2c:d3:e2:e3:1a:2e:23:d5:46:02:c2:25:d1:
                    f0:3a:8f:54:a3:ec:93:20:a3:68:66:1e:07:c8:3e:
                    37:98:4e:26:74:62:ba:80:f9:ef:50:53:9f:ee:1a:
                    0c:c1:dd:75:e8:ec:fb:38:15:3c:e8:a8:eb:92:ee:
                    de:8b:27:c4:ae:bf:cb:ff:dc:82:51:f8:2d:2d:9a:
                    ce:00:e7:1d:de:a7:2a:ce:7e:ac:f9:fb:fc:1b:41:
                    5b:ed:c0:39:3a:6a:85:21:f0:42:6e:d4:41:e4:cf:
                    b3:9d:a4:d6:a8:0f:81:2b:35:e0:6a:e5:25:f4:7f:
                    fc:f4:63:87:49:db:4c:75:35:88:e0:b6:ae:99:95:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7E:AD:6E:60:01:F2:22:C0:F2:C8:9A:ED:F9:1D:A3:D5:1C:80:7E
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8165::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:48:6c:c3:e9:b6:96:90:f5:50:61:17:23:9c:46:e0:27:4a:
         bb:7f:75:07:4e:80:ae:fe:66:32:fa:da:1c:5b:25:af:39:21:
         61:53:92:33:bb:4b:f1:e1:44:71:41:38:67:67:43:b8:92:10:
         c0:ca:be:c8:86:2e:19:eb:a3:65:90:04:a9:fd:82:e2:62:7c:
         59:7a:f5:7a:eb:3f:80:ad:e3:93:51:64:e8:d1:99:42:fa:fb:
         d0:b9:f0:bf:47:06:ee:c1:24:19:e1:f3:75:90:8b:67:eb:42:
         e8:9a:5a:d4:a5:92:86:41:85:0b:b4:92:f7:48:9a:d1:8e:2d:
         15:1b:9f:fa:d1:37:b2:0e:aa:d3:2d:0a:ce:38:0d:36:4d:e9:
         a0:a9:b7:fa:1e:bb:37:8c:c5:e2:85:ce:24:ff:85:60:08:53:
         48:e5:c9:3b:3a:c7:08:d3:e6:2d:f4:f2:4f:96:72:6d:ee:85:
         db:fc:46:e8:e3:29:cb:76:68:ce:5f:4b:93:cc:08:bb:4d:b1:
         26:59:1e:f0:8c:96:30:da:71:2a:6b:99:d6:93:c7:10:42:6b:
         62:31:ef:f3:10:28:2f:97:89:b1:00:1f:64:48:47:ab:4a:b7:
         9b:3d:a9:96:6b:37:69:72:ea:d1:d6:18:70:1c:5c:2d:ec:a6:
         73:7f:f9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----