Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202218.roa
File:                     AS202218.roa (raw, json)
Hash identifier:          UjNfc31s2l//pVvumDZWuRQMOiSCAt0XoMrvw3p+ETM=
Subject key identifier:   11:D2:CF:E0:18:6E:53:A1:53:D1:52:05:B7:4E:D0:FF:AF:B7:98:31
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3B3148B749CDE7B5A91881F9B9AE51F5F81B409A
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202218.roa
Signing time:             Sat 08 Apr 2023 09:22:20 +0000
ROA not before:           Sat 08 Apr 2023 09:17:20 +0000
ROA not after:            Sat 06 Apr 2024 09:22:20 +0000
asID:                     202218
IP address blocks:        2a12:dd47:807b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:31:48:b7:49:cd:e7:b5:a9:18:81:f9:b9:ae:51:f5:f8:1b:40:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:20 2023 GMT
            Not After : Apr  6 09:22:20 2024 GMT
        Subject: CN=11D2CFE0186E53A153D15205B74ED0FFAFB79831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:78:39:8a:dd:fc:a6:bc:1c:c0:e3:f2:74:0c:
                    f3:cd:55:58:00:9f:27:6c:d9:40:23:6b:6b:36:c8:
                    60:aa:c4:de:9a:71:26:73:14:df:e0:d1:ac:35:c4:
                    d3:66:76:17:c6:c4:0e:a5:7a:cd:6e:83:cd:f6:17:
                    91:dd:e3:fb:25:6b:70:ee:c6:63:c7:02:c4:45:6c:
                    68:cb:dc:f0:10:86:28:a7:b2:47:f2:02:67:b7:5f:
                    c5:29:97:06:91:92:1c:71:6c:cc:ef:16:04:d4:fa:
                    d0:4c:30:01:70:3c:02:bb:42:1e:86:bd:63:96:ec:
                    7a:96:d7:1a:f3:dd:aa:ee:52:94:de:4a:cc:bb:36:
                    bc:2f:af:01:74:4b:b5:f9:41:cb:4d:c7:df:ba:87:
                    1a:14:34:eb:58:97:38:21:93:b6:d5:10:58:98:48:
                    36:67:4d:40:1f:17:a5:7d:83:e3:50:8d:66:62:1e:
                    30:f3:43:b7:e4:ec:1c:c6:e1:22:d3:93:b9:12:d1:
                    a8:5d:c4:24:3e:65:7c:77:6b:42:97:d2:76:bf:87:
                    cf:01:fa:66:03:ad:af:c0:f6:1f:81:8b:5a:ae:e3:
                    80:76:9d:1e:5b:c8:d6:cd:d0:a6:52:ff:89:c2:57:
                    66:1c:d1:49:3e:b0:62:9f:69:42:d6:8a:c3:bb:41:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D2:CF:E0:18:6E:53:A1:53:D1:52:05:B7:4E:D0:FF:AF:B7:98:31
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202218.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:807b::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:91:b0:0b:54:05:78:e2:8e:0d:4e:4f:45:58:ec:db:8c:55:
         9c:c0:ae:37:a1:c3:3e:b0:e4:d6:ef:82:b3:e2:d0:11:b5:27:
         30:94:20:a9:47:6a:81:b8:26:f4:4c:00:64:39:5c:8a:c8:ce:
         53:e1:69:00:98:98:ae:6c:6d:2c:d9:d8:d3:f7:a7:7f:80:84:
         a8:2b:b8:19:9e:fc:cf:5a:f8:a9:b9:c7:91:4c:b8:7a:a6:0f:
         f8:57:48:ff:ad:d7:9e:e3:70:fa:62:fd:32:fc:e3:88:a0:fd:
         cf:2d:d4:f3:fb:ae:b9:7f:18:ff:d4:49:97:f2:8a:f3:86:3d:
         3a:ad:2d:59:a9:9f:5c:21:97:09:5c:39:8e:ed:0d:5c:5c:77:
         50:2a:ca:23:73:9b:8c:6f:b2:3a:33:02:61:33:66:ee:2c:53:
         f9:01:d1:c7:2a:67:cd:b2:b7:c7:c9:af:17:18:f9:f2:84:c9:
         e6:06:11:f4:32:93:e9:59:df:4c:ba:18:68:f4:55:52:5d:36:
         e9:ef:e9:9f:3a:ad:fc:06:26:0c:77:eb:ba:ec:23:c3:41:62:
         dc:c8:11:cd:22:77:df:c5:c7:6c:fd:b6:fb:67:e4:06:8e:5a:
         a2:8b:c2:4e:a9:a4:90:70:79:b1:b4:4e:75:09:0d:de:bb:df:
         10:b4:77:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----