Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202248.roa
File:                     AS202248.roa (raw, json)
Hash identifier:          qA0c5qHiKJTeutb3pmk97ZirylZD4BVdH1Cx52Vekxs=
Subject key identifier:   DB:46:6B:46:35:F9:DB:54:53:3E:1A:FB:81:64:5F:E7:0B:42:9A:E5
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6AEE693C9F0332FEF93B96955CACC3C255302E14
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202248.roa
Signing time:             Sat 08 Apr 2023 09:22:25 +0000
ROA not before:           Sat 08 Apr 2023 09:17:25 +0000
ROA not after:            Sat 06 Apr 2024 09:22:25 +0000
asID:                     202248
IP address blocks:        2a12:dd47:8164::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ee:69:3c:9f:03:32:fe:f9:3b:96:95:5c:ac:c3:c2:55:30:2e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:25 2023 GMT
            Not After : Apr  6 09:22:25 2024 GMT
        Subject: CN=DB466B4635F9DB54533E1AFB81645FE70B429AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:65:59:c1:e1:c5:85:3d:cd:fc:71:2e:d3:
                    29:78:8a:98:1e:e1:94:41:00:66:ad:bd:5c:a4:f3:
                    a2:8e:e9:54:c2:ce:eb:ea:60:7a:be:c0:60:81:b1:
                    9b:0b:fa:55:f0:29:47:23:10:9c:13:18:62:bf:a0:
                    1a:82:7f:24:42:5e:46:74:39:2e:aa:1e:7e:63:57:
                    65:1f:32:60:81:d2:5d:18:b5:dd:ad:df:c6:87:d3:
                    ec:19:e6:ba:72:52:d7:d1:fd:86:49:19:50:2b:27:
                    ca:ed:14:8a:47:cc:bf:b3:8f:cd:54:c4:00:36:02:
                    90:fe:c0:0e:ed:7a:31:90:f1:11:c3:47:34:34:7b:
                    df:87:ad:6e:c1:89:29:a7:ed:f8:bd:80:21:f2:ec:
                    15:0d:07:88:87:dd:39:68:b1:60:e7:b3:1d:42:5a:
                    b6:49:dc:a8:90:65:fc:05:9d:15:54:72:8f:33:16:
                    3a:a9:22:48:11:61:0e:df:1b:e7:f6:85:b5:af:02:
                    15:d2:99:dd:f5:c9:e2:ae:11:73:57:ec:cc:0e:f9:
                    95:91:9b:bc:db:95:04:01:b9:33:53:b6:29:93:63:
                    8d:f3:9f:30:8f:df:75:0a:de:56:47:8f:38:60:ad:
                    65:b7:78:76:46:1d:d9:89:af:b7:b1:1d:a4:25:8c:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:46:6B:46:35:F9:DB:54:53:3E:1A:FB:81:64:5F:E7:0B:42:9A:E5
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202248.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8164::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:85:a4:61:48:ee:04:ba:71:3d:c4:b3:29:09:c3:77:5e:83:
         f0:4f:f8:ac:bd:14:f0:c6:7b:08:cd:42:85:93:65:0e:0e:a2:
         b4:81:f5:75:77:29:6d:47:1c:89:02:42:14:ff:68:07:af:6f:
         b4:d1:62:8f:00:39:9f:48:d2:9a:65:d8:00:3f:2a:c2:74:1e:
         9c:02:9b:02:80:7b:39:09:ed:b4:f8:6f:66:07:38:e8:82:0d:
         c1:9e:81:76:c8:41:9b:cc:2a:3f:de:e2:97:15:5d:0c:80:c2:
         a3:2c:1d:a3:92:ae:85:2a:76:d7:94:6f:84:48:7f:3a:bf:70:
         7b:53:2e:68:ba:02:58:68:5d:f4:28:07:68:1c:d1:07:71:54:
         ad:25:3c:04:81:87:7d:09:24:9a:07:73:ad:86:cd:b0:ed:aa:
         01:4b:0f:77:13:3d:c1:ca:86:12:71:70:17:d4:57:f2:6a:51:
         2a:76:94:67:29:e3:a9:5c:06:df:0a:db:4c:0b:72:f4:3e:ab:
         4d:3e:61:a9:40:68:f7:9c:49:d6:7a:27:32:6d:c3:80:8c:64:
         cc:98:51:b5:87:d5:97:ff:72:d1:4e:2d:e4:ba:54:50:9d:15:
         f7:38:ac:a6:48:9e:a1:7a:17:6e:f3:fa:43:09:6b:be:20:d9:
         bd:35:49:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----