Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202256.roa
File:                     AS202256.roa (raw, json)
Hash identifier:          odgmcQ9NF4CGfTcoyJmhHsyPGSK++5D6h77beAW3WXY=
Subject key identifier:   C7:00:1F:81:7B:30:9D:6D:4E:74:56:31:90:CB:BF:40:F2:19:49:66
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       340591F40F8369E47F1D4DED4C60EBFFE2C165
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202256.roa
Signing time:             Sat 08 Apr 2023 09:22:22 +0000
ROA not before:           Sat 08 Apr 2023 09:17:22 +0000
ROA not after:            Sat 06 Apr 2024 09:22:22 +0000
asID:                     202256
IP address blocks:        2a12:dd47:4000::/36 maxlen: 48
                          2a12:dd47:6000::/36 maxlen: 48
                          2a12:dd47:7000::/36 maxlen: 48
                          2a12:dd47:c000::/36 maxlen: 48
                          2a12:dd47:e000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:05:91:f4:0f:83:69:e4:7f:1d:4d:ed:4c:60:eb:ff:e2:c1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:22 2023 GMT
            Not After : Apr  6 09:22:22 2024 GMT
        Subject: CN=C7001F817B309D6D4E74563190CBBF40F2194966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a0:15:0c:b0:f1:67:0b:48:e1:45:f5:dd:50:
                    93:ae:fd:2e:0e:3a:a0:30:d2:ef:b8:cc:be:12:67:
                    36:31:ed:92:89:21:ae:dc:87:cc:e0:5c:3a:0e:9d:
                    2c:de:1e:09:ea:da:5a:52:95:37:e0:ec:db:6a:ef:
                    e0:0b:90:10:5a:ab:fa:e2:9f:62:29:8f:cd:eb:ca:
                    2f:43:e7:97:ed:47:4e:b8:9f:bb:5c:fd:74:2a:b0:
                    dd:05:50:a4:9f:71:c4:ff:43:1e:e3:68:70:30:83:
                    2d:97:d0:37:1f:2d:e7:ad:ca:c5:99:6b:dd:41:bc:
                    09:ab:74:44:f7:50:2e:01:15:a6:6e:2a:b4:5e:bd:
                    d9:01:5f:f4:32:11:b7:fd:ff:06:c6:08:d3:27:97:
                    35:0b:6d:bc:a2:87:a7:bf:2d:e9:35:2d:66:62:04:
                    58:e9:ad:34:20:e3:98:81:cc:41:22:6e:08:25:c0:
                    62:56:da:75:e1:d5:e0:07:35:6f:ae:3f:4d:27:56:
                    fd:03:96:55:c6:4d:11:bf:36:13:ec:95:2b:70:6f:
                    59:b7:0f:9c:70:a9:93:1b:54:65:0d:64:5c:c3:ac:
                    15:dc:7f:48:1e:38:ec:bd:2d:aa:78:3f:d8:c6:13:
                    fc:68:51:99:5c:ea:fb:49:b4:59:0c:55:2b:ee:3c:
                    e2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:00:1F:81:7B:30:9D:6D:4E:74:56:31:90:CB:BF:40:F2:19:49:66
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202256.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:4000::/36
                  2a12:dd47:6000::/35
                  2a12:dd47:c000::/36
                  2a12:dd47:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:8b:15:a1:d6:ae:b4:28:8b:3d:e8:5a:7c:2c:e0:a2:16:
         12:9b:bd:7f:ed:70:ef:69:5c:1e:33:c9:2c:ac:a2:31:17:2d:
         32:f6:2f:d2:36:01:3f:9d:30:98:38:b1:95:c5:2f:be:d3:f7:
         1f:5b:d2:c2:e1:65:64:42:4f:50:90:78:db:7a:da:cd:cb:ae:
         cb:6a:d9:4f:e9:53:cd:f0:cf:bd:65:2c:1c:fd:d7:56:93:c5:
         b7:e0:cd:fc:cf:1b:19:49:7f:64:ab:dd:98:3b:4b:54:05:1d:
         3e:74:71:40:74:9a:6b:c4:e6:d8:8a:16:2c:03:2b:6f:e9:7d:
         f1:d4:3d:45:3e:2c:fc:97:ff:95:45:b2:4b:67:04:bf:d8:18:
         ea:88:21:1f:f1:a1:9c:11:6a:b8:8c:95:7a:b4:6b:d7:74:39:
         82:57:f9:64:98:67:f6:09:9f:a8:c8:c7:b9:4e:7d:30:98:7d:
         0b:e1:60:01:38:34:54:8e:d3:95:a1:38:1d:a1:48:11:95:a1:
         79:d2:7f:85:ec:a6:c4:33:5d:44:80:3a:d5:29:c0:5d:60:22:
         e3:65:e7:25:b2:93:e7:e0:c4:00:9a:c5:26:58:ff:4d:79:d2:
         3d:a4:30:a8:57:56:00:ef:ad:f4:02:1a:ca:ab:05:97:a4:c4:
         b1:92:f2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----