Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202340.roa
File:                     AS202340.roa (raw, json)
Hash identifier:          sWsrs1MWGEvC/qV8cXoeD2Iz7nuJBngi4atcOaXauoI=
Subject key identifier:   C2:02:51:89:A1:0D:C0:7B:F4:4D:D0:83:09:FC:6F:5C:0A:41:CA:E2
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       56EFCAF23ED49FEE75D2C8E44EEB5F95C3737F3A
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202340.roa
Signing time:             Sat 08 Apr 2023 09:22:16 +0000
ROA not before:           Sat 08 Apr 2023 09:17:16 +0000
ROA not after:            Sat 06 Apr 2024 09:22:16 +0000
asID:                     202340
IP address blocks:        2a12:dd47:8162::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ef:ca:f2:3e:d4:9f:ee:75:d2:c8:e4:4e:eb:5f:95:c3:73:7f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:16 2023 GMT
            Not After : Apr  6 09:22:16 2024 GMT
        Subject: CN=C2025189A10DC07BF44DD08309FC6F5C0A41CAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:c9:3d:b4:8f:19:22:90:ef:f0:19:70:97:
                    ea:94:a0:83:44:0e:6c:86:28:92:e4:6d:ac:5e:02:
                    a8:08:9d:11:82:26:38:66:ce:10:ee:9b:68:5d:01:
                    9d:51:f5:57:e4:22:dd:10:eb:e9:52:26:b0:5c:d7:
                    bb:e0:45:76:5a:3f:d6:c6:e7:d4:61:bb:85:af:b9:
                    8f:92:69:2d:69:65:ee:79:70:42:c4:f8:06:de:61:
                    b1:d3:df:66:03:70:62:52:32:96:84:5e:35:b4:53:
                    f0:c0:23:05:40:d2:d4:fe:84:05:a1:68:f6:6f:7e:
                    95:ef:84:ed:4c:ea:7f:93:aa:44:25:c3:f8:8a:a3:
                    df:17:77:62:ec:19:66:a7:e4:c7:3f:1d:11:f4:49:
                    0a:b5:7a:0f:c4:4f:07:74:9d:5f:2e:74:18:b8:5c:
                    3d:fd:a3:3c:26:93:aa:eb:36:53:6c:9b:ca:a6:31:
                    1a:e3:07:d3:34:77:0d:b8:77:e0:20:46:08:cf:96:
                    56:5e:bb:13:2b:c4:6c:5a:a7:f0:35:6e:43:22:f3:
                    b1:e6:6c:28:e5:67:17:52:22:36:41:0d:c6:72:06:
                    af:2a:ae:63:56:20:8c:2a:16:fd:b5:ec:d2:13:7e:
                    be:d8:be:87:96:5e:cc:21:32:0b:7c:cd:09:ce:cf:
                    0d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:02:51:89:A1:0D:C0:7B:F4:4D:D0:83:09:FC:6F:5C:0A:41:CA:E2
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202340.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8162::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:50:f7:01:32:db:76:0b:f4:18:79:8f:c4:3b:8d:79:28:ca:
         f0:4d:65:53:40:14:75:b7:43:a9:ff:6f:52:62:e5:5e:fe:ae:
         72:cf:8e:dc:a2:91:bd:28:e1:db:7a:ef:39:f6:34:3c:bd:0d:
         4f:ff:b0:a6:a7:ad:f9:ed:72:1e:5f:78:0c:df:4c:84:71:51:
         51:ec:19:36:88:e5:f9:02:69:30:c5:27:d2:38:68:8f:c5:f6:
         49:98:c4:92:c9:db:9a:e4:2d:99:13:b9:18:be:dc:f5:33:fd:
         8c:17:46:98:2a:c7:e2:81:6c:e6:3b:16:a5:57:63:78:44:ea:
         1e:3c:eb:58:46:20:cf:d3:7c:c4:88:a3:aa:cf:7b:9a:4d:22:
         94:95:b9:27:ad:fd:d9:3f:b3:a3:89:dc:fd:36:35:42:53:0c:
         78:c1:fc:60:58:0d:3b:7e:fb:71:9b:ed:46:ee:eb:ea:64:0e:
         f2:31:bb:32:57:8a:54:d5:e9:ae:9c:9e:e5:ad:c9:f5:4e:fc:
         63:cc:1e:27:80:a3:ec:94:b0:58:f5:dd:9f:f2:60:93:2d:55:
         61:e8:55:06:ad:bb:bd:00:b9:b7:91:c2:2c:6d:4a:0a:a8:83:
         e6:11:2f:50:72:30:38:ae:22:1d:f6:43:d0:74:ba:90:f1:82:
         4b:69:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----