Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202400.roa
File:                     AS202400.roa (raw, json)
Hash identifier:          Bxl3ZFpw5w7BShU/6K3lCi3OlxY0cS2ZtwKVV7hkrFk=
Subject key identifier:   C4:7D:94:A6:32:F4:A4:F2:08:88:1D:13:96:57:0D:6F:6F:E5:EF:77
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6DAAE1A51790E9C6376C26FAB8E226203A2AFDEF
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202400.roa
Signing time:             Sat 08 Apr 2023 09:22:27 +0000
ROA not before:           Sat 08 Apr 2023 09:17:27 +0000
ROA not after:            Sat 06 Apr 2024 09:22:27 +0000
asID:                     202400
IP address blocks:        2a12:dd47:8380::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:aa:e1:a5:17:90:e9:c6:37:6c:26:fa:b8:e2:26:20:3a:2a:fd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:27 2023 GMT
            Not After : Apr  6 09:22:27 2024 GMT
        Subject: CN=C47D94A632F4A4F208881D1396570D6F6FE5EF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:ba:38:9b:a8:f7:06:78:db:59:0f:ff:7a:
                    8c:5f:07:ab:09:b9:a7:a5:3b:fb:1c:0a:2b:5a:62:
                    f3:e1:6b:d1:1a:e7:99:71:6e:2d:12:ee:06:47:2c:
                    c0:28:ae:73:ea:8c:0d:a2:ba:e0:1d:f0:21:71:bc:
                    6c:cf:de:49:62:b9:60:e6:21:83:e8:3b:18:08:aa:
                    d2:39:d7:dc:cf:ae:ff:e4:40:f6:ad:ca:5a:c4:35:
                    8f:ac:ea:fc:97:24:8c:b4:a3:90:b9:21:a6:94:ac:
                    af:04:f5:ef:96:04:b2:44:e6:ae:99:70:ad:42:cf:
                    89:1c:ba:5e:2c:7f:9e:02:31:1d:75:3e:cf:9d:09:
                    9b:9d:f9:c6:59:99:e5:05:bb:31:bd:0c:4c:ab:ef:
                    a8:0c:24:4d:94:3c:0f:e8:fa:0e:25:c5:3e:f9:85:
                    8e:91:57:dc:1b:81:5f:a7:cc:bc:60:91:a6:5a:33:
                    b9:b0:ac:2f:5d:98:e5:95:2c:16:c1:21:fa:3d:42:
                    0d:49:46:69:b9:a4:ca:b4:6c:5b:33:4e:e6:18:fb:
                    39:12:a4:7f:9f:fd:ef:41:84:73:0d:e6:19:ae:4d:
                    16:c8:12:21:ab:d3:84:64:ae:a5:64:84:9e:36:02:
                    47:ae:90:ed:2a:32:c8:c4:ec:d6:07:69:30:19:2e:
                    50:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7D:94:A6:32:F4:A4:F2:08:88:1D:13:96:57:0D:6F:6F:E5:EF:77
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202400.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8380::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:7b:c6:1d:03:63:58:3f:7a:22:8a:21:c5:ee:ac:cb:68:bf:
         a6:d8:db:4f:0d:35:70:9e:46:7c:10:6b:50:24:ef:d6:11:a2:
         f9:49:4f:b2:39:37:4c:8e:77:ce:79:50:58:97:7f:24:6e:10:
         b9:a5:73:9d:bd:41:47:6c:ff:b0:b3:cb:2c:fe:2c:ae:50:83:
         ae:ef:8f:44:2c:26:31:3a:66:71:ed:4f:62:d0:7b:50:48:4d:
         2f:24:69:a1:38:44:ed:65:01:c0:91:e5:d6:2e:ff:a1:7c:69:
         be:70:7f:0d:ae:df:1b:a5:45:b0:18:1f:a7:88:2c:8d:d5:41:
         15:23:ac:cb:a2:ba:fd:a8:8a:c3:e6:d4:3b:a5:14:0f:52:ea:
         1b:05:a1:da:ff:72:92:b6:fb:04:fa:7c:a2:c4:c5:4e:7d:5f:
         f8:71:c0:cb:65:e2:34:02:d1:e1:11:c7:66:02:ee:58:5c:80:
         b2:74:00:30:ec:f7:3b:64:37:4e:f5:b0:0a:99:00:c6:89:26:
         f2:d6:11:a8:b2:93:97:1c:d9:f2:8a:68:d1:c6:f6:c8:58:0d:
         70:0a:3b:b5:aa:e1:42:2e:c6:86:63:50:15:67:bc:6f:0e:bd:
         93:8e:12:04:9b:0e:2c:49:87:c5:44:2e:fd:55:2d:38:09:81:
         79:f7:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----