Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202412.roa
File:                     AS202412.roa (raw, json)
Hash identifier:          pkcsgqTlmCnNag0Or9cwNq0QLjH+E4t1d7rfdurOvEs=
Subject key identifier:   9C:E2:AF:9D:64:1F:EC:F3:F9:B9:FD:89:2E:3C:34:A0:5F:D0:E6:E3
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       5BBA4340BA1B5AAE965CC0D135A88E515C1B98C7
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202412.roa
Signing time:             Sat 08 Apr 2023 09:22:18 +0000
ROA not before:           Sat 08 Apr 2023 09:17:18 +0000
ROA not after:            Sat 06 Apr 2024 09:22:18 +0000
asID:                     202412
IP address blocks:        2a12:dd47:8161::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ba:43:40:ba:1b:5a:ae:96:5c:c0:d1:35:a8:8e:51:5c:1b:98:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:18 2023 GMT
            Not After : Apr  6 09:22:18 2024 GMT
        Subject: CN=9CE2AF9D641FECF3F9B9FD892E3C34A05FD0E6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:4d:53:ec:22:67:1d:9f:b9:52:66:90:b3:
                    a3:8b:80:ad:30:6a:ac:e5:60:f0:bc:c4:cd:6b:03:
                    ff:84:6b:76:46:96:d6:83:c1:80:4a:e0:e8:a4:e0:
                    03:04:37:fe:12:47:d4:17:32:c6:30:3e:63:b6:34:
                    f7:2b:c7:2c:02:0d:4e:eb:e2:ee:ea:1c:d6:aa:3d:
                    d6:e8:25:20:e8:73:9d:63:fc:34:87:e8:5d:8a:97:
                    e1:1b:08:40:00:ad:10:e1:d7:78:ff:62:17:50:7d:
                    17:a3:62:bd:31:99:bc:b6:b8:7d:c5:85:a1:d8:dc:
                    af:26:8f:a9:a9:63:6a:ed:5b:4e:08:e1:0f:76:98:
                    6b:e1:ec:ed:01:2d:27:fd:ff:40:e5:6b:c9:99:e5:
                    d9:03:1b:a9:77:9f:d1:e5:09:54:f0:25:e5:6e:00:
                    04:3d:b3:e7:18:be:e7:04:c4:79:4b:5c:0f:65:33:
                    91:36:5c:1e:a4:7b:5a:cf:ea:d9:9a:34:48:36:86:
                    be:b5:42:9a:e1:a5:71:df:e0:a5:d6:e2:73:d5:62:
                    ff:da:ff:8f:98:24:f7:c8:2b:27:02:6e:1e:f3:89:
                    39:28:49:cc:2b:8d:23:fe:5a:b8:60:d8:f9:f8:40:
                    de:71:02:9a:be:3c:7a:58:7b:d4:3c:44:1b:ba:ef:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E2:AF:9D:64:1F:EC:F3:F9:B9:FD:89:2E:3C:34:A0:5F:D0:E6:E3
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202412.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8161::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:64:1e:8f:0f:c7:c9:f7:56:52:0e:58:95:7b:cc:8e:e6:cd:
         24:a0:63:d1:5b:17:5d:97:06:79:3f:12:62:26:4e:7e:07:7e:
         8f:9e:c8:05:8d:ae:cf:01:9b:ef:0c:a6:48:b6:1e:b0:20:61:
         24:bf:bd:86:2f:3e:16:ea:08:56:4d:8c:c3:04:fa:0f:89:66:
         37:3f:68:d0:22:8a:bd:7f:ee:71:b6:91:b6:06:f9:61:02:be:
         ea:17:88:43:bb:e2:d1:d8:5c:0f:7b:90:59:fb:0c:ea:5a:75:
         90:66:13:27:e6:ae:1c:28:09:e1:d1:e6:63:d5:19:58:b4:00:
         57:a1:70:17:fe:a3:21:a8:1b:b0:20:fe:dd:c7:05:02:28:9e:
         49:17:f6:2f:d7:ff:58:56:9e:f5:3a:d4:dc:8a:05:82:7c:31:
         9e:fd:79:a7:1f:a4:0f:fe:c9:28:9c:b6:07:88:30:3f:49:7a:
         d2:17:e7:58:5e:b9:35:c9:de:c7:a6:61:51:89:99:5f:f5:d3:
         b3:d6:fa:5a:74:09:e4:e2:81:a8:81:fe:62:48:00:22:61:eb:
         8b:34:f7:42:64:8f:4d:d8:b2:95:ad:0d:df:68:50:4f:b6:6b:
         35:11:64:29:3e:0b:62:72:e1:33:eb:b1:4e:ef:07:a0:36:06:
         5a:6c:fa:46
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUW7pDQLobWq6WXMDRNaiOUVwbmMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MThaFw0yNDA0MDYwOTIyMThaMDMxMTAvBgNV
BAMTKDlDRTJBRjlENjQxRkVDRjNGOUI5RkQ4OTJFM0MzNEEwNUZEMEU2RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3a01T7CJnHZ+5UmaQs6OLgK0w
aqzlYPC8xM1rA/+Ea3ZGltaDwYBK4Oik4AMEN/4SR9QXMsYwPmO2NPcrxywCDU7r
4u7qHNaqPdboJSDoc51j/DSH6F2Kl+EbCEAArRDh13j/YhdQfRejYr0xmby2uH3F
haHY3K8mj6mpY2rtW04I4Q92mGvh7O0BLSf9/0Dla8mZ5dkDG6l3n9HlCVTwJeVu
AAQ9s+cYvucExHlLXA9lM5E2XB6ke1rP6tmaNEg2hr61QprhpXHf4KXW4nPVYv/a
/4+YJPfIKycCbh7ziTkoScwrjSP+Wrhg2Pn4QN5xApq+PHpYe9Q8RBu67xjRAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUnOKvnWQf7PP5uf2JLjw0oF/Q5uMwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDI0MTIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgWEwDQYJKoZIhvcNAQEL
BQADggEBAIhkHo8Px8n3VlIOWJV7zI7mzSSgY9FbF12XBnk/EmImTn4Hfo+eyAWN
rs8Bm+8Mpki2HrAgYSS/vYYvPhbqCFZNjMME+g+JZjc/aNAiir1/7nG2kbYG+WEC
vuoXiEO74tHYXA97kFn7DOpadZBmEyfmrhwoCeHR5mPVGVi0AFehcBf+oyGoG7Ag
/t3HBQIonkkX9i/X/1hWnvU61NyKBYJ8MZ79eacfpA/+ySictgeIMD9JetIX51he
uTXJ3semYVGJmV/107PW+lp0CeTigaiB/mJIACJh64s090Jkj03YspWtDd9oUE+2
azURZCk+C2Jy4TPrsU7vB6A2Blps+kY=
-----END CERTIFICATE-----