Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202518.roa
File:                     AS202518.roa (raw, json)
Hash identifier:          h7aVy/OBbtdjs7qmmx2sV4yjru/rWNDSSORwytKiHD4=
Subject key identifier:   D1:5E:7B:34:5B:CC:CB:02:3E:F9:8A:96:E2:C5:1D:75:18:00:49:E8
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1AE45851F3C94E2E4432A009A69A3DB9421CB7FE
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202518.roa
Signing time:             Sat 08 Apr 2023 09:22:10 +0000
ROA not before:           Sat 08 Apr 2023 09:17:10 +0000
ROA not after:            Sat 06 Apr 2024 09:22:10 +0000
asID:                     202518
IP address blocks:        2a12:dd47:807a::/48 maxlen: 48
                          2a12:dd47:8160::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e4:58:51:f3:c9:4e:2e:44:32:a0:09:a6:9a:3d:b9:42:1c:b7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:10 2023 GMT
            Not After : Apr  6 09:22:10 2024 GMT
        Subject: CN=D15E7B345BCCCB023EF98A96E2C51D75180049E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:79:16:17:35:65:df:ab:2e:59:e5:1f:aa:
                    79:ea:8e:4b:2f:f2:2b:b3:de:1a:9d:3d:7e:e0:58:
                    36:68:ff:9b:da:66:79:da:44:f1:be:6b:3b:67:45:
                    9b:b7:74:24:eb:fd:45:88:a0:f8:17:9a:c6:00:63:
                    8f:fe:58:60:47:7d:3f:17:01:3a:0e:8a:31:c9:e5:
                    e8:e5:10:30:da:0a:23:bb:5c:8c:71:15:1d:9f:fb:
                    6e:4a:e8:5c:a6:04:62:7e:42:a7:d4:2a:2f:10:8d:
                    d7:8a:2b:70:eb:ad:9c:b7:54:65:26:d4:64:d2:1e:
                    da:15:b2:a0:b6:63:20:f4:18:55:6c:1d:a9:8c:68:
                    3c:0e:25:8e:c2:06:bd:cd:83:e3:76:b9:f9:cf:a4:
                    dd:f7:5f:42:0c:1d:2b:a0:2f:ee:8c:86:2b:17:aa:
                    ab:c9:db:f6:2f:a1:ed:e8:2a:85:52:d7:f4:d4:ab:
                    7d:65:a6:23:9c:18:cc:c7:1b:a7:64:10:04:a7:35:
                    27:4b:37:6d:b2:d9:3b:b6:5e:eb:ad:25:5d:cc:23:
                    76:84:6d:02:00:4c:50:e3:0e:62:53:b8:7e:47:1c:
                    6d:7f:14:3b:26:d3:5a:53:81:b8:b1:f5:c2:92:09:
                    0c:02:30:ac:d4:3d:fa:ec:d1:4c:d7:9a:d3:51:6a:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5E:7B:34:5B:CC:CB:02:3E:F9:8A:96:E2:C5:1D:75:18:00:49:E8
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202518.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:807a::/48
                  2a12:dd47:8160::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:16:d1:cc:3c:f7:b0:8f:d1:2c:e4:aa:5a:d3:4d:28:dc:
         b6:ea:22:42:5e:27:32:b2:de:cf:7b:ff:2d:d9:d1:87:aa:de:
         1c:e3:bc:a3:ca:79:9a:32:a0:3d:5f:52:eb:9a:25:ba:42:1f:
         92:4a:d1:b7:ca:02:27:8f:f2:c8:e6:60:ec:1b:d6:2a:84:74:
         8e:0d:d3:2a:f5:f2:c9:5e:5d:ef:95:c7:51:30:3d:06:4d:cf:
         1b:31:a7:b7:59:e1:54:65:24:fc:30:90:83:10:84:14:3a:ed:
         65:1b:e0:fc:07:99:29:85:6a:b6:08:04:09:05:eb:fc:b9:92:
         2a:f6:d5:13:34:fa:ee:bd:75:41:e3:c5:c4:a5:db:30:f6:c9:
         19:27:b9:85:38:12:7b:3e:ae:10:96:bb:c3:e8:71:d1:fd:e6:
         1c:7c:3b:2a:ba:e3:97:06:c9:05:38:df:6d:da:75:23:78:60:
         40:29:95:74:bb:67:80:94:7e:98:b1:fc:46:e9:ab:d1:2f:42:
         41:e5:fb:2f:31:d5:0b:be:b5:23:e3:a8:6e:00:0d:25:63:1e:
         91:c2:7f:96:72:7c:22:d8:6e:74:f8:bb:fb:e3:37:c9:2a:8f:
         be:60:ce:e1:f4:1f:50:bf:2c:7f:e0:5e:af:36:e9:57:66:83:
         1a:52:cb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----