Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202528.roa
File:                     AS202528.roa (raw, json)
Hash identifier:          vrkZtwhYfj/1tawUC3FDuwZtrgtgq6RRkPJDtH8nlOs=
Subject key identifier:   6D:07:98:4D:6D:30:78:DA:C5:74:B8:A1:33:5C:38:E3:05:FB:CC:A2
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2D6C47663A136BE2C671A1637717C1DB1D44059A
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202528.roa
Signing time:             Sat 08 Apr 2023 09:22:27 +0000
ROA not before:           Sat 08 Apr 2023 09:17:27 +0000
ROA not after:            Sat 06 Apr 2024 09:22:27 +0000
asID:                     202528
IP address blocks:        2a12:dd47:82d0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6c:47:66:3a:13:6b:e2:c6:71:a1:63:77:17:c1:db:1d:44:05:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:27 2023 GMT
            Not After : Apr  6 09:22:27 2024 GMT
        Subject: CN=6D07984D6D3078DAC574B8A1335C38E305FBCCA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:bd:c7:e9:7b:8d:e2:b1:5f:c8:d2:91:36:
                    3c:e1:cc:7b:cd:cb:73:b1:0d:4b:22:28:0a:e9:5a:
                    4d:ef:8f:f8:bd:7a:2d:ed:3d:57:e8:25:a6:c1:24:
                    4e:6d:7f:ff:10:82:b4:a9:bb:12:91:b0:e7:5a:56:
                    f9:4e:1d:0f:fb:f6:b1:82:2d:bd:94:cc:7f:e6:3e:
                    27:20:c8:8a:0b:b3:3b:8b:8e:19:19:43:41:6b:4b:
                    0b:63:6a:62:a3:2b:24:a7:2d:1f:93:f3:55:f5:95:
                    54:6f:81:d0:d6:d6:b6:ab:6c:c4:44:59:fd:a0:5e:
                    cc:ff:e2:e4:96:64:b1:80:cc:74:58:e8:01:f9:41:
                    41:9e:5d:88:43:b3:64:0f:d6:18:f0:79:28:90:49:
                    28:48:f8:b3:34:e7:9a:7a:e9:70:1e:96:f4:b6:23:
                    ec:7b:36:46:af:12:96:5c:e6:62:b8:42:12:ea:e4:
                    ed:03:90:d2:f3:28:46:0c:e5:92:39:de:1f:01:dd:
                    67:40:6d:41:02:31:a2:39:22:a6:28:92:6c:b0:c0:
                    4a:67:64:c8:d8:9c:25:14:0e:16:14:a1:3a:3c:f2:
                    19:37:62:50:2f:df:5e:bc:34:d3:64:21:d7:3a:e6:
                    bb:ee:6b:d5:57:b7:f9:4e:55:94:2b:4f:c8:b1:fd:
                    ac:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:07:98:4D:6D:30:78:DA:C5:74:B8:A1:33:5C:38:E3:05:FB:CC:A2
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202528.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b5:5a:94:b3:cd:b0:cb:f4:d6:8c:a3:2d:1a:ec:b0:73:27:43:
         71:9e:19:58:14:67:6c:54:e6:27:90:5a:07:ce:ad:cd:1b:59:
         1b:60:23:b4:5a:ba:52:64:61:4a:1c:33:2d:f2:5a:85:b4:d0:
         ea:3d:0c:cb:02:be:c0:e9:e3:17:07:60:c4:e7:cc:4f:9a:f8:
         99:78:a9:15:d9:d4:00:88:f2:38:ef:85:4c:83:12:53:1e:d8:
         5b:11:8f:59:71:d9:91:61:ac:78:ae:b1:c7:27:20:2b:a3:41:
         e4:05:9c:63:7d:96:49:5e:64:a2:70:92:64:ff:29:05:e2:af:
         8d:2d:98:4a:a5:83:b0:68:cd:0f:e7:e2:a6:5f:df:f7:f5:93:
         e9:ad:df:bc:50:df:12:d8:59:6f:36:cb:66:6d:03:55:25:a6:
         5b:c2:91:70:2e:5f:d4:65:c0:a5:8d:ff:46:83:53:0e:6b:4d:
         5a:7e:94:99:a8:02:95:80:4e:22:30:e9:20:c1:cb:59:a9:16:
         6c:d2:7d:f7:18:6b:9b:3c:b5:29:8a:71:00:59:ab:5f:1d:f3:
         ae:4d:da:a9:ab:aa:f3:8f:9d:e3:12:7a:d6:35:2e:48:99:ff:
         f4:0c:43:87:9c:ca:56:c9:af:b0:81:62:c2:e2:7e:c1:43:c6:
         8b:4a:ae:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----