Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202559.roa
File:                     AS202559.roa (raw, json)
Hash identifier:          0EE1ygy8H1lQX1IaaRawetGrR9z05x2pQP9RnYz6in4=
Subject key identifier:   08:17:AF:E8:FF:01:3E:A0:5B:F4:5E:9B:99:F6:CC:03:27:25:A6:00
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1E55AA1074575635770034D5FFBA16A8867F9BBB
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202559.roa
Signing time:             Sat 08 Apr 2023 09:22:11 +0000
ROA not before:           Sat 08 Apr 2023 09:17:11 +0000
ROA not after:            Sat 06 Apr 2024 09:22:11 +0000
asID:                     202559
IP address blocks:        2a12:dd47:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:55:aa:10:74:57:56:35:77:00:34:d5:ff:ba:16:a8:86:7f:9b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:11 2023 GMT
            Not After : Apr  6 09:22:11 2024 GMT
        Subject: CN=0817AFE8FF013EA05BF45E9B99F6CC032725A600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:43:92:07:69:78:e6:cf:46:cf:e6:30:36:
                    89:8b:90:bf:c8:b5:f6:54:6d:3d:f9:71:5f:20:f5:
                    67:2b:ed:a3:29:16:13:49:c7:29:4d:0e:1d:a7:09:
                    5c:c9:49:bf:70:71:2c:2c:60:05:57:05:71:38:75:
                    0d:f0:7d:a9:df:03:f9:b8:f0:50:eb:5e:65:46:af:
                    f1:ea:ce:2a:c5:dc:96:68:f3:fc:69:d3:3d:d2:b3:
                    b5:68:b6:2a:bb:4d:11:80:35:01:ba:34:b5:8c:13:
                    ec:a7:23:f3:e1:3d:47:0b:ce:1c:39:e4:ee:12:33:
                    47:23:39:22:07:79:bc:08:fc:0c:d4:92:e0:34:87:
                    dd:94:23:2b:6c:1f:94:0b:cf:60:dd:70:5b:80:c0:
                    7c:ca:01:0d:82:a7:9b:fe:da:97:60:0d:02:ae:9a:
                    c9:78:96:34:88:cc:80:ce:d9:32:ef:79:47:11:81:
                    12:0a:dc:ff:a4:1a:4a:30:d8:8e:1b:f5:87:41:f1:
                    7f:94:67:b9:ca:96:93:c8:be:13:55:17:11:04:a2:
                    5a:e9:e2:d9:a1:24:c9:2f:73:dd:38:23:f8:5a:c5:
                    90:7e:b3:85:ad:4e:c7:99:53:14:50:64:b3:8c:af:
                    86:68:7e:7f:e9:23:7f:2a:01:d2:98:49:bb:e1:53:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:17:AF:E8:FF:01:3E:A0:5B:F4:5E:9B:99:F6:CC:03:27:25:A6:00
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202559.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         71:6d:8a:99:f1:86:42:98:36:05:57:0b:f3:77:74:5f:7a:69:
         d7:b9:7d:62:f2:b2:db:d6:aa:58:22:d2:ef:c1:e0:b5:6b:af:
         c3:6b:2f:1e:27:bb:f7:cb:fd:78:5c:1f:7b:8c:20:7f:3d:3f:
         82:e5:dc:22:33:48:a6:aa:c7:b6:6d:50:08:b4:9a:33:1a:9a:
         82:22:0f:5a:df:d3:dc:49:c7:17:49:6b:a2:ca:50:04:9c:41:
         3d:c9:58:d9:dc:50:c8:ea:6a:5f:41:a9:f9:de:3c:fb:69:2b:
         75:9d:06:25:e2:57:73:88:f7:73:5d:0c:5d:ec:95:a9:49:7c:
         e2:cc:99:dc:94:f5:8b:3d:78:89:45:81:88:0e:e0:c7:8e:51:
         a0:75:01:0a:0b:9f:48:91:52:89:bd:e3:95:b5:3a:e0:ca:80:
         6c:6a:da:28:fb:97:03:16:e1:cd:74:93:01:d2:f9:4a:66:2e:
         8f:a3:eb:87:fb:17:80:d7:e6:0f:64:29:d2:ed:b7:33:5d:63:
         b2:ce:55:c1:93:1f:8c:e8:88:59:70:b1:7a:c0:6e:ac:05:3e:
         19:54:04:a7:3d:72:29:07:cd:58:18:40:52:0b:2b:1f:ee:d6:
         95:9d:05:ab:22:09:89:78:c2:8c:21:38:9f:31:87:74:bb:6b:
         44:de:ba:cd
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUHlWqEHRXVjV3ADTV/7oWqIZ/m7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MTFaFw0yNDA0MDYwOTIyMTFaMDMxMTAvBgNV
BAMTKDA4MTdBRkU4RkYwMTNFQTA1QkY0NUU5Qjk5RjZDQzAzMjcyNUE2MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3UOSB2l45s9Gz+YwNomLkL/I
tfZUbT35cV8g9Wcr7aMpFhNJxylNDh2nCVzJSb9wcSwsYAVXBXE4dQ3wfanfA/m4
8FDrXmVGr/HqzirF3JZo8/xp0z3Ss7Votiq7TRGANQG6NLWME+ynI/PhPUcLzhw5
5O4SM0cjOSIHebwI/AzUkuA0h92UIytsH5QLz2DdcFuAwHzKAQ2Cp5v+2pdgDQKu
msl4ljSIzIDO2TLveUcRgRIK3P+kGkow2I4b9YdB8X+UZ7nKlpPIvhNVFxEEolrp
4tmhJMkvc904I/haxZB+s4WtTseZUxRQZLOMr4Zofn/pI38qAdKYSbvhU1s7AgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUCBev6P8BPqBb9F6bmfbMAyclpgAwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDI1NTkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqEt1HsDANBgkqhkiG9w0BAQsF
AAOCAQEAcW2KmfGGQpg2BVcL83d0X3pp17l9YvKy29aqWCLS78HgtWuvw2svHie7
98v9eFwfe4wgfz0/guXcIjNIpqrHtm1QCLSaMxqagiIPWt/T3EnHF0lrospQBJxB
PclY2dxQyOpqX0Gp+d48+2krdZ0GJeJXc4j3c10MXeyVqUl84syZ3JT1iz14iUWB
iA7gx45RoHUBCgufSJFSib3jlbU64MqAbGraKPuXAxbhzXSTAdL5SmYuj6Prh/sX
gNfmD2Qp0u23M11jss5VwZMfjOiIWXCxesBurAU+GVQEpz1yKQfNWBhAUgsrH+7W
lZ0FqyIJiXjCjCE4nzGHdLtrRN66zQ==
-----END CERTIFICATE-----