Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202573.roa
File:                     AS202573.roa (raw, json)
Hash identifier:          fdzTuRGmnPfse/jljBLShixRLB2OLU7CmYRwpeDIqUI=
Subject key identifier:   FD:8B:75:E3:2E:38:2C:82:FD:86:BB:86:47:5B:17:B1:1D:5C:AE:84
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6333ADC20DB04D517793D11EC42A5B455046F15A
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202573.roa
Signing time:             Sat 08 Apr 2023 09:22:25 +0000
ROA not before:           Sat 08 Apr 2023 09:17:25 +0000
ROA not after:            Sat 06 Apr 2024 09:22:25 +0000
asID:                     202573
IP address blocks:        2a12:dd47:f800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:33:ad:c2:0d:b0:4d:51:77:93:d1:1e:c4:2a:5b:45:50:46:f1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:25 2023 GMT
            Not After : Apr  6 09:22:25 2024 GMT
        Subject: CN=FD8B75E32E382C82FD86BB86475B17B11D5CAE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:7d:46:1f:ef:a0:42:ae:e4:b7:f4:31:37:
                    dc:98:62:28:2e:6d:67:9f:0a:fc:9b:2b:48:f4:a4:
                    60:9e:b1:65:16:06:e6:27:7a:ad:84:31:d5:90:b0:
                    7f:61:0a:fe:80:76:b3:f1:92:b6:0a:f4:08:20:8b:
                    1f:c4:f9:84:7e:ff:d9:8f:21:47:d6:48:cc:74:f1:
                    37:31:1b:c8:84:38:fe:9d:eb:fb:9d:b3:49:d9:0c:
                    0b:75:9a:57:51:bd:78:5b:8f:f2:5a:3e:c8:c9:23:
                    cf:41:40:01:a8:3d:d9:b3:03:a3:88:cf:f1:6f:ac:
                    fa:4b:c7:52:ac:eb:81:7d:30:cd:be:4b:8e:3e:ef:
                    2e:b8:4a:8f:05:ec:b7:de:4d:be:2e:a8:18:41:3c:
                    21:37:a3:a0:7a:52:f7:65:fa:57:04:e7:fd:d9:d8:
                    7b:77:10:6f:1c:e4:59:44:cd:7d:e1:19:08:f2:39:
                    50:e6:e5:de:70:e3:04:dd:91:71:20:97:d9:ed:ae:
                    25:16:db:8f:19:a1:e1:c6:a4:a8:9b:72:b4:a8:6f:
                    0c:30:64:b5:d1:4a:0f:8c:e6:ca:0e:f6:dd:91:60:
                    b3:c9:06:e0:23:02:a2:24:84:a2:6f:21:09:a6:72:
                    b9:a0:9b:cd:cc:a5:89:d1:31:d5:e3:29:37:d9:3d:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8B:75:E3:2E:38:2C:82:FD:86:BB:86:47:5B:17:B1:1D:5C:AE:84
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202573.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:81:69:c0:53:4e:65:bb:e7:11:b1:a8:6b:b2:2f:3d:b0:ce:
         cc:6c:6e:de:09:39:e9:64:2d:60:23:ff:2d:83:6d:41:1f:61:
         87:24:ff:b3:c2:6e:a8:4d:56:ed:3d:1c:ff:b5:46:9b:ce:9b:
         dc:0a:4b:e7:25:c1:93:e4:d9:25:55:65:06:eb:21:ce:1b:49:
         0d:e9:bf:48:87:90:b3:1c:27:e8:d5:86:ca:91:01:d0:9b:70:
         c9:5b:7e:73:77:49:00:7a:b8:af:67:fd:35:10:ee:65:c1:95:
         e9:5e:c8:03:92:b5:95:cc:6d:32:8a:8d:4e:0b:53:33:9c:12:
         53:50:1d:c0:18:10:6f:03:02:d0:d3:11:84:59:81:bb:4d:02:
         58:47:c8:42:9f:1e:3e:26:79:bf:60:e3:98:aa:41:26:6f:41:
         4f:f5:83:d6:4e:de:c4:a1:7e:f2:d8:04:64:c9:89:7b:f4:a7:
         82:4b:d8:bb:65:43:10:cc:18:a6:cd:97:44:99:f9:18:c2:8b:
         34:5f:80:3a:81:f6:29:a1:e8:ec:51:7a:39:a6:47:07:89:7b:
         c9:1e:be:5f:f2:08:d8:2f:0f:92:61:3c:0f:8d:a0:6f:29:e9:
         b0:30:12:c3:f4:11:ed:dc:33:f4:5d:e7:94:3a:74:b4:be:4b:
         dd:51:c7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----