Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202685.roa
File:                     AS202685.roa (raw, json)
Hash identifier:          rVgWFzeJVXp3PtAAEFyIEi+Pv5BMFTt+Ssur7ER2Zzc=
Subject key identifier:   8E:28:18:2C:8D:0F:D5:E8:91:36:7C:FA:C1:BF:05:6D:2F:EB:85:20
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       01544123BE849E9EE55859B186122B1093E5669E
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202685.roa
Signing time:             Sat 08 Apr 2023 09:22:24 +0000
ROA not before:           Sat 08 Apr 2023 09:17:24 +0000
ROA not after:            Sat 06 Apr 2024 09:22:24 +0000
asID:                     202685
IP address blocks:        2a12:dd47:8500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:54:41:23:be:84:9e:9e:e5:58:59:b1:86:12:2b:10:93:e5:66:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:24 2023 GMT
            Not After : Apr  6 09:22:24 2024 GMT
        Subject: CN=8E28182C8D0FD5E891367CFAC1BF056D2FEB8520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:20:a7:94:c3:1c:1b:24:16:02:3f:d8:0e:
                    77:e1:b9:82:6c:29:0a:92:99:9d:c8:95:b2:d9:6b:
                    6d:02:6f:b9:92:1f:2f:6a:b0:40:f1:06:88:4d:7a:
                    c1:34:59:c2:ab:fb:82:40:be:f3:90:3d:04:78:f0:
                    2a:62:0a:ed:c7:ce:c4:51:ab:4c:1b:af:6d:5c:53:
                    b6:bc:b6:93:c8:55:a7:81:a2:5e:ac:b1:bc:0b:50:
                    3a:5c:45:55:bd:d7:23:b2:b7:ed:5a:6b:9f:22:da:
                    df:73:f5:f6:f6:19:9c:5a:11:c6:8f:9a:0f:f6:5e:
                    38:6a:1e:ea:3b:42:e7:3b:09:b3:a1:08:ac:e9:c8:
                    9b:02:9a:0e:7f:03:2d:17:d5:b7:a8:d5:6a:45:93:
                    92:7e:81:7f:d7:c0:02:bf:c3:06:3a:4f:b8:f2:b2:
                    51:f5:98:12:7b:a2:8d:a2:5b:9f:c4:4b:72:57:d8:
                    6a:a9:f5:a2:77:ba:2a:ee:26:79:95:98:1d:fa:35:
                    80:a5:a9:a3:6f:2a:51:87:27:61:58:dc:47:6d:3a:
                    a0:77:e5:3c:40:1e:24:9e:57:14:44:5f:4a:7e:e8:
                    86:1a:18:20:66:0e:b1:4a:2a:85:95:94:83:81:a3:
                    d2:89:d2:b2:b0:17:ff:2d:f1:19:f7:d9:10:42:97:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:28:18:2C:8D:0F:D5:E8:91:36:7C:FA:C1:BF:05:6D:2F:EB:85:20
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202685.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:b7:20:b9:eb:40:7d:12:39:cf:a8:a0:26:c7:74:6a:16:98:
         12:c5:87:e0:d8:8f:5f:97:63:ff:1d:9d:c5:03:e6:97:c7:73:
         53:47:a2:c4:23:41:85:bd:7f:b5:5e:7c:a0:95:c5:a0:cc:81:
         34:f9:90:4c:06:7e:da:29:30:c2:93:05:26:ef:4c:33:e6:de:
         47:6f:06:92:4e:95:2f:97:42:13:42:fe:99:5d:b3:e8:db:d1:
         19:f2:3e:96:61:b8:29:1e:e5:c0:be:98:f9:08:bf:82:56:a8:
         62:a7:67:df:19:b5:a9:ce:5d:a8:16:1a:6a:54:39:f2:b8:4f:
         c0:c6:b0:7a:8d:e7:f5:e9:36:61:1f:41:90:9f:a2:6d:d8:aa:
         2d:9d:ab:2d:b9:30:1d:8f:75:43:ad:47:c9:7e:20:10:c2:61:
         d1:69:8f:33:b4:3d:7a:c4:08:5b:8a:ec:36:00:f3:49:22:4c:
         73:bd:28:c7:e7:34:68:d8:87:a5:c0:3f:01:6f:be:59:7c:c3:
         6a:f1:4c:a2:40:43:63:bd:26:83:e6:06:f8:01:83:f8:15:bb:
         a5:5f:89:50:35:2f:39:ef:89:a7:cd:5d:b7:27:92:14:8f:84:
         0a:1f:ae:60:07:85:67:5b:e6:be:f4:e9:87:50:0f:40:39:7f:
         df:38:3b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----