Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202732.roa
File:                     AS202732.roa (raw, json)
Hash identifier:          QSeKaQl4a+GQQtsTejT+Qqf5tBSgP/wRG5kKg+/kM6A=
Subject key identifier:   14:09:97:30:44:06:30:EF:87:EC:B5:AD:A3:3F:98:32:87:BC:59:6E
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2452CD61E6349CD029405E377CDAB81B9DAB4A13
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202732.roa
Signing time:             Sat 08 Apr 2023 09:22:18 +0000
ROA not before:           Sat 08 Apr 2023 09:17:18 +0000
ROA not after:            Sat 06 Apr 2024 09:22:18 +0000
asID:                     202732
IP address blocks:        2a12:dd47:8290::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:52:cd:61:e6:34:9c:d0:29:40:5e:37:7c:da:b8:1b:9d:ab:4a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:18 2023 GMT
            Not After : Apr  6 09:22:18 2024 GMT
        Subject: CN=14099730440630EF87ECB5ADA33F983287BC596E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:32:91:fe:ba:ba:77:0f:74:e3:7e:29:2d:
                    e0:48:7e:07:9a:b0:2d:e4:9d:ea:2a:df:6a:6b:20:
                    68:2e:5e:c5:c1:61:0e:5a:3d:31:41:71:d6:76:12:
                    80:11:1e:ee:91:00:96:d0:1e:78:fa:dc:3f:47:69:
                    ef:ca:36:b5:07:9b:93:1a:37:35:f6:64:ff:24:99:
                    06:50:3c:59:aa:4b:0c:37:fe:01:b3:43:45:11:17:
                    b0:63:17:e8:2d:fd:5d:78:b5:51:50:87:41:b7:6f:
                    15:7e:b4:53:5b:31:00:08:9d:7d:96:55:3c:28:d4:
                    bc:3e:54:d5:fe:3e:40:dd:ad:35:c7:b8:2d:67:8d:
                    18:f7:cc:1d:aa:e1:f2:95:87:6f:c8:05:fe:18:44:
                    b5:6d:44:ea:f4:42:e4:53:a9:8e:4e:a0:b4:6d:4f:
                    5f:e4:2c:d8:7c:2a:d7:18:7c:e9:37:aa:8e:6e:08:
                    5c:69:46:c6:ee:ae:b4:92:30:d5:e0:c5:68:3b:3f:
                    ff:4d:dc:cc:bf:4f:29:7a:22:98:7a:da:e1:e0:f5:
                    84:c1:d4:76:f5:d0:b6:a9:a2:7f:9f:10:3f:87:ef:
                    d6:a5:0f:15:86:43:e8:c4:d9:80:40:fb:73:64:06:
                    59:25:a0:b3:0f:52:63:95:c8:1c:39:21:27:fe:35:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:09:97:30:44:06:30:EF:87:EC:B5:AD:A3:3F:98:32:87:BC:59:6E
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8290::/44

    Signature Algorithm: sha256WithRSAEncryption
         a6:d8:dd:8d:e9:3d:36:12:29:7b:12:ce:3c:91:86:b8:ae:91:
         f0:f8:ad:7e:2c:22:e9:67:c3:66:6f:1f:bc:31:a1:91:bb:47:
         c1:39:b2:87:2e:d9:65:e9:32:6a:4d:d3:2e:3e:5b:71:3e:a6:
         31:1d:a4:d9:1b:1e:1d:06:7e:1d:3d:72:53:d9:6f:df:e3:ce:
         ec:6f:07:b3:06:57:62:b8:77:b7:35:f8:a0:4c:1a:8f:a5:40:
         98:a6:65:a3:ea:6c:98:3f:70:70:72:b0:b1:12:9a:72:de:37:
         a5:d7:3c:08:a2:85:fd:72:95:52:b4:51:5a:4b:74:17:11:26:
         ea:d3:95:b4:3d:86:c4:84:bd:d3:70:a1:38:03:7a:48:ac:49:
         06:26:40:c0:dd:60:7a:0b:55:6e:e1:b8:e6:c9:ee:8a:78:ad:
         3c:d9:29:af:26:02:e8:72:70:0c:3a:38:c4:2c:4b:99:37:68:
         9c:b5:56:d3:32:32:dc:0a:4d:cd:b0:af:ff:03:f5:ee:b9:c6:
         02:a3:9a:c3:2f:27:ac:db:af:ba:9a:8a:12:78:74:9a:1d:b9:
         5e:ed:a9:45:98:27:39:3e:9a:cd:41:c1:2a:b2:fb:dc:4d:6f:
         6a:8d:12:9e:5b:57:b0:4a:44:0b:b1:80:3b:17:50:69:c3:69:
         b8:6a:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----