Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202820.roa
File:                     AS202820.roa (raw, json)
Hash identifier:          oitPEr4n/fojEfRJVhvbZeCLNXYQPQNeWyHgoGhs7zg=
Subject key identifier:   70:ED:61:82:80:88:45:8D:46:36:47:15:32:00:BC:F7:B7:04:6F:9D
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       74B322922A01F8EC9D80804B6C86445B28C47806
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202820.roa
Signing time:             Sat 08 Apr 2023 09:22:17 +0000
ROA not before:           Sat 08 Apr 2023 09:17:17 +0000
ROA not after:            Sat 06 Apr 2024 09:22:17 +0000
asID:                     202820
IP address blocks:        2a12:dd47:802b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b3:22:92:2a:01:f8:ec:9d:80:80:4b:6c:86:44:5b:28:c4:78:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:17 2023 GMT
            Not After : Apr  6 09:22:17 2024 GMT
        Subject: CN=70ED61828088458D463647153200BCF7B7046F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:f0:4c:29:c6:38:37:03:05:af:b1:95:57:
                    c1:6c:ef:e2:d5:55:45:56:65:00:51:1e:0b:63:d9:
                    48:bb:b4:85:c8:8e:94:08:6c:5b:26:44:54:59:57:
                    ea:03:f1:47:16:6f:05:16:73:a4:26:fd:1f:1d:9e:
                    1b:28:fd:c5:5f:8c:b1:ee:ee:b3:8f:f7:2c:05:13:
                    b0:0d:29:f8:0f:da:fd:76:de:42:31:18:8d:39:af:
                    58:b5:bc:5a:44:78:aa:17:5c:df:36:e5:4e:88:d1:
                    b4:27:d5:d8:e8:93:ad:e6:90:76:84:c6:e5:cf:da:
                    62:59:89:f4:fe:ce:da:1b:a7:82:6a:1c:f5:c2:45:
                    67:13:98:05:70:6a:b6:e8:43:d8:2a:d7:74:f7:4d:
                    53:f3:51:9d:eb:8d:4a:c0:97:40:9c:3b:42:de:6a:
                    d5:40:84:22:30:64:b6:c8:35:8b:3e:5e:e9:ad:91:
                    39:34:f5:26:60:c2:17:d1:82:3b:97:09:22:2a:03:
                    e0:ed:b1:e0:4f:77:e0:03:1a:a1:94:8b:77:c0:c5:
                    1d:f4:77:88:b4:40:72:0f:31:57:e2:d6:30:0e:61:
                    f5:4f:9a:da:af:a8:7d:6d:26:75:3c:b6:62:a3:99:
                    54:37:d0:35:14:38:d9:90:a1:64:ee:6b:a2:7b:db:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:ED:61:82:80:88:45:8D:46:36:47:15:32:00:BC:F7:B7:04:6F:9D
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202820.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802b::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:87:3a:e0:d4:20:56:4f:c0:72:ae:8c:1f:19:75:19:1f:42:
         fd:e2:2d:7d:0a:a0:df:08:77:a2:6a:11:b2:c1:cf:64:33:e2:
         80:f3:f2:23:ca:29:57:a4:cb:02:9e:09:e3:6d:93:67:39:ef:
         d1:ad:29:78:0b:8d:91:20:da:f4:cd:6d:b9:a9:81:52:c3:3f:
         36:0a:31:98:fb:75:d8:33:dc:0f:6e:1a:82:c7:4f:f2:f2:2f:
         30:fe:bf:69:73:88:ed:c5:24:80:ff:30:d2:c1:8d:f4:bc:aa:
         5f:90:16:41:c7:6d:e4:53:25:3c:b4:7a:ce:f2:84:e2:fa:72:
         53:36:3e:fd:44:ba:3a:99:3d:32:0c:72:68:55:e9:7d:63:dd:
         8e:74:88:9a:f4:54:66:4c:04:9b:14:93:ee:73:f2:ad:5c:3c:
         fe:05:d3:dc:b4:56:81:e2:41:6b:30:86:b7:96:bd:28:1d:bc:
         2a:02:61:96:82:35:31:18:2c:35:3b:2d:7a:30:d5:a6:fa:f0:
         81:16:3f:81:18:3a:ef:54:8a:6d:39:6e:53:16:ea:6e:c3:e6:
         2b:7c:56:49:bc:59:5a:c1:aa:47:b7:47:6e:9a:e5:b8:c1:36:
         2e:fb:6c:de:16:38:ed:cf:d6:35:a5:2b:8c:62:92:3d:02:e7:
         77:57:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----