Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202828.roa
File:                     AS202828.roa (raw, json)
Hash identifier:          6/s3Wz+ij2FlJYt4Nvb7PR0oMXhkowsyYgGsqmMnioc=
Subject key identifier:   77:CD:DC:C2:8F:A4:4A:9A:3F:6F:67:25:A4:50:58:EF:0A:16:97:F2
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       5C6DB76B4F4D3D468A1607DF55704E138B36D9D3
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202828.roa
Signing time:             Sat 08 Apr 2023 09:22:27 +0000
ROA not before:           Sat 08 Apr 2023 09:17:27 +0000
ROA not after:            Sat 06 Apr 2024 09:22:27 +0000
asID:                     202828
IP address blocks:        2a12:dd47:804c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6d:b7:6b:4f:4d:3d:46:8a:16:07:df:55:70:4e:13:8b:36:d9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:27 2023 GMT
            Not After : Apr  6 09:22:27 2024 GMT
        Subject: CN=77CDDCC28FA44A9A3F6F6725A45058EF0A1697F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:32:e9:9d:47:b8:48:53:91:d9:d6:f6:9e:8c:
                    36:52:bf:4f:3d:b8:88:38:29:fb:57:4b:13:93:77:
                    82:14:2e:73:67:7d:52:96:4e:ac:5e:61:63:5a:4a:
                    d6:f7:64:e0:bc:c3:9f:f7:99:f5:20:5c:c6:b6:6d:
                    1c:53:ae:3d:0b:c8:d7:c0:49:6a:ce:0b:3b:2f:5a:
                    5e:cc:f7:f6:8e:de:c8:53:5d:82:4b:f0:c3:20:ce:
                    a6:05:7c:3e:df:28:29:25:47:3a:3d:67:66:da:e7:
                    d8:b4:cd:b3:48:95:86:d3:4b:92:ab:9b:43:d7:8e:
                    28:ec:81:c7:86:4c:38:ad:c5:0c:56:66:94:78:d0:
                    00:80:a4:a6:22:11:e9:74:ba:95:1f:b3:a1:a1:6b:
                    d4:90:29:1a:b2:c7:6e:aa:be:a1:bc:82:4d:60:2f:
                    cc:b9:86:78:0b:71:90:5e:6b:2e:f5:59:ac:72:1d:
                    fd:b6:b0:04:0b:32:69:9e:8c:2f:87:b3:f8:6e:00:
                    a4:7d:ff:de:4d:4b:db:65:87:a8:49:7e:29:c2:6e:
                    d1:7f:5d:8c:7b:99:e0:62:c3:5d:4b:3c:ab:09:33:
                    16:d3:cd:0f:62:e2:1c:ed:b0:89:1d:c8:e2:56:79:
                    77:56:08:50:e5:86:be:3f:ac:09:c2:31:45:fb:ae:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CD:DC:C2:8F:A4:4A:9A:3F:6F:67:25:A4:50:58:EF:0A:16:97:F2
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202828.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804c::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:9e:d7:9a:31:88:5c:7a:81:32:e7:65:98:5d:fe:0c:0f:c9:
         d2:ff:bd:b7:ff:78:ca:2e:6e:aa:13:50:3e:be:63:13:42:d1:
         7b:aa:0d:c0:a2:2f:a9:ab:21:70:ac:88:ab:bb:de:7a:06:b8:
         04:d8:88:e1:3b:20:61:97:a5:be:84:6a:3f:34:2d:49:d0:be:
         74:b4:8f:78:c2:75:29:eb:a6:4e:cb:81:4f:84:24:fa:52:5e:
         3a:3b:e9:2b:5c:80:9e:b5:4a:3f:b2:01:14:3a:a5:8a:4a:53:
         fd:fa:e7:ee:37:c4:63:21:1c:ab:74:dc:55:55:a6:9a:50:78:
         85:b1:23:ca:3a:ca:95:98:4f:46:2f:a9:5a:ef:2f:57:21:f3:
         a3:25:67:d7:bd:82:95:b0:17:f0:08:42:50:6c:e5:d4:19:8d:
         30:0a:06:d3:7f:fb:e8:70:55:eb:5b:56:ca:b1:9f:d9:c0:53:
         2e:81:a5:3a:91:f0:be:3d:5e:2c:38:1f:29:b3:72:7e:44:c5:
         b0:76:45:62:fc:4a:9d:ea:a4:80:13:03:ff:81:c9:68:c0:55:
         65:fc:8b:86:5f:62:31:9b:cb:ba:cf:7f:dd:6d:5b:e9:a6:1f:
         91:bb:88:dd:a7:cb:83:22:7b:62:30:8e:93:e0:cf:50:1c:4b:
         38:7e:53:3a
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUXG23a09NPUaKFgffVXBOE4s22dMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjdaFw0yNDA0MDYwOTIyMjdaMDMxMTAvBgNV
BAMTKDc3Q0REQ0MyOEZBNDRBOUEzRjZGNjcyNUE0NTA1OEVGMEExNjk3RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnMumdR7hIU5HZ1vaejDZSv089
uIg4KftXSxOTd4IULnNnfVKWTqxeYWNaStb3ZOC8w5/3mfUgXMa2bRxTrj0LyNfA
SWrOCzsvWl7M9/aO3shTXYJL8MMgzqYFfD7fKCklRzo9Z2ba59i0zbNIlYbTS5Kr
m0PXjijsgceGTDitxQxWZpR40ACApKYiEel0upUfs6Gha9SQKRqyx26qvqG8gk1g
L8y5hngLcZBeay71WaxyHf22sAQLMmmejC+Hs/huAKR9/95NS9tlh6hJfinCbtF/
XYx7meBiw11LPKsJMxbTzQ9i4hztsIkdyOJWeXdWCFDlhr4/rAnCMUX7rhXdAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUd83cwo+kSpo/b2clpFBY7woWl/IwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDI4Mjgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgEwwDQYJKoZIhvcNAQEL
BQADggEBALWe15oxiFx6gTLnZZhd/gwPydL/vbf/eMoubqoTUD6+YxNC0XuqDcCi
L6mrIXCsiKu73noGuATYiOE7IGGXpb6Eaj80LUnQvnS0j3jCdSnrpk7LgU+EJPpS
Xjo76StcgJ61Sj+yARQ6pYpKU/365+43xGMhHKt03FVVpppQeIWxI8o6ypWYT0Yv
qVrvL1ch86MlZ9e9gpWwF/AIQlBs5dQZjTAKBtN/++hwVetbVsqxn9nAUy6BpTqR
8L49Xiw4Hymzcn5ExbB2RWL8Sp3qpIATA/+ByWjAVWX8i4ZfYjGby7rPf91tW+mm
H5G7iN2ny4Mie2IwjpPgz1AcSzh+Uzo=
-----END CERTIFICATE-----