Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202911.roa
File:                     AS202911.roa (raw, json)
Hash identifier:          0OcTRLNcsWjIrg551B0PhQ1HiI03GdgGC5dC21LLW9A=
Subject key identifier:   5A:F1:64:09:53:21:3A:F0:0A:E8:DD:10:D0:22:DC:80:3A:43:FD:8E
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       5AB1B7CCE3CC636987CE17A003978C8D1C91AAEE
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202911.roa
Signing time:             Sat 08 Apr 2023 09:22:18 +0000
ROA not before:           Sat 08 Apr 2023 09:17:18 +0000
ROA not after:            Sat 06 Apr 2024 09:22:18 +0000
asID:                     202911
IP address blocks:        2a12:dd47:8210::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b1:b7:cc:e3:cc:63:69:87:ce:17:a0:03:97:8c:8d:1c:91:aa:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:18 2023 GMT
            Not After : Apr  6 09:22:18 2024 GMT
        Subject: CN=5AF1640953213AF00AE8DD10D022DC803A43FD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:98:af:9e:d1:3f:ed:e4:81:d4:b8:6f:43:6d:
                    2f:ed:1e:fd:ac:ce:ba:06:86:4b:6b:72:1f:99:b1:
                    1d:30:71:86:6f:9c:57:c4:8d:e8:74:b3:6a:5c:c8:
                    d4:0c:d4:ee:fb:6f:7b:d6:07:6d:b6:20:3d:82:b4:
                    e8:70:e1:20:f1:7d:6e:e0:65:19:a0:d7:2a:50:06:
                    ad:41:9a:d0:e0:85:71:9f:0a:92:e5:da:d5:75:98:
                    d6:00:7d:a8:dd:7c:da:d6:9d:ba:6f:79:d6:bf:02:
                    7b:ac:ac:6d:91:f6:13:e4:1c:ac:25:13:e6:51:64:
                    fb:be:a9:28:75:9a:86:6f:24:49:87:da:dd:43:13:
                    30:d9:2e:d8:c9:55:b4:2f:1f:5e:6e:4f:26:8d:c8:
                    7d:0c:e4:59:7c:f4:9f:6e:cd:46:51:fd:fd:09:bd:
                    86:be:0d:d8:66:d5:fc:42:d7:e5:6e:98:dd:c4:dc:
                    b9:f0:19:56:59:92:49:b0:ce:94:37:b4:2c:57:75:
                    2b:0a:98:16:0c:08:e1:b1:27:51:8d:20:50:31:8d:
                    de:aa:98:02:d0:0e:f5:ef:fc:a3:7b:a8:39:3f:ce:
                    87:7b:ba:ab:09:68:d4:89:42:c4:88:fe:15:2d:6f:
                    ca:81:2b:38:45:dd:72:e6:c9:e5:ad:e7:6a:a6:0c:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F1:64:09:53:21:3A:F0:0A:E8:DD:10:D0:22:DC:80:3A:43:FD:8E
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202911.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8210::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:dd:32:f8:71:b0:6f:3e:50:8c:a8:33:01:48:6b:e1:c1:40:
         11:04:ee:03:1f:92:d4:44:ba:82:7a:39:85:fb:8d:8a:96:1b:
         2a:4f:76:a2:51:b7:e6:37:2b:16:5a:4c:8d:a3:15:0f:3a:ff:
         3e:bb:6e:f7:14:a1:2e:d3:4a:bd:a4:36:10:79:b9:bd:31:5f:
         2c:4c:ff:99:a9:4e:3c:95:5b:b0:19:1c:7d:22:d9:57:35:47:
         57:94:f8:5a:1b:9d:7c:5b:60:7a:46:df:21:91:01:ef:eb:58:
         92:75:9b:01:c7:1c:45:0b:63:d6:85:dc:b4:33:98:5f:a8:78:
         91:e3:fd:08:3e:f9:2f:7d:2a:1f:36:ac:5f:00:5b:b5:2d:c3:
         92:8b:0a:24:62:ae:f3:8c:8f:fb:46:22:44:c7:31:33:e1:52:
         5d:58:cb:27:39:2f:bc:cb:6e:2e:c6:d3:2f:09:72:20:41:eb:
         fe:ab:06:45:23:cd:c3:ee:ed:71:2c:f9:fd:db:7f:ac:a4:30:
         f1:8d:16:c4:21:95:ce:59:e6:63:74:0c:76:5b:24:1d:3f:ba:
         e3:6b:0e:13:2e:44:c5:9f:3c:c5:42:9b:cd:2c:d8:21:ae:0d:
         6c:c5:64:ec:7f:0e:c0:46:8b:dc:1e:ae:a9:b5:e1:e9:d1:a6:
         d5:0f:8b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----