Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS202996.roa
File:                     AS202996.roa (raw, json)
Hash identifier:          hihiAYSmfMofo/p41lw9VzDnU+FjbFU5iAvp+CK8WYw=
Subject key identifier:   E1:1E:92:AC:92:47:13:69:93:4A:71:18:F2:47:D0:5C:3B:83:49:4B
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       26247625D22AAB0B70D5F4964618E39EC25321C2
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS202996.roa
Signing time:             Sat 08 Apr 2023 09:22:29 +0000
ROA not before:           Sat 08 Apr 2023 09:17:29 +0000
ROA not after:            Sat 06 Apr 2024 09:22:29 +0000
asID:                     202996
IP address blocks:        2a12:dd47:8029::/48 maxlen: 48
                          2a12:dd47:8048::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:24:76:25:d2:2a:ab:0b:70:d5:f4:96:46:18:e3:9e:c2:53:21:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:29 2023 GMT
            Not After : Apr  6 09:22:29 2024 GMT
        Subject: CN=E11E92AC92471369934A7118F247D05C3B83494B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:8c:bf:50:69:38:bb:e6:a1:e0:75:b8:9e:
                    e5:e4:11:79:ab:a3:d0:9f:cf:06:f5:26:1d:a6:fb:
                    6b:0a:01:e6:6e:5d:db:33:fc:83:ac:f9:77:ed:5a:
                    de:82:5b:47:bf:a9:9b:58:6a:d9:ef:73:e7:72:09:
                    17:34:e3:b6:ba:10:0c:7b:8e:41:03:70:d5:d1:72:
                    64:9e:30:ac:e2:c1:67:27:b5:66:ba:a7:b1:fc:5e:
                    6d:fa:67:af:9a:b8:36:be:5c:7c:fe:f1:e7:8a:7a:
                    9c:76:cb:9f:8a:93:8b:70:38:bc:43:72:d3:d1:06:
                    1f:8f:7e:96:83:02:ce:b6:b5:ab:e0:2f:8b:8e:d2:
                    29:4b:3b:67:26:46:e1:92:6d:8f:62:e1:8d:b3:11:
                    42:e4:7b:6f:35:13:f5:ef:18:47:f9:1f:81:5d:c7:
                    2c:9d:3d:91:cb:be:df:63:9c:dc:9c:e0:fe:8b:f6:
                    88:de:07:38:0c:40:68:82:d2:1d:08:51:b2:79:d0:
                    80:31:ff:61:93:eb:08:85:a6:04:b4:4e:b7:92:56:
                    dd:8f:b6:77:21:d9:a7:40:61:e6:c7:03:fb:b6:a9:
                    a2:3e:c8:94:3a:e2:68:a3:5f:01:07:40:6a:3e:9d:
                    ef:61:9b:df:b2:87:74:a6:fc:bb:b6:1a:35:d7:1d:
                    31:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1E:92:AC:92:47:13:69:93:4A:71:18:F2:47:D0:5C:3B:83:49:4B
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS202996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8029::/48
                  2a12:dd47:8048::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:61:c7:d5:5c:07:26:74:12:a2:c3:0f:cf:88:6a:a7:b4:
         f6:14:7e:fc:10:e1:eb:85:a8:79:a9:b9:04:e5:16:3e:dd:31:
         86:cb:f4:52:23:da:df:71:bd:aa:65:11:d7:a7:f5:57:e3:5e:
         84:f3:0f:29:e3:96:8e:7a:ef:54:44:3e:bf:2a:04:05:78:3a:
         60:d7:2c:28:a7:7b:b7:4f:5b:d4:cb:a9:ac:2a:76:6b:06:9c:
         b7:25:2e:64:05:3d:b8:6a:db:a4:5c:79:54:a4:74:a4:6b:00:
         08:50:c9:8f:1f:f7:e3:d7:e9:2e:84:b7:ac:21:21:07:00:24:
         f5:05:4e:66:68:bd:57:40:f7:c6:ac:24:f8:dd:16:0c:f5:1e:
         ea:ac:44:7b:d6:fc:f6:09:66:a0:06:66:74:42:c9:40:f1:5b:
         15:e4:92:34:b6:51:27:3f:86:c8:50:96:4f:66:08:58:1b:f1:
         cf:ef:eb:38:e7:cc:80:5a:2d:a3:cb:3a:85:6b:0b:fe:9f:49:
         cd:47:94:13:e9:88:b2:dd:ed:6f:6c:a9:9f:4e:ea:52:4f:34:
         1a:6a:8c:9f:ac:d5:78:75:b8:a3:58:ad:ce:84:65:61:d4:68:
         e5:a5:4a:2d:d3:7c:fd:55:f0:41:3a:18:ee:41:c8:06:a6:71:
         7a:7c:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----