Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203062.roa
File:                     AS203062.roa (raw, json)
Hash identifier:          ziaLg4uoZeVezLuBdP1AjVlu31y9c9Lgwak9qDl5BPM=
Subject key identifier:   C4:6D:4A:1A:39:14:5C:BF:6A:03:AF:06:FB:7B:AE:E8:B9:2E:39:9A
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       222039B1A3D69259704EB8A082E0FCDBD86EBFB1
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203062.roa
Signing time:             Sat 08 Apr 2023 09:22:13 +0000
ROA not before:           Sat 08 Apr 2023 09:17:13 +0000
ROA not after:            Sat 06 Apr 2024 09:22:13 +0000
asID:                     203062
IP address blocks:        2a12:dd47:802a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:20:39:b1:a3:d6:92:59:70:4e:b8:a0:82:e0:fc:db:d8:6e:bf:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:13 2023 GMT
            Not After : Apr  6 09:22:13 2024 GMT
        Subject: CN=C46D4A1A39145CBF6A03AF06FB7BAEE8B92E399A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:ab:fe:37:8f:b7:7e:53:6b:3b:b0:88:fe:
                    17:c9:0a:c8:e0:2c:10:c5:c3:87:e7:bc:d8:33:88:
                    86:07:a9:d2:67:86:0e:e0:99:26:0c:21:c3:e2:38:
                    b6:63:05:ff:9b:ae:b6:54:6e:7a:89:38:38:39:c7:
                    c1:e9:ae:9d:58:27:3f:bd:6b:49:10:64:79:a5:59:
                    29:2c:2c:cc:41:3b:e2:6a:8d:50:86:3e:ee:91:72:
                    f5:80:0f:9a:0e:c0:35:bb:96:df:77:2a:f5:98:cd:
                    76:21:98:a0:4a:3e:1a:48:d2:64:cc:36:18:c7:ea:
                    10:12:d4:e8:3e:71:1f:1f:59:fc:7f:3c:0c:1f:62:
                    d1:42:a3:68:dd:ee:e6:a6:af:9d:07:37:61:2c:5f:
                    14:79:d6:f8:ce:62:88:14:d2:db:14:7f:c2:50:8c:
                    0c:3e:95:29:87:b6:39:84:29:cd:c5:15:06:21:3d:
                    94:09:64:79:8b:f8:df:0b:b9:ef:dc:ca:e3:75:2d:
                    eb:e8:bf:95:2d:a7:aa:5e:9d:aa:df:1a:ef:bd:b1:
                    f7:28:50:05:5d:c3:a4:55:a8:2e:be:76:3b:5b:e7:
                    a7:96:fc:bf:39:0d:1b:2f:bc:77:39:d7:68:aa:a1:
                    4c:dc:42:bb:92:b9:96:69:6e:00:f4:ba:9d:70:b6:
                    c6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6D:4A:1A:39:14:5C:BF:6A:03:AF:06:FB:7B:AE:E8:B9:2E:39:9A
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802a::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:d3:3f:f8:4d:91:9b:6d:0c:5e:8a:4a:3c:12:ab:a5:ad:74:
         65:79:2d:ec:88:ec:f6:f4:74:3e:ff:c7:22:c4:99:1c:a6:df:
         bc:8e:0e:10:a7:04:f2:3d:ac:84:69:fa:74:04:e1:13:25:b7:
         ae:a8:5c:03:97:6a:52:38:09:1d:f0:21:6c:b1:a5:be:e3:83:
         25:e9:86:bb:b7:ea:4e:4a:71:b7:20:87:a3:be:e7:c0:75:d3:
         d9:2c:96:7e:fa:df:37:1d:bc:00:68:13:39:b3:ca:0b:74:b0:
         61:24:ce:98:2d:b5:fc:6c:d2:bb:ec:20:46:07:a5:a7:ba:07:
         66:4c:4a:db:cc:f3:11:d4:db:76:5a:af:6d:d1:76:06:de:f1:
         be:f4:05:08:2f:6e:d0:7e:de:29:dd:d9:10:66:50:d0:e1:a0:
         cb:66:f1:70:27:f7:81:77:4c:0b:a8:04:5c:53:4e:b2:12:be:
         17:40:92:d3:d4:d3:77:49:a2:e0:93:5b:ed:22:ab:37:00:9d:
         7e:72:1f:6a:15:d6:c7:d3:31:4c:1c:ac:69:9c:8d:e0:27:36:
         7b:72:45:15:8a:1c:dc:f0:5e:a2:8d:59:64:90:25:9b:ce:70:
         d8:1c:fb:93:04:4b:33:84:12:c1:ff:e1:37:18:e8:86:2c:ac:
         c7:25:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----