Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203069.roa
File:                     AS203069.roa (raw, json)
Hash identifier:          erhYX3N1CsGHWWZe4f2HposzKT/swmFY1IHQtfmUGD8=
Subject key identifier:   CC:BC:6F:98:6E:86:D3:70:E4:20:45:26:27:80:B7:BB:E8:6D:6B:28
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       428E3719D99E066D5AB2F2683B2C8E5512AB90A1
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203069.roa
Signing time:             Sun 09 Apr 2023 21:05:15 +0000
ROA not before:           Sun 09 Apr 2023 21:00:15 +0000
ROA not after:            Sun 07 Apr 2024 21:05:15 +0000
asID:                     203069
IP address blocks:        2a12:dd47:802c::/46 maxlen: 46
                          2a12:dd47:8230::/44 maxlen: 44
                          2a12:dd47:8400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8e:37:19:d9:9e:06:6d:5a:b2:f2:68:3b:2c:8e:55:12:ab:90:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  9 21:00:15 2023 GMT
            Not After : Apr  7 21:05:15 2024 GMT
        Subject: CN=CCBC6F986E86D370E42045262780B7BBE86D6B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fb:4c:b7:46:69:b2:9b:8d:e9:c6:d4:ec:0d:
                    9a:25:43:c6:45:cb:be:d5:8c:1e:0f:c5:3a:9c:64:
                    86:bc:89:af:ea:e4:2e:ab:e6:18:be:de:db:82:ec:
                    23:4a:cd:53:95:36:d8:1e:f0:62:0d:ed:c7:84:23:
                    8a:40:c2:c2:57:11:b5:30:8a:35:8f:dd:40:00:a0:
                    f8:a5:e3:d2:d6:cd:0e:72:b5:42:21:5a:6f:02:93:
                    d3:9b:3c:4c:4d:87:d2:8b:99:cf:cb:af:11:2f:7e:
                    fb:63:3d:e5:43:23:19:91:ed:f0:80:86:9e:d7:01:
                    bd:1e:15:10:fe:7d:6a:28:8f:55:e4:af:4f:7a:70:
                    8f:59:dc:1a:cb:49:0a:33:ee:9b:76:23:ba:46:13:
                    57:82:75:16:c2:1d:c0:95:9d:af:32:5e:14:08:f7:
                    0a:a3:eb:0d:e4:50:16:d1:37:7c:ea:8c:b9:e4:29:
                    9e:f0:5d:ef:f7:79:6f:91:9e:0f:23:ec:6d:1b:1d:
                    db:25:af:44:e6:20:93:34:7a:9f:c2:7a:07:4c:a3:
                    be:6f:d3:94:20:5c:70:78:a2:f2:1e:38:80:f8:8e:
                    7b:2c:5a:c2:29:38:9b:d5:3b:a5:79:2a:4b:e2:45:
                    57:0e:67:2f:d5:97:55:bb:43:b7:c2:69:d8:19:61:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BC:6F:98:6E:86:D3:70:E4:20:45:26:27:80:B7:BB:E8:6D:6B:28
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203069.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802c::/46
                  2a12:dd47:8230::/44
                  2a12:dd47:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:ec:0f:61:0e:71:e7:6a:43:55:f0:12:0b:b5:ac:a9:e5:5d:
         f3:f9:1e:75:1f:8b:e8:92:1f:2d:87:69:2e:96:11:68:f0:94:
         be:0e:c8:22:42:d1:c2:aa:48:3c:a2:16:27:8c:f5:7a:16:2c:
         d7:6d:dc:7e:61:99:8e:8e:d1:21:96:95:83:65:b4:8c:3b:c2:
         79:9e:9e:a1:c6:82:4c:91:3a:14:e3:b5:22:8f:87:d6:2e:0a:
         de:13:bb:ef:84:f7:95:6f:fb:be:af:42:c3:fc:a8:09:99:24:
         6a:16:ee:55:36:20:c7:8f:08:43:3d:46:93:ec:68:2e:92:ad:
         2d:97:47:14:dc:00:55:92:7f:99:74:60:dd:b3:5c:09:bf:62:
         25:e6:8c:a1:78:12:78:d7:19:37:53:21:f6:e2:11:a5:2d:14:
         cb:e9:73:74:a3:d3:c1:5d:d2:93:61:36:91:94:6d:f3:b1:66:
         cc:79:1e:75:58:68:4d:88:76:d8:dc:bf:b6:c1:f3:09:cb:7d:
         ac:39:59:eb:53:00:75:fc:c5:c4:c7:9b:3d:b1:f5:37:61:66:
         34:42:25:ce:fc:95:6f:6e:ed:33:62:e0:56:4f:d1:4b:4f:95:
         8b:44:6a:f6:a2:27:f7:ae:bd:2b:b0:7b:f2:3d:ae:c6:76:dc:
         21:8a:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----