Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203075.roa
File:                     AS203075.roa (raw, json)
Hash identifier:          wDZDFdQxvOsoELRhC8F6dW2TMWzvNQu6ssN/bjJuW8c=
Subject key identifier:   AB:BC:2B:E7:05:4E:B0:BD:C8:84:26:60:4F:27:41:AC:0E:9D:C6:34
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6E0671D58B26C9BBB8BA04B7669EB8F7E7EE38C3
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203075.roa
Signing time:             Sat 08 Apr 2023 09:22:29 +0000
ROA not before:           Sat 08 Apr 2023 09:17:29 +0000
ROA not after:            Sat 06 Apr 2024 09:22:29 +0000
asID:                     203075
IP address blocks:        2a12:dd47:8200::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:06:71:d5:8b:26:c9:bb:b8:ba:04:b7:66:9e:b8:f7:e7:ee:38:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:29 2023 GMT
            Not After : Apr  6 09:22:29 2024 GMT
        Subject: CN=ABBC2BE7054EB0BDC88426604F2741AC0E9DC634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:04:e5:3d:18:ef:91:0a:80:78:ac:f4:5f:
                    99:90:3b:c0:69:21:b4:25:85:87:d8:b2:e2:64:7f:
                    ab:32:76:13:d5:55:4d:e3:f2:95:64:0a:87:98:47:
                    46:71:d8:fb:d7:1a:21:e0:d5:9c:49:ed:d2:08:e7:
                    92:bc:78:1c:0f:40:cc:6a:aa:5d:f7:84:8c:b8:02:
                    59:01:4c:32:ef:fb:1f:01:f1:78:3c:46:3a:65:a5:
                    48:3d:b4:aa:88:ef:be:86:88:3b:6b:dc:3d:38:4c:
                    a2:b1:3a:d2:c7:7f:b9:d1:5d:7b:d3:8d:cf:6a:e1:
                    b7:de:9a:c6:2e:84:b5:4c:a0:5a:05:01:4b:cd:b3:
                    4b:ef:c1:bc:fa:20:30:43:11:aa:c9:7e:3c:23:98:
                    26:7c:dc:b4:b6:55:08:01:0b:a0:a2:2d:2c:6f:6f:
                    1f:f2:e1:c8:36:35:49:be:94:68:39:f7:a3:18:2b:
                    12:dd:2a:c3:77:bb:53:37:aa:b5:12:b6:36:61:fb:
                    e2:34:5c:9b:0e:3e:a7:76:5c:89:c1:7a:d1:ff:e7:
                    5e:eb:e6:a1:a6:ae:3c:fb:00:bf:0f:2f:69:e5:74:
                    73:77:64:8e:0f:80:37:c2:0d:9d:c2:38:05:43:1d:
                    a9:36:8c:a2:28:00:5a:e6:94:dc:24:e8:f7:3e:d5:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BC:2B:E7:05:4E:B0:BD:C8:84:26:60:4F:27:41:AC:0E:9D:C6:34
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8200::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:05:57:ad:94:40:6b:0b:df:76:67:84:00:66:c7:41:06:8b:
         2f:85:a6:04:42:2a:8c:14:3f:ef:71:43:a4:77:e5:e1:0a:7c:
         e3:14:21:81:09:6d:60:2a:f6:ec:ec:45:35:53:85:92:b0:bd:
         c9:97:5a:86:4e:6d:de:4e:64:11:bc:ef:bd:68:a1:22:8f:30:
         ef:85:a4:c8:ee:65:b4:b6:a6:18:82:ac:ca:14:be:35:6a:95:
         08:14:6e:ac:75:71:f5:a3:fd:bf:ca:b0:96:99:42:a5:d5:09:
         f6:29:61:7b:19:9c:69:e4:4a:c7:ab:60:46:c5:42:6b:f2:40:
         be:ea:05:f7:3c:31:4e:13:a1:aa:3a:6f:6d:83:bd:b8:0e:a2:
         44:42:07:34:df:8f:79:84:20:1c:60:33:1d:a2:08:35:86:fb:
         19:05:86:5b:95:63:31:41:05:40:22:0e:d0:0f:93:c6:6c:26:
         0c:5f:31:6f:26:c4:6b:f8:33:2d:9d:a2:89:35:e6:11:21:a1:
         ce:b1:c2:a8:3e:3a:e4:8e:79:eb:e1:4c:7b:6d:e5:d4:ea:e3:
         0e:94:1b:d1:ff:71:c7:21:bd:dd:98:f4:27:9b:e3:f9:b5:de:
         dd:5b:29:21:25:bf:2b:95:83:1d:f1:10:e5:21:79:2b:17:cb:
         71:e9:6f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----