Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203145.roa
File:                     AS203145.roa (raw, json)
Hash identifier:          Xnd7soHU3Bl2WyY6lCpwzOWQcEi2HEP9oWQ2+hjKi18=
Subject key identifier:   CD:40:75:FD:77:E3:56:76:5A:FA:C8:E7:6A:AF:82:B4:F2:0E:78:7A
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       41B916473C91070BBF77280D588C6012B914E911
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203145.roa
Signing time:             Sat 08 Apr 2023 09:22:13 +0000
ROA not before:           Sat 08 Apr 2023 09:17:13 +0000
ROA not after:            Sat 06 Apr 2024 09:22:13 +0000
asID:                     203145
IP address blocks:        2a12:dd47:8120::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b9:16:47:3c:91:07:0b:bf:77:28:0d:58:8c:60:12:b9:14:e9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:13 2023 GMT
            Not After : Apr  6 09:22:13 2024 GMT
        Subject: CN=CD4075FD77E356765AFAC8E76AAF82B4F20E787A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:ec:18:3a:a3:6e:17:f4:33:98:91:b9:51:
                    10:dd:e8:fe:49:da:4b:bc:7c:a4:26:88:1c:e5:56:
                    ce:9a:38:89:8c:e1:12:88:8e:66:98:55:40:b7:db:
                    cc:1f:e0:a4:02:c0:fb:98:ab:a0:90:ee:a5:6f:da:
                    c3:48:35:63:15:e6:bb:dc:47:0f:62:f7:90:fc:e4:
                    7e:96:e9:7f:87:70:0d:2c:d1:ab:7f:72:4f:31:62:
                    d1:2f:c2:d4:90:98:0b:18:2f:cc:f2:fb:2d:53:13:
                    f8:f2:43:1d:5d:f6:36:6a:1d:da:5a:a5:12:bc:c2:
                    9e:1a:e3:7d:f1:a7:d6:ea:4c:f7:b9:f0:f4:cc:de:
                    d6:bd:cd:2b:50:37:27:16:1a:d0:91:32:e2:ca:3c:
                    cc:65:15:3a:a9:0a:9b:84:79:66:8f:5b:f0:d8:fb:
                    0e:aa:77:6b:e3:c1:5b:0d:89:ca:c0:2b:7f:8a:68:
                    89:49:fc:81:52:a2:ce:98:10:c0:c4:e4:ea:09:2a:
                    97:87:fd:9d:fd:97:13:d2:0e:29:18:1e:68:fb:f2:
                    2b:69:66:63:82:12:e6:1f:c9:13:3a:30:be:ff:06:
                    38:6c:0b:43:54:ea:29:13:70:6a:64:f7:f8:7a:e0:
                    06:8f:91:62:e7:5e:9e:31:71:f2:a6:4c:6d:4b:e3:
                    d9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:40:75:FD:77:E3:56:76:5A:FA:C8:E7:6A:AF:82:B4:F2:0E:78:7A
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203145.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8120::/44

    Signature Algorithm: sha256WithRSAEncryption
         95:54:39:ca:71:05:56:64:f3:43:91:17:25:0b:20:eb:63:76:
         a0:5c:ed:01:e9:9c:72:dc:17:7a:97:77:fb:47:bc:22:ae:81:
         67:9b:af:11:a7:9d:07:cb:ca:c8:ad:f6:94:1e:38:61:e4:5d:
         61:25:0e:c3:ea:75:3f:3b:48:2a:42:04:46:a8:ee:54:e4:49:
         36:1c:c7:9c:de:f9:0a:cd:49:64:1c:f5:10:0a:af:9c:e5:e9:
         20:b6:60:c8:5b:68:23:bd:52:84:dd:52:75:b4:81:f3:3d:09:
         a1:dd:88:27:9c:ba:bf:fb:af:47:44:49:87:fe:86:fa:02:51:
         6b:d9:5b:f5:ec:f4:09:81:f2:f8:47:cf:6a:3c:67:2c:5c:5a:
         67:e2:f3:44:48:e9:16:7b:f0:92:41:22:a4:6d:6a:c7:12:c7:
         3e:ed:9b:f4:ef:b1:6c:8b:44:7d:b0:9c:f2:08:1f:a9:22:4f:
         f3:64:aa:08:09:25:47:10:c7:8a:76:3f:50:bf:00:5c:0a:30:
         45:87:34:06:0b:22:af:f6:88:4e:67:f1:9a:97:9c:9a:2a:42:
         67:2b:36:6a:bd:1f:88:3d:6d:64:0c:cd:73:9d:2b:94:7c:61:
         50:fe:93:b7:a6:7f:3c:5d:ca:11:7d:25:7e:50:c8:97:17:8e:
         ca:0b:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----