Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203199.roa
File:                     AS203199.roa (raw, json)
Hash identifier:          NXJ+mjI+8q1UjPUq4PQjBoZoUtFxq13JspLx/46uMKg=
Subject key identifier:   F2:6F:5F:2F:E5:30:91:AB:9E:41:83:A6:86:BE:6C:BE:4C:C8:78:48
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2A7812656F68EF989E27B2373DE1054F31F52B6B
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203199.roa
Signing time:             Sat 08 Apr 2023 09:22:26 +0000
ROA not before:           Sat 08 Apr 2023 09:17:26 +0000
ROA not after:            Sat 06 Apr 2024 09:22:26 +0000
asID:                     203199
IP address blocks:        2a12:dd47:8007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:78:12:65:6f:68:ef:98:9e:27:b2:37:3d:e1:05:4f:31:f5:2b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:26 2023 GMT
            Not After : Apr  6 09:22:26 2024 GMT
        Subject: CN=F26F5F2FE53091AB9E4183A686BE6CBE4CC87848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:ec:ad:80:cc:27:d3:01:d5:72:3d:9c:58:
                    78:33:b6:ae:1e:8d:e8:27:04:c1:78:47:d1:c7:0f:
                    1c:19:9d:5d:b1:b4:b2:12:d9:10:a2:b6:d7:b7:90:
                    4e:28:70:f3:43:16:78:57:ea:9b:e8:2e:80:a6:d7:
                    b4:0a:01:4a:9b:96:5f:01:cb:89:f9:66:d2:93:d9:
                    da:fb:62:ab:ea:c9:d6:10:10:ba:0c:38:24:5e:e7:
                    26:13:9c:4b:88:f5:e3:f2:78:1d:97:dc:68:42:84:
                    67:4e:b3:1a:6b:78:60:fc:e9:ee:6c:23:a6:21:c3:
                    87:7d:59:52:2b:3e:d2:1d:9c:50:a0:ff:25:ab:31:
                    3f:c1:fb:52:1a:40:dd:66:7c:97:e1:c1:90:95:8c:
                    88:b4:4e:af:2d:67:de:26:d6:82:a2:3c:75:6e:92:
                    36:e5:67:64:d0:83:fc:08:ae:ac:c2:84:c6:d9:83:
                    51:b1:f6:4b:c4:ea:40:af:61:ac:72:3e:4c:af:a8:
                    21:78:83:a7:c4:c9:d1:40:c7:1f:54:71:07:02:53:
                    83:e4:02:70:d7:4f:e2:e1:ad:10:b0:f3:d7:05:28:
                    85:d7:59:02:a5:2a:c8:7b:28:49:f8:0f:55:18:aa:
                    3c:cb:d8:1f:7c:da:56:72:c2:81:f1:da:d9:20:0b:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6F:5F:2F:E5:30:91:AB:9E:41:83:A6:86:BE:6C:BE:4C:C8:78:48
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8007::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:fa:40:36:54:ac:8a:51:a2:45:ec:7d:7d:b5:94:e1:a2:98:
         5f:7c:19:78:eb:1e:53:a3:ed:9c:be:03:e2:a4:d9:fb:8d:47:
         8a:50:75:28:61:32:07:d2:ca:3d:e2:47:25:02:31:fe:8f:62:
         37:0f:15:64:81:c9:fa:0e:d4:b3:68:17:dc:0c:ef:05:4b:d8:
         4b:d8:ae:10:1c:de:89:ba:d5:67:1c:29:81:d0:a6:d2:ce:91:
         da:01:d2:a3:c6:88:48:a1:da:bc:ce:88:ef:b6:0c:2c:bb:80:
         6f:7b:f0:cf:04:d1:37:5d:c6:d5:07:94:79:46:ac:19:30:c3:
         53:3e:8f:f3:d9:1c:fc:ab:42:15:20:6a:4f:f1:a5:ec:da:ce:
         8c:b0:cb:7e:ce:b6:9c:ed:de:bd:2a:e6:fc:cb:6d:7f:0b:69:
         d1:ff:a8:21:25:d4:52:2d:fb:48:27:45:18:a7:4f:2a:c9:b5:
         93:03:a6:15:6d:de:74:94:8e:39:3c:2a:61:de:e1:a3:58:4c:
         1b:ce:82:18:40:af:9a:af:24:54:21:2b:18:2d:00:18:fa:31:
         5f:56:d4:40:05:0c:16:b2:e4:67:f7:b6:f7:16:27:6c:74:7f:
         1a:34:ca:40:b8:9c:f0:e8:fb:ca:c1:2e:0d:b9:04:75:48:b1:
         32:62:bd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----