Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203323.roa
File:                     AS203323.roa (raw, json)
Hash identifier:          G6RXIU0ptihHew4lxwGP9PTZjPPtKEGChECRiExjCWI=
Subject key identifier:   56:71:3D:39:CE:47:74:6F:B1:FE:49:77:D5:59:0D:C5:03:FF:57:70
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3BF192C58C76B7FBEA0BB976A6C51AD994C3BB02
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203323.roa
Signing time:             Sat 08 Apr 2023 09:22:16 +0000
ROA not before:           Sat 08 Apr 2023 09:17:16 +0000
ROA not after:            Sat 06 Apr 2024 09:22:16 +0000
asID:                     203323
IP address blocks:        2a12:dd47:8078::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f1:92:c5:8c:76:b7:fb:ea:0b:b9:76:a6:c5:1a:d9:94:c3:bb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:16 2023 GMT
            Not After : Apr  6 09:22:16 2024 GMT
        Subject: CN=56713D39CE47746FB1FE4977D5590DC503FF5770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:55:b7:57:52:1e:7e:17:fb:51:89:01:1e:
                    4e:7c:c4:f8:23:8b:9f:30:dd:ce:bd:43:19:f6:88:
                    1c:27:e8:5f:8d:54:1f:1f:af:96:1a:82:4f:6a:9d:
                    4b:3b:3e:3e:de:5f:8e:2b:36:01:8c:31:cb:6f:42:
                    a7:f7:fa:24:80:42:39:9a:30:23:f7:9e:f6:cd:33:
                    22:38:10:f3:6f:6d:81:27:1d:c1:90:62:70:55:91:
                    36:d4:f1:5e:87:0c:af:3c:da:c3:ee:65:87:d2:34:
                    bb:6a:33:68:c8:72:6a:2f:b7:75:0c:7c:24:bc:3b:
                    c7:a6:46:d7:5f:90:82:f2:b1:f1:10:d4:5f:9b:36:
                    94:9a:ee:c9:51:30:c2:d6:15:b9:b2:33:69:b5:4f:
                    a2:70:ec:75:cc:ce:9e:09:47:e7:39:08:b2:8b:1b:
                    b3:7a:b5:1a:7a:e7:77:1a:1d:0d:0a:33:ab:d6:86:
                    6f:c7:7a:6c:63:5f:36:5c:cb:ae:18:2e:60:8c:bc:
                    cf:5d:4d:57:db:c4:d9:cd:b0:ba:11:43:fe:08:d6:
                    a0:ca:af:a7:ff:44:90:e5:f8:cf:22:4f:a3:27:72:
                    c7:32:19:78:19:94:19:6b:13:53:3f:b4:e8:f4:fd:
                    10:ea:8c:69:2b:5d:23:6f:97:ad:a2:65:d0:00:f1:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:71:3D:39:CE:47:74:6F:B1:FE:49:77:D5:59:0D:C5:03:FF:57:70
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203323.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8078::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:49:96:b9:19:12:f8:fd:fa:79:98:6e:67:d7:07:5c:ef:44:
         92:f3:8e:a3:2e:13:16:70:0a:eb:da:ab:fb:30:f0:07:8b:73:
         8e:e0:a7:57:7e:00:00:51:97:1b:42:e1:3d:96:4f:97:08:ff:
         1d:cf:29:b6:52:8a:d6:d8:f5:2a:ea:d3:f8:06:5b:75:1e:ed:
         76:04:a5:2f:de:19:6b:81:81:16:91:cb:c8:a0:32:c0:94:46:
         ca:c3:13:e9:6f:97:84:b1:3a:2d:cb:0e:b3:09:fc:ef:0d:9b:
         be:b1:44:6e:26:d9:74:17:54:f2:14:e5:c1:20:e9:0d:55:62:
         a9:7b:8d:7c:81:41:93:c7:02:11:f5:98:d1:c3:b0:fe:ee:b8:
         39:41:04:78:6c:0d:20:fc:bc:7c:c7:3c:f2:0d:a2:2b:3b:a3:
         b2:8f:a6:a3:8c:d3:3c:9d:48:e1:bf:fc:23:9a:cc:cf:88:13:
         cf:ae:cf:6a:31:f9:9f:e5:23:92:01:f4:66:f3:e1:82:38:ef:
         f9:96:01:c0:92:3b:c4:84:5a:32:c4:7b:e9:85:5a:f1:be:be:
         e2:7f:25:0e:ea:9f:14:18:cc:b6:91:fb:e3:b5:74:5a:57:9d:
         86:1f:66:de:ec:41:47:ca:da:7b:d1:01:15:fe:1b:a4:da:07:
         cc:82:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----