Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203418.roa
File:                     AS203418.roa (raw, json)
Hash identifier:          hEkuhkrb+oG/75GHrnJ+OEiNKPAx5qWlPehz6MOtYnY=
Subject key identifier:   B9:C4:56:7E:FE:0F:4B:21:30:1C:17:52:99:4B:FB:EC:A6:05:35:49
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       530BEE22F0078A814604E9C0CD9F1368FAE18B8B
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203418.roa
Signing time:             Sat 08 Apr 2023 09:22:23 +0000
ROA not before:           Sat 08 Apr 2023 09:17:23 +0000
ROA not after:            Sat 06 Apr 2024 09:22:23 +0000
asID:                     203418
IP address blocks:        2a12:dd47:807d::/48 maxlen: 48
                          2a12:dd47:8320::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0b:ee:22:f0:07:8a:81:46:04:e9:c0:cd:9f:13:68:fa:e1:8b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:23 2023 GMT
            Not After : Apr  6 09:22:23 2024 GMT
        Subject: CN=B9C4567EFE0F4B21301C1752994BFBECA6053549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:ad:65:ff:e1:86:79:77:50:1a:22:1b:f5:
                    f6:4c:ad:0a:35:78:86:3f:cf:82:6d:25:fa:e1:9e:
                    2f:ec:25:6f:97:c3:bf:7d:11:21:35:82:2e:73:6d:
                    39:3b:5d:51:a9:b8:88:0b:67:15:ea:f1:52:91:66:
                    49:1c:17:97:b6:7a:b7:9a:65:4e:bf:e0:27:56:4f:
                    b8:6e:6c:48:10:b6:e8:8e:8d:9f:7b:c9:dc:2d:37:
                    75:e6:44:f0:7e:d8:54:90:b4:43:88:df:82:8a:26:
                    4d:32:72:63:71:5b:b4:bf:ab:69:de:e9:07:d1:cd:
                    bc:71:92:64:20:70:6a:96:a7:87:a1:46:e0:16:2d:
                    99:ab:21:f6:7b:57:04:40:d4:74:18:31:0c:18:c7:
                    31:0c:fc:ff:e3:58:3b:3c:c7:7c:1c:48:7f:3b:96:
                    88:b7:f7:83:a5:1e:5d:5e:cd:21:8a:1f:19:5f:21:
                    b7:c8:89:52:1b:6f:e7:8e:0b:6e:fb:74:4c:74:3f:
                    15:c6:72:69:b6:58:8d:47:73:10:8a:9c:fd:33:a2:
                    ce:68:5d:1d:eb:53:2f:b9:c3:00:1e:e8:e8:a9:9f:
                    a8:34:40:78:ed:44:ab:02:66:3b:10:f8:ca:4a:b6:
                    38:3b:1e:c6:34:33:59:38:bf:7d:55:91:b0:e3:9e:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C4:56:7E:FE:0F:4B:21:30:1C:17:52:99:4B:FB:EC:A6:05:35:49
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203418.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:807d::/48
                  2a12:dd47:8320::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:b4:44:41:69:3e:7b:92:df:9e:4c:51:f4:4f:17:26:09:20:
         f5:4f:52:21:09:59:9e:b0:04:49:18:f0:2b:31:bc:df:89:1a:
         98:ac:3f:3a:20:3d:8e:18:c3:1b:e7:1f:6b:97:75:a3:7b:6c:
         8f:a3:e2:60:85:23:8b:a7:fa:c0:ab:e7:38:c5:0f:61:8e:1e:
         77:11:50:33:d5:ce:b2:95:48:b6:43:ff:e4:e0:04:6c:d1:04:
         b0:a5:93:a1:84:a5:3d:fa:48:9a:14:38:96:43:42:9e:cb:e0:
         65:30:e9:c5:2f:84:ab:c0:ca:e2:96:fa:4e:05:ae:24:da:c2:
         1e:07:e9:13:10:4c:9a:a4:0b:af:68:ff:7f:fb:50:00:09:c5:
         fc:ae:00:81:6b:18:48:6b:00:5a:14:04:e3:da:fe:f9:77:31:
         c0:6e:b7:ae:18:a3:4a:44:df:4c:2b:4e:ee:33:71:64:4a:06:
         8b:f5:d6:1f:12:6c:71:6d:61:04:36:b2:ed:93:16:2f:99:ac:
         c5:fe:83:88:0d:dc:07:06:d9:07:a5:b4:1e:fe:2d:d3:fc:6d:
         47:5e:ac:66:40:e7:69:71:ad:f9:c7:af:04:19:2f:14:e6:79:
         c8:8c:8a:2f:2b:6b:54:47:66:07:dc:fb:3e:f2:65:98:95:4c:
         40:9f:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----