Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203453.roa
File:                     AS203453.roa (raw, json)
Hash identifier:          g2UxTBJkDyAIw4IVk9SPdSOEUPAOiWy8fCGvy5Vbmng=
Subject key identifier:   04:18:B1:8D:FA:E2:BE:F5:35:7F:42:A5:33:52:A0:4D:E4:CC:3D:45
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1CB947976EEE2C062A0B424C5E65C244E7768F8A
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203453.roa
Signing time:             Sat 08 Apr 2023 10:36:50 +0000
ROA not before:           Sat 08 Apr 2023 10:31:50 +0000
ROA not after:            Sat 06 Apr 2024 10:36:50 +0000
asID:                     203453
IP address blocks:        2a12:dd47:8270::/44 maxlen: 44
                          2a12:dd47:82f0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b9:47:97:6e:ee:2c:06:2a:0b:42:4c:5e:65:c2:44:e7:76:8f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 10:31:50 2023 GMT
            Not After : Apr  6 10:36:50 2024 GMT
        Subject: CN=0418B18DFAE2BEF5357F42A53352A04DE4CC3D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:a7:54:c9:ed:fa:5c:7d:c5:13:e8:51:31:
                    f0:26:49:9e:ae:ea:9a:91:33:b9:bf:6b:36:37:97:
                    1c:01:85:80:f9:e4:48:3d:fe:84:9d:a4:08:1e:7f:
                    23:f9:31:1f:c0:09:65:db:94:e8:69:b4:e7:54:f8:
                    c0:b2:65:79:23:78:ab:45:81:b9:96:cf:bc:ae:e8:
                    f9:ec:44:0f:82:77:e7:45:9d:f1:5b:a4:12:b0:c8:
                    32:7a:da:d3:89:8a:6c:e4:00:26:37:a8:99:c4:90:
                    82:16:e6:e6:89:dd:02:a3:29:d4:1f:70:56:17:b7:
                    98:4d:e9:ae:b7:6b:e6:ff:70:68:a6:7d:97:d3:45:
                    ef:96:f8:13:76:04:c9:d6:67:c1:e3:4f:ca:f7:bd:
                    42:26:ae:55:53:79:a5:83:a9:47:4e:98:86:f1:a4:
                    0d:c3:33:18:5b:86:85:0f:92:1d:d2:47:7e:d6:64:
                    0c:bf:04:ba:cc:78:d1:bc:58:1f:af:7e:fb:38:55:
                    33:65:ed:81:ad:b8:71:67:31:7d:7d:bd:19:9b:b2:
                    e8:c5:b6:56:c5:65:4a:4e:0c:cd:71:27:ff:09:d1:
                    c4:12:27:4c:2c:cb:bb:38:c8:c1:45:4f:09:fa:f0:
                    36:ae:2c:a7:cb:13:0a:93:62:07:fc:c1:a2:1c:9c:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:18:B1:8D:FA:E2:BE:F5:35:7F:42:A5:33:52:A0:4D:E4:CC:3D:45
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203453.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8270::/44
                  2a12:dd47:82f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b8:4c:9b:0e:6e:14:40:69:2f:45:8f:5c:de:53:78:c6:8f:6c:
         87:c9:46:db:2f:47:43:0f:ed:ed:80:7c:e6:82:7c:82:a3:a5:
         8e:3c:94:b5:5d:c8:f8:c5:84:24:72:a6:98:6e:b4:d5:24:16:
         ec:8b:23:bf:c6:59:db:be:22:58:39:79:69:fa:fd:8b:aa:b9:
         1f:56:88:3b:e1:2a:6d:78:a3:4f:af:fb:d0:c1:47:21:97:e4:
         00:c3:b1:4a:b2:78:b8:d6:e6:78:2d:fe:c0:3a:42:0c:57:b3:
         04:80:a2:8a:41:bb:63:a2:30:55:03:c6:05:eb:af:91:ec:55:
         8c:b9:f6:ca:0c:3a:b5:d0:c8:a0:2e:02:18:e6:9e:19:c4:11:
         e3:46:5c:23:ea:a9:6c:8c:cc:1f:e7:94:59:6d:c1:48:9e:6e:
         5d:ce:f7:e0:95:ed:6d:04:c9:e6:55:7f:65:34:11:5a:18:3e:
         5b:67:43:9b:a3:02:49:4d:24:6c:fd:92:b4:37:82:f1:53:9a:
         3f:87:ab:54:0e:07:7d:d0:42:d9:8c:93:d6:f0:34:51:eb:2a:
         f2:49:0e:f1:37:0b:25:8f:50:80:97:a4:ce:eb:61:ca:5f:c2:
         3c:02:22:e0:82:c2:f6:e1:1b:52:bd:7c:ed:eb:6e:f3:9c:4b:
         5e:22:14:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----