Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203470.roa
File:                     AS203470.roa (raw, json)
Hash identifier:          wvXaEouXRwmEeVxUsPrHGDFWS3mLSYTwFEmqHV+B6c8=
Subject key identifier:   9A:04:3C:FB:60:0B:6E:BE:A1:8D:32:D0:52:EC:0B:80:99:D5:04:E1
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       0C5C795072C915CC5AB0133C696153E93AEBF54F
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203470.roa
Signing time:             Sat 08 Apr 2023 09:22:20 +0000
ROA not before:           Sat 08 Apr 2023 09:17:20 +0000
ROA not after:            Sat 06 Apr 2024 09:22:20 +0000
asID:                     203470
IP address blocks:        2a12:dd47:80e8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5c:79:50:72:c9:15:cc:5a:b0:13:3c:69:61:53:e9:3a:eb:f5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:20 2023 GMT
            Not After : Apr  6 09:22:20 2024 GMT
        Subject: CN=9A043CFB600B6EBEA18D32D052EC0B8099D504E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:9c:61:f5:46:f2:d1:37:c1:7c:bf:51:f4:
                    57:bc:7f:4f:38:2e:ee:a4:ad:e6:e1:8e:1b:d1:2d:
                    b6:06:69:4d:08:0d:59:58:2c:12:fd:42:03:a5:e7:
                    69:2c:96:a6:ff:96:38:b6:8a:fa:64:75:2e:4e:e9:
                    a0:a7:f3:c9:ff:1a:2c:c0:82:1a:f4:e1:6b:1f:88:
                    0c:77:4a:90:ac:87:05:e1:f2:ba:6f:5b:64:5d:14:
                    c9:96:a3:74:b9:fc:af:6b:99:b5:85:51:22:a3:8b:
                    be:ad:f2:bc:d4:6b:a9:b2:65:59:78:fc:90:7f:22:
                    f2:6c:7d:0f:db:30:e2:b0:14:ce:57:95:d8:5b:e0:
                    37:4f:b0:48:16:3c:01:60:af:d9:7f:17:33:6d:8e:
                    ce:fb:90:1e:47:1a:da:1a:18:0a:ec:eb:cd:4c:0e:
                    ef:de:6e:91:d2:4f:a8:ca:2f:97:0f:65:34:56:ac:
                    cf:94:32:c1:25:a1:eb:ee:61:8e:3a:4f:3f:82:8d:
                    37:ef:ac:c0:62:f9:3b:95:c3:e6:63:95:f3:59:33:
                    36:bc:8f:e3:f1:9e:8b:cd:fc:63:17:0f:c4:1a:51:
                    3c:08:da:45:27:b6:21:fe:d3:4d:1a:87:8f:f1:ae:
                    b7:11:a1:92:41:0a:32:cf:08:26:1e:fe:fd:fe:36:
                    e7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:04:3C:FB:60:0B:6E:BE:A1:8D:32:D0:52:EC:0B:80:99:D5:04:E1
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:5e:3b:02:83:e5:37:3b:a1:b7:c3:ed:c3:92:b6:6d:7f:22:
         b6:b6:59:21:9b:78:73:b8:f8:cb:22:a7:65:5f:d0:6e:8c:56:
         19:bd:1f:4d:19:15:29:58:83:c8:85:43:b0:94:66:2a:97:4d:
         4f:90:0e:54:22:98:c7:35:0d:bb:8c:ce:27:86:e2:a0:5f:88:
         ea:c1:62:8e:32:db:c6:c7:fd:cc:f5:28:ee:bf:cc:f4:4d:e5:
         4d:25:8a:89:55:be:63:d5:49:d3:d3:68:ab:da:75:07:fc:11:
         00:67:e4:f9:c6:0e:23:93:5b:84:80:f3:33:9c:20:2c:f2:0f:
         58:12:97:ff:d2:56:7b:83:36:f6:71:ab:c6:65:bf:91:bc:b8:
         b9:5d:da:f5:14:48:e0:b1:e3:0a:e6:72:d5:47:ed:35:7e:75:
         b9:e8:41:28:57:cb:f3:58:bf:77:4f:91:fb:a0:1f:5f:fe:79:
         0c:0d:9b:9e:09:02:d1:4f:09:73:a6:bf:47:40:33:aa:23:f1:
         93:48:fc:ff:cc:d1:7a:0d:78:51:7a:7f:86:5e:ef:30:7b:bc:
         c0:5b:a8:89:8c:e6:69:7b:99:10:9f:f1:ec:f5:d1:9c:ac:5b:
         8f:88:b6:3c:39:90:eb:e4:68:81:c6:e4:19:65:b5:d3:d8:25:
         08:4e:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----