Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203529.roa
File:                     AS203529.roa (raw, json)
Hash identifier:          RpcvxtVz9NaolbGhXioDdtrDudRt6oIfu4UoFGj4gnM=
Subject key identifier:   DB:AB:B4:97:13:36:33:9E:DA:5B:04:0C:34:CC:B5:32:42:92:B4:F4
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       16003F7EFF1A5BD73566C4BB59B3579680F10FB2
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203529.roa
Signing time:             Sat 08 Apr 2023 09:22:12 +0000
ROA not before:           Sat 08 Apr 2023 09:17:12 +0000
ROA not after:            Sat 06 Apr 2024 09:22:12 +0000
asID:                     203529
IP address blocks:        2a12:dd47:5e10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:00:3f:7e:ff:1a:5b:d7:35:66:c4:bb:59:b3:57:96:80:f1:0f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:12 2023 GMT
            Not After : Apr  6 09:22:12 2024 GMT
        Subject: CN=DBABB4971336339EDA5B040C34CCB5324292B4F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:0e:8e:c3:df:26:db:cc:85:23:9e:73:aa:
                    04:93:3f:20:d9:b2:1c:45:19:9f:f2:9a:bd:d4:da:
                    ef:4e:7e:74:65:d4:e5:b1:6f:39:df:2c:5c:91:de:
                    90:ac:2e:bf:c6:fa:b4:d6:a1:37:c7:cf:e9:71:d1:
                    da:de:a5:40:91:dd:18:4a:aa:44:8d:7e:ac:f6:2f:
                    1c:08:4a:7c:59:60:3d:f9:0f:d8:84:ea:a8:5d:5f:
                    10:92:51:39:dd:07:d0:7e:8b:f3:c4:3e:6a:c2:3d:
                    46:35:53:5e:f0:ef:8e:50:42:b4:f3:e4:20:29:0b:
                    a5:4c:45:2c:48:05:f0:85:68:f6:a3:bf:73:29:49:
                    ad:15:6b:65:d3:c9:f9:bb:e3:ec:95:62:17:0f:96:
                    e2:58:53:d3:29:8a:37:ec:5a:62:b0:dc:46:f2:9a:
                    4f:5d:fd:4f:d0:f4:5d:6f:d0:62:2f:82:c3:ae:ac:
                    f9:51:e3:fe:e9:d3:e6:c8:2f:75:86:9e:40:c1:e9:
                    ed:c6:3c:df:d9:ce:ba:b8:47:0b:e0:c1:46:ab:16:
                    00:31:ce:67:f8:e5:9e:d3:21:79:16:6f:c9:df:b0:
                    96:a4:a2:41:9e:de:7b:46:f4:98:c3:1b:ff:97:d6:
                    09:74:bf:51:71:73:ca:97:4f:88:da:d4:3b:28:df:
                    81:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AB:B4:97:13:36:33:9E:DA:5B:04:0C:34:CC:B5:32:42:92:B4:F4
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5e10::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:42:33:77:b5:18:f1:2c:5e:84:70:4e:59:ed:dc:9d:24:d7:
         c1:00:d9:04:d2:20:b5:27:8e:be:b6:66:1b:f8:db:e8:62:c7:
         2b:f3:85:a6:67:bb:7d:cf:e0:8b:c9:2b:bb:0d:5c:ea:72:95:
         24:64:0d:c0:9b:ae:58:08:ad:fd:13:0f:1f:31:da:c8:b4:4d:
         bd:7d:ea:4e:bb:75:cb:53:8a:8f:28:99:1d:cf:e5:8a:6a:0c:
         32:55:17:65:6b:6f:25:93:fc:0a:47:a3:29:55:73:94:a9:b7:
         af:14:7c:27:cc:49:42:b6:7a:72:2e:d7:0a:a7:33:2c:ab:1b:
         40:59:af:f1:44:79:56:67:98:97:96:ab:9e:24:b0:85:e1:75:
         ab:44:ad:6e:76:b9:9d:5a:d8:0c:6f:5a:41:4a:84:04:be:52:
         20:44:ce:e2:4c:0e:28:62:1a:b5:f4:3b:66:9d:98:e7:00:61:
         5b:e5:86:66:9b:fd:83:ae:f5:79:ea:ae:83:0f:95:d2:d4:7c:
         db:5f:44:5a:a0:05:d4:0d:3a:72:15:28:07:23:8e:24:69:a7:
         e3:c0:94:d4:b0:bc:44:eb:32:63:4a:48:55:c1:a7:59:7d:22:
         8e:bd:5d:83:91:9d:24:f1:f7:49:6d:54:4f:79:ff:b6:66:80:
         d3:bf:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----