Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203577.roa
File:                     AS203577.roa (raw, json)
Hash identifier:          VBK4C9nODQusdK/5onMKZZlMNa+RpHtxLMEful14zFM=
Subject key identifier:   4C:60:E7:62:E4:4F:12:96:9C:16:B4:6A:3C:01:EE:CF:BE:88:9B:26
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       4D55B52CB8300FFB5D2F1B68F5D57210853ABEED
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203577.roa
Signing time:             Sat 08 Apr 2023 09:22:18 +0000
ROA not before:           Sat 08 Apr 2023 09:17:18 +0000
ROA not after:            Sat 06 Apr 2024 09:22:18 +0000
asID:                     203577
IP address blocks:        2a12:dd47:81e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:55:b5:2c:b8:30:0f:fb:5d:2f:1b:68:f5:d5:72:10:85:3a:be:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:18 2023 GMT
            Not After : Apr  6 09:22:18 2024 GMT
        Subject: CN=4C60E762E44F12969C16B46A3C01EECFBE889B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:18:69:86:d7:23:b7:90:a0:d0:81:48:96:
                    9a:fa:7a:2e:eb:ff:5e:b8:76:e0:78:2c:bf:50:7c:
                    e8:f9:67:9d:11:67:d2:d8:9c:b3:1a:91:96:6b:db:
                    e6:93:e6:0a:2a:ca:35:f8:f3:36:d9:8d:9c:04:e9:
                    0b:bc:a8:9b:a8:c8:db:73:a3:1c:ae:ff:3d:0b:50:
                    25:6f:cc:0f:3d:35:3c:23:5a:5c:68:bd:b8:6f:e8:
                    f8:e4:60:07:f3:dc:36:53:7f:ba:87:8f:af:5f:74:
                    74:38:72:d6:53:e0:f8:cd:72:65:65:95:1b:cf:fb:
                    02:5c:a2:28:36:55:c3:58:22:89:ae:0f:95:ed:85:
                    b9:bb:d1:9d:a9:cd:d0:38:00:3d:59:bd:ed:ab:3e:
                    0e:cb:77:b2:a0:b6:22:c1:a9:8e:1e:37:98:bc:c3:
                    04:18:8b:0a:ea:32:fc:05:5e:be:95:1b:3e:66:99:
                    1d:a8:19:85:6b:3c:60:c4:1d:0a:b0:33:d2:fb:79:
                    83:03:02:d6:6f:4c:3b:b5:48:87:51:e3:8e:16:ad:
                    16:8c:af:b7:63:1f:f4:04:1c:74:81:d3:bd:cb:a3:
                    ea:8c:2f:0d:58:94:be:f8:bb:b1:55:76:a2:1e:fc:
                    55:e8:37:d0:46:57:93:a8:9b:8a:f5:5e:df:92:29:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:60:E7:62:E4:4F:12:96:9C:16:B4:6A:3C:01:EE:CF:BE:88:9B:26
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         64:bb:90:a5:a7:d5:a2:b3:a0:fc:16:15:c8:d9:5c:28:d1:8d:
         d6:f5:ba:c9:4a:6b:65:3b:05:a9:63:6f:ab:f8:76:fb:fe:b9:
         d1:78:1f:0a:7d:00:5f:1b:f2:5a:43:6b:21:8a:79:9d:59:cf:
         3d:60:fa:9d:2c:a2:9b:b3:36:93:13:36:7a:4d:34:e0:e6:de:
         29:1b:82:04:63:fe:e6:cc:25:f6:fa:9b:b5:71:09:d2:87:00:
         73:b6:c9:a6:60:3c:5e:ef:59:23:8c:55:e0:5f:7c:02:a2:83:
         93:0b:87:a0:ea:ea:c9:86:cd:4d:90:a9:3c:b0:54:b2:58:a5:
         cf:fc:1e:f4:64:f8:0d:dc:b0:a8:49:c0:ac:a0:25:4c:af:0b:
         06:13:a1:07:31:2a:55:e4:ba:9a:0f:32:31:29:e7:c3:ec:21:
         1b:0f:99:5f:a1:0d:8c:29:f7:5d:af:e6:48:a7:83:0b:fe:1b:
         86:8b:fe:cd:e1:8b:0e:3e:71:0c:88:06:b4:5e:1f:71:11:a6:
         ee:e3:73:60:0a:02:0d:a8:9a:b3:97:18:b5:03:2a:47:39:60:
         83:6c:ca:c3:1d:b3:ee:a3:0e:be:a0:62:c8:33:06:49:a6:da:
         11:03:95:7f:9d:dc:1c:36:5e:06:dc:37:31:b1:0a:82:e5:0a:
         58:5b:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----