Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203635.roa
File:                     AS203635.roa (raw, json)
Hash identifier:          d+VCQdM7CGaBAAoAAUMWt68+RGAXMguIxnyZaDcCWjk=
Subject key identifier:   B7:C3:35:50:C2:E0:46:E8:97:E1:C1:F2:18:BA:73:93:01:83:4C:4B
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       4EE626AD2E04B53FBF89F888307F8F517642E0EB
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203635.roa
Signing time:             Sun 09 Apr 2023 21:00:47 +0000
ROA not before:           Sun 09 Apr 2023 20:55:47 +0000
ROA not after:            Sun 07 Apr 2024 21:00:47 +0000
asID:                     203635
IP address blocks:        2a12:dd47:8079::/48 maxlen: 48
                          2a12:dd47:81f0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e6:26:ad:2e:04:b5:3f:bf:89:f8:88:30:7f:8f:51:76:42:e0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  9 20:55:47 2023 GMT
            Not After : Apr  7 21:00:47 2024 GMT
        Subject: CN=B7C33550C2E046E897E1C1F218BA739301834C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:ca:ab:95:83:93:43:94:4a:39:7a:ba:14:
                    ec:0c:b9:9d:4a:22:14:5b:b3:3c:b9:58:9e:25:4a:
                    4b:ad:66:99:12:7c:69:ae:ca:f1:49:fd:7d:34:ab:
                    ae:62:38:95:c9:69:dc:63:66:05:eb:5d:5d:c4:16:
                    7a:b4:79:e2:cc:91:b3:08:b6:68:60:99:2a:1f:74:
                    ae:52:1b:4f:55:04:6e:09:f0:65:ba:c7:1e:a7:0a:
                    57:64:1c:3d:1d:50:39:d1:31:67:c7:8d:2f:38:cb:
                    8f:8e:9a:cb:e0:46:d0:31:6f:af:cb:74:c1:57:6a:
                    87:91:e1:09:e4:3d:22:56:f1:fc:64:f2:59:28:9f:
                    18:8d:fa:79:6b:2c:c2:66:80:64:21:3b:ec:18:39:
                    a4:42:86:2e:57:71:5d:7c:12:5a:8b:d6:56:ed:96:
                    82:f7:be:b3:ec:79:9f:c0:f8:e5:72:58:80:fd:07:
                    3c:b3:3a:4c:5c:87:9c:60:09:7d:8a:b4:f7:66:83:
                    b1:09:b9:b3:01:72:86:d4:f6:21:16:a3:21:28:76:
                    b8:7c:b0:9f:a7:ad:80:90:32:e6:e9:db:1a:af:03:
                    aa:e7:7c:d5:cb:e3:a2:0a:09:ac:1c:dd:eb:7e:1d:
                    b3:86:2f:c8:19:2f:00:95:c3:de:70:75:51:57:d8:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C3:35:50:C2:E0:46:E8:97:E1:C1:F2:18:BA:73:93:01:83:4C:4B
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8079::/48
                  2a12:dd47:81f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:0a:31:e8:5f:46:f7:4e:b7:f3:57:ac:2d:3f:4f:eb:d9:e0:
         6a:4b:0c:b4:ca:3d:53:75:25:06:dd:79:6d:5d:23:ff:70:c0:
         f6:fd:2a:bb:6a:50:aa:e8:95:2e:1d:23:14:41:0b:af:28:10:
         6a:6d:fd:23:3f:54:ce:1f:af:1d:48:af:79:81:8a:b7:ca:3c:
         db:98:cd:77:0e:cd:4c:fa:df:e5:f6:d8:c2:2b:65:f2:35:67:
         61:84:4d:34:f7:8c:9c:4b:4e:4a:a5:b1:fe:74:39:ec:6f:d1:
         28:b1:a3:39:96:54:1a:c0:cf:12:81:29:6f:5a:c2:27:a1:29:
         9c:f3:b6:1e:6b:11:05:dc:13:a4:3a:62:26:17:c1:57:9e:37:
         bf:88:7a:59:97:e8:51:20:f6:07:eb:25:6c:d7:e7:2b:b4:ba:
         64:1f:32:27:28:69:7e:5a:09:ab:f2:68:53:70:a0:30:6f:79:
         26:d6:75:42:d0:0d:9e:de:50:c9:a6:f2:fd:ee:70:c5:1f:54:
         a9:5f:31:2b:e2:33:fe:13:79:25:e8:f0:0b:68:6a:a9:21:2c:
         ef:4b:9d:b2:7d:dd:a1:d7:d4:b2:76:25:04:99:75:40:f7:d4:
         d1:d4:d8:3b:2d:81:39:51:8a:3c:98:68:d7:a2:bb:0d:15:d5:
         e8:c3:7e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----