Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203636.roa
File:                     AS203636.roa (raw, json)
Hash identifier:          wlgjk+855xDKxQ4qez7ypJpgoWi76+VVM+HgHe9UKq8=
Subject key identifier:   07:FD:46:67:98:BB:EC:1C:54:43:7D:EE:5F:C0:3E:51:E8:D1:0B:27
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       05886213732E70EF87CBE288C16261E53A5D633D
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203636.roa
Signing time:             Sat 08 Apr 2023 09:22:23 +0000
ROA not before:           Sat 08 Apr 2023 09:17:23 +0000
ROA not after:            Sat 06 Apr 2024 09:22:23 +0000
asID:                     203636
IP address blocks:        2a12:dd47:5100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:88:62:13:73:2e:70:ef:87:cb:e2:88:c1:62:61:e5:3a:5d:63:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:23 2023 GMT
            Not After : Apr  6 09:22:23 2024 GMT
        Subject: CN=07FD466798BBEC1C54437DEE5FC03E51E8D10B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:78:c2:2a:77:9a:34:31:97:97:71:f5:62:c8:
                    14:18:66:44:39:54:cc:0f:32:1c:38:20:d7:08:2d:
                    2d:2b:ff:be:7e:96:cc:4e:33:8a:86:7d:f9:6e:b5:
                    87:e0:2c:81:cd:b9:fc:a9:1b:5d:cd:94:66:0a:b3:
                    32:ce:45:48:52:d2:2d:1b:6d:ca:cc:82:f6:00:8d:
                    57:8a:23:7b:0e:54:c2:7d:6e:ca:54:4e:0a:8c:5e:
                    fa:cf:76:8e:84:38:8d:b1:73:af:df:08:ca:eb:c9:
                    b4:dc:d4:85:a3:c7:60:96:69:73:0f:ab:10:b3:8e:
                    06:cf:e4:57:22:5b:88:12:e2:71:34:8e:d4:6b:08:
                    08:f9:09:7a:1e:f6:b3:76:5d:8f:ea:4d:ee:a6:a1:
                    f0:22:70:e2:3c:6c:ed:b7:f6:31:53:c0:01:8b:e3:
                    e6:44:fe:eb:0d:02:08:f6:30:e4:c3:9a:63:a7:b1:
                    94:63:e8:f9:70:85:85:a1:bd:be:cb:02:2e:1a:85:
                    43:37:b7:d5:38:9a:53:9d:66:4d:f3:05:77:b2:b2:
                    70:f9:af:a4:aa:b8:b5:2f:ab:d9:20:44:28:66:80:
                    07:10:54:f8:d3:93:05:4c:d5:bb:14:f0:d2:e4:cb:
                    c9:3c:02:7a:47:a4:de:a2:f8:77:51:79:36:42:3c:
                    fb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FD:46:67:98:BB:EC:1C:54:43:7D:EE:5F:C0:3E:51:E8:D1:0B:27
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:69:ef:d0:f1:f1:0d:5f:50:d0:25:32:65:da:97:e1:32:c5:
         89:58:9d:32:6e:14:b4:cf:73:71:76:c4:27:14:f7:84:57:be:
         61:ad:c3:19:60:a0:2e:77:1f:cd:85:3d:14:ad:18:15:f1:f4:
         21:ad:72:86:7a:28:95:5d:b2:99:7d:8e:09:eb:27:1e:32:9e:
         f9:96:98:14:8d:72:96:81:ff:e0:20:1d:c5:df:df:c0:b6:69:
         d8:2e:bd:b6:c9:06:f1:b9:e0:85:20:04:7d:26:30:69:78:6a:
         a4:1a:7d:48:67:07:e0:cb:f4:6d:13:6d:70:32:94:2f:88:80:
         b5:32:11:7f:db:b7:19:2d:90:45:d0:25:9e:42:87:65:f2:e9:
         24:b8:98:21:ca:e4:c9:ae:74:19:b9:13:ce:d1:77:16:a1:bf:
         9d:5e:9b:e6:89:db:34:af:ec:6c:07:06:cb:c7:11:7d:a4:f8:
         79:db:e0:fb:d2:02:ff:c7:0b:28:1c:5f:8d:f7:bd:d2:e6:bc:
         36:a3:5d:b4:0d:f1:57:cb:14:08:cb:a8:6e:4f:59:93:c3:82:
         04:03:0b:fd:8e:d2:bf:73:7c:a6:b4:ad:a3:50:b2:30:9d:41:
         19:ed:26:fb:70:94:95:7c:ba:73:00:fc:7b:93:0b:24:c8:a9:
         67:89:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----