Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203737.roa
File:                     AS203737.roa (raw, json)
Hash identifier:          HPXB1HVbObZWKN9DOz9PQXHa18GC/0nUL68a9Vc3yzk=
Subject key identifier:   60:1E:78:19:3F:EF:6B:EF:EA:E2:5F:D3:6C:AA:52:A9:E8:50:93:A2
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1C3DB0E41C453D16CAB973F5296728540D6E6A31
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203737.roa
Signing time:             Sat 08 Apr 2023 09:22:23 +0000
ROA not before:           Sat 08 Apr 2023 09:17:23 +0000
ROA not after:            Sat 06 Apr 2024 09:22:23 +0000
asID:                     203737
IP address blocks:        2a12:dd47:81b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3d:b0:e4:1c:45:3d:16:ca:b9:73:f5:29:67:28:54:0d:6e:6a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:23 2023 GMT
            Not After : Apr  6 09:22:23 2024 GMT
        Subject: CN=601E78193FEF6BEFEAE25FD36CAA52A9E85093A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:75:34:55:a4:bd:93:d6:e8:4a:17:07:5e:
                    1d:23:17:e6:cc:e6:e6:f3:7f:2a:d2:f3:b1:0d:f1:
                    bf:50:b6:d2:78:78:7e:39:0e:df:ed:df:a3:78:94:
                    fa:aa:10:d1:c7:5d:4e:73:da:3a:cd:59:71:80:11:
                    27:ab:5b:4d:ec:d2:e4:69:8b:06:18:c0:f5:f8:90:
                    f3:ee:04:23:af:7f:71:d2:a4:c3:9c:3f:f3:e8:1d:
                    5d:ea:93:d7:90:6a:56:f7:ab:16:06:16:73:60:90:
                    8b:06:10:80:11:5f:5b:c5:a8:c4:07:58:17:1d:a8:
                    64:2b:bb:f0:f9:01:6f:f0:44:49:6e:0d:46:f6:45:
                    ef:68:67:a4:5f:2a:a2:f2:73:02:74:75:a5:ef:3f:
                    62:26:11:09:48:44:97:cd:bd:dd:74:a8:39:52:f6:
                    32:ca:fc:b5:96:f3:4e:15:6f:a4:4e:62:e1:01:51:
                    e1:a8:32:93:63:29:5f:d0:53:b7:c7:b2:f9:89:f1:
                    8d:77:28:fe:78:bc:c4:54:61:06:54:ff:6d:4b:6f:
                    a1:5b:0b:5f:a0:41:2a:52:dc:4e:85:f8:35:dd:60:
                    71:51:dd:d3:45:8d:85:bf:32:fa:53:d3:96:ac:7e:
                    38:a5:38:28:92:2b:36:8e:a2:0c:78:c1:53:4f:ca:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1E:78:19:3F:EF:6B:EF:EA:E2:5F:D3:6C:AA:52:A9:E8:50:93:A2
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:29:24:99:df:ed:1a:6b:1d:b2:38:65:a1:95:bb:75:7f:d6:
         af:d6:12:2e:2d:c1:b4:89:3e:97:5b:02:1c:55:c6:a4:e2:e0:
         24:82:59:45:91:f1:0f:50:ed:6c:33:af:d6:a0:17:ee:06:79:
         2d:3c:4c:77:8c:83:a3:29:ad:3a:e2:52:61:da:5d:67:8e:ef:
         2b:9e:ec:15:84:43:f3:5a:c8:66:67:10:3c:a6:4e:5f:44:54:
         13:33:5b:6a:af:49:3c:5f:44:f2:dc:14:04:2c:61:e1:e2:ed:
         54:85:7b:f6:fa:fd:a2:eb:30:27:b1:ba:92:24:e1:2b:b1:f7:
         01:b6:cc:89:b4:f9:ce:ec:ad:6d:dd:a9:66:8b:81:67:e7:dc:
         83:e2:ab:b8:96:6f:15:6c:84:60:5e:87:bc:ae:3b:2b:e4:63:
         ff:36:5b:8d:62:cf:14:f3:27:fd:52:34:80:83:97:6b:73:8a:
         01:93:69:ed:11:2c:75:5e:d3:72:fc:ac:8a:57:b1:81:98:e7:
         31:92:fe:40:e9:a1:d5:f1:c2:c4:5c:0e:70:97:ce:ba:42:9e:
         20:25:9a:87:ca:df:2f:3e:22:af:f4:c5:1b:97:31:92:b7:d0:
         9e:35:fc:83:db:12:87:16:e9:26:48:bf:59:f5:60:4f:8a:ea:
         be:e4:7e:c9
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUHD2w5BxFPRbKuXP1KWcoVA1uajEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjNaFw0yNDA0MDYwOTIyMjNaMDMxMTAvBgNV
BAMTKDYwMUU3ODE5M0ZFRjZCRUZFQUUyNUZEMzZDQUE1MkE5RTg1MDkzQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQHU0VaS9k9boShcHXh0jF+bM
5ubzfyrS87EN8b9QttJ4eH45Dt/t36N4lPqqENHHXU5z2jrNWXGAESerW03s0uRp
iwYYwPX4kPPuBCOvf3HSpMOcP/PoHV3qk9eQalb3qxYGFnNgkIsGEIARX1vFqMQH
WBcdqGQru/D5AW/wREluDUb2Re9oZ6RfKqLycwJ0daXvP2ImEQlIRJfNvd10qDlS
9jLK/LWW804Vb6ROYuEBUeGoMpNjKV/QU7fHsvmJ8Y13KP54vMRUYQZU/21Lb6Fb
C1+gQSpS3E6F+DXdYHFR3dNFjYW/MvpT05asfjilOCiSKzaOogx4wVNPyvnXAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUYB54GT/va+/q4l/TbKpSqehQk6IwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HgbAwDQYJKoZIhvcNAQEL
BQADggEBAAspJJnf7RprHbI4ZaGVu3V/1q/WEi4twbSJPpdbAhxVxqTi4CSCWUWR
8Q9Q7Wwzr9agF+4GeS08THeMg6MprTriUmHaXWeO7yue7BWEQ/NayGZnEDymTl9E
VBMzW2qvSTxfRPLcFAQsYeHi7VSFe/b6/aLrMCexupIk4Sux9wG2zIm0+c7srW3d
qWaLgWfn3IPiq7iWbxVshGBeh7yuOyvkY/82W41izxTzJ/1SNICDl2tzigGTae0R
LHVe03L8rIpXsYGY5zGS/kDpodXxwsRcDnCXzrpCniAlmofK3y8+Iq/0xRuXMZK3
0J41/IPbEocW6SZIv1n1YE+K6r7kfsk=
-----END CERTIFICATE-----