Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203867.roa
File:                     AS203867.roa (raw, json)
Hash identifier:          aOtxJuOtxdGan7/XI1RccnoBHwnnRXIjZYFYD7IugD8=
Subject key identifier:   7B:B2:F1:2E:82:BE:98:FB:C5:43:A5:27:B1:47:5E:DF:FD:AE:16:AF
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       56D3A5F5FEE88AF08DB877B1415F5248E3FDA3DD
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203867.roa
Signing time:             Sat 08 Apr 2023 09:22:29 +0000
ROA not before:           Sat 08 Apr 2023 09:17:29 +0000
ROA not after:            Sat 06 Apr 2024 09:22:29 +0000
asID:                     203867
IP address blocks:        2a12:dd47:8170::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d3:a5:f5:fe:e8:8a:f0:8d:b8:77:b1:41:5f:52:48:e3:fd:a3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:29 2023 GMT
            Not After : Apr  6 09:22:29 2024 GMT
        Subject: CN=7BB2F12E82BE98FBC543A527B1475EDFFDAE16AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:57:4b:71:e4:d8:4e:8e:18:e5:ff:72:12:
                    30:c1:f8:91:11:92:4b:03:04:ab:b8:d0:2c:29:da:
                    df:85:fa:7c:f1:44:60:ca:43:d0:74:a8:8c:97:09:
                    24:55:4f:89:58:cb:90:16:ca:6c:b6:79:e2:e8:b1:
                    7b:dd:4f:49:70:54:28:8c:2c:5b:7b:8b:ea:93:42:
                    2f:4f:82:89:1f:f0:fc:b5:39:87:46:c5:e8:a8:43:
                    2f:02:97:25:ab:87:e7:83:a5:8a:e4:23:48:27:21:
                    ae:1a:8e:20:31:af:2e:7a:4e:55:9f:c5:4c:40:22:
                    09:62:6d:01:58:ef:8a:25:ed:60:90:f3:16:c4:76:
                    dc:1a:26:88:03:bc:b5:ef:fd:9d:68:1c:d0:40:9f:
                    4b:e8:18:6a:68:97:af:fd:11:3b:fe:37:16:42:43:
                    59:7b:7b:4d:0a:73:79:29:90:8c:5b:d0:20:9c:f6:
                    4b:03:91:8e:7c:1a:02:a8:77:c7:49:a9:af:d4:d1:
                    63:0e:53:8e:3b:6d:b2:75:31:9e:f8:b3:e3:82:e7:
                    bf:c0:9f:cd:ff:60:91:2c:f6:c9:09:c9:d4:26:da:
                    5f:10:70:3b:95:b3:ae:de:fb:44:5c:5d:89:2f:3d:
                    03:d5:4e:c1:f9:aa:e9:f9:7e:c6:f5:2f:1e:59:a5:
                    4f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B2:F1:2E:82:BE:98:FB:C5:43:A5:27:B1:47:5E:DF:FD:AE:16:AF
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203867.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8170::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:85:42:75:3b:09:26:17:2b:2d:e1:e4:c4:e6:c5:cc:a3:
         9e:58:f5:8f:dd:0f:82:88:fd:60:ea:75:8c:de:57:e5:a3:80:
         1b:a2:10:b7:f4:f5:b6:6e:23:43:89:fb:9a:ac:6c:fa:12:b9:
         fa:65:4b:6a:88:b4:87:c2:86:13:57:fa:ad:e7:8b:38:45:4e:
         8e:52:88:89:94:47:ed:55:f6:a7:bf:35:b1:37:2a:45:dd:2f:
         5d:cd:40:57:8a:fa:91:83:c7:79:98:01:8b:60:fe:a8:22:43:
         da:6b:24:f1:22:50:f3:1c:b3:55:42:8d:79:5b:64:30:ef:96:
         c8:91:aa:1e:11:ec:bf:7c:91:68:e6:72:8b:d1:45:bc:14:21:
         a2:e5:d6:ef:fa:2e:df:01:ae:8d:ae:2c:83:46:76:fd:76:1f:
         bc:8c:9f:8a:70:0e:bb:42:c7:67:d8:42:02:7a:55:02:86:d0:
         0e:e3:e5:d9:5a:a0:e6:9c:63:e9:2a:50:83:5a:f6:4e:ed:77:
         14:9e:cd:6f:2b:27:ab:f2:f5:a6:d2:75:74:c4:4b:a6:ea:3e:
         da:37:d3:2d:17:6a:5d:20:aa:08:c1:d6:45:d7:0b:63:e2:90:
         5f:06:b4:49:80:33:5d:b2:4a:44:10:dd:c7:a7:8d:e9:c1:2a:
         e6:91:b1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----