Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203913.roa
File:                     AS203913.roa (raw, json)
Hash identifier:          rmnWRaOuL5rnq7yHBeHAbX03/BfTRxK/ghpVt7oAgRo=
Subject key identifier:   78:7F:98:D2:4C:EA:13:BC:62:63:E0:5F:B4:58:B5:2C:BE:1E:A0:A0
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       379C2FCDA5A1B7AF72ADBEFC3E074FA73D2DFFD8
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203913.roa
Signing time:             Sat 08 Apr 2023 09:22:25 +0000
ROA not before:           Sat 08 Apr 2023 09:17:25 +0000
ROA not after:            Sat 06 Apr 2024 09:22:25 +0000
asID:                     203913
IP address blocks:        2a12:dd47:8045::/48 maxlen: 48
                          2a12:dd47:8800::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9c:2f:cd:a5:a1:b7:af:72:ad:be:fc:3e:07:4f:a7:3d:2d:ff:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:25 2023 GMT
            Not After : Apr  6 09:22:25 2024 GMT
        Subject: CN=787F98D24CEA13BC6263E05FB458B52CBE1EA0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:8b:44:cb:f5:c4:03:39:8e:38:c7:76:fd:
                    b2:c8:69:0d:7e:be:71:f7:47:65:78:35:00:d6:f8:
                    ca:08:2e:56:01:ed:08:2c:44:e2:ca:17:13:35:e0:
                    bc:7e:e3:44:81:42:94:70:38:38:7d:5e:74:de:b9:
                    6b:c3:fc:c1:55:32:f7:66:b0:66:5a:3f:ab:bf:64:
                    da:a8:8e:33:ca:fc:26:35:28:c6:f5:06:28:f7:8a:
                    d7:95:78:5d:4a:7f:d5:8c:ef:e0:00:75:73:8a:44:
                    92:b4:77:9a:d8:21:e4:42:61:0b:cb:2c:67:3c:71:
                    63:67:03:80:75:56:f9:79:3d:0b:23:18:7b:7a:7b:
                    e7:e3:04:b6:88:05:b7:ae:fd:29:75:4d:2d:48:44:
                    23:21:72:8b:24:91:49:3d:d5:c9:11:17:e1:04:41:
                    bd:46:bd:ec:68:bd:91:c4:5d:f3:d0:b2:3e:e9:5e:
                    58:31:c2:43:41:5d:1d:6b:e2:c0:d2:7e:62:84:17:
                    b5:b8:d4:65:5e:32:ff:85:da:e5:3b:ad:57:54:75:
                    04:76:70:6d:de:f4:da:ca:61:28:01:38:48:b1:aa:
                    76:6b:78:49:c0:b0:e5:d4:10:b8:ee:ed:ae:af:2b:
                    fa:28:3a:c9:35:a8:f5:e4:b0:a4:fe:51:d6:4b:73:
                    c9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7F:98:D2:4C:EA:13:BC:62:63:E0:5F:B4:58:B5:2C:BE:1E:A0:A0
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8045::/48
                  2a12:dd47:8800::/39

    Signature Algorithm: sha256WithRSAEncryption
         63:cc:8d:3a:fa:d7:92:ed:33:43:d3:8c:10:38:63:68:29:9b:
         20:7c:c5:80:2d:6b:b0:16:a9:17:ce:44:8d:94:58:8d:df:78:
         26:6d:90:67:0e:ad:13:5c:14:e8:aa:2c:e2:59:3f:32:3b:7f:
         43:60:e3:00:4c:38:4e:81:38:b8:5a:34:c5:63:a7:11:a4:8b:
         30:46:08:a5:6a:d3:2d:be:00:37:8b:5c:b1:de:6f:fb:a4:b6:
         28:25:01:ad:18:6b:7a:25:b2:7c:65:c5:52:6f:04:08:9e:1a:
         60:39:a3:0c:17:d6:4b:f0:ee:a2:7a:a7:ab:5b:0c:8f:79:93:
         a3:35:9c:e8:00:ba:c2:ee:d3:1b:0d:9c:b3:07:bb:ab:ae:58:
         9c:ce:08:ac:9d:64:be:78:72:66:a3:62:78:ca:18:81:3c:76:
         60:73:5c:01:d1:ed:30:2c:4f:a0:f8:44:01:41:c8:06:16:ef:
         20:4b:ce:ce:0a:43:14:fc:4d:85:c0:01:4b:19:64:58:3d:ee:
         8b:b1:ea:00:fe:da:c5:ca:fb:9c:b1:4c:f6:d6:94:b0:8d:58:
         30:a9:92:b6:d1:a8:53:8d:7d:70:c1:da:0f:42:99:aa:e5:09:
         6e:d9:4c:15:ee:d9:d2:4f:bb:7a:6f:a9:f6:d6:0e:e6:d8:26:
         d6:cb:86:79
-----BEGIN CERTIFICATE-----
MIIEmzCCA4OgAwIBAgIUN5wvzaWht69yrb78PgdPpz0t/9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjVaFw0yNDA0MDYwOTIyMjVaMDMxMTAvBgNV
BAMTKDc4N0Y5OEQyNENFQTEzQkM2MjYzRTA1RkI0NThCNTJDQkUxRUEwQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNotEy/XEAzmOOMd2/bLIaQ1+
vnH3R2V4NQDW+MoILlYB7QgsROLKFxM14Lx+40SBQpRwODh9XnTeuWvD/MFVMvdm
sGZaP6u/ZNqojjPK/CY1KMb1Bij3iteVeF1Kf9WM7+AAdXOKRJK0d5rYIeRCYQvL
LGc8cWNnA4B1Vvl5PQsjGHt6e+fjBLaIBbeu/Sl1TS1IRCMhcoskkUk91ckRF+EE
Qb1GvexovZHEXfPQsj7pXlgxwkNBXR1r4sDSfmKEF7W41GVeMv+F2uU7rVdUdQR2
cG3e9NrKYSgBOEixqnZreEnAsOXUELju7a6vK/ooOsk1qPXksKT+UdZLc8mJAgMB
AAGjggGlMIIBoTAdBgNVHQ4EFgQUeH+Y0kzqE7xiY+BftFi1LL4eoKAwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDM5MTMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
KgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBwAqEt1HgEUDBgEqEt1HiDANBgkq
hkiG9w0BAQsFAAOCAQEAY8yNOvrXku0zQ9OMEDhjaCmbIHzFgC1rsBapF85EjZRY
jd94Jm2QZw6tE1wU6Kos4lk/Mjt/Q2DjAEw4ToE4uFo0xWOnEaSLMEYIpWrTLb4A
N4tcsd5v+6S2KCUBrRhreiWyfGXFUm8ECJ4aYDmjDBfWS/Duonqnq1sMj3mTozWc
6AC6wu7TGw2cswe7q65YnM4IrJ1kvnhyZqNieMoYgTx2YHNcAdHtMCxPoPhEAUHI
BhbvIEvOzgpDFPxNhcABSxlkWD3ui7HqAP7axcr7nLFM9taUsI1YMKmSttGoU419
cMHaD0KZquUJbtlMFe7Z0k+7em+p9tYO5tgm1suGeQ==
-----END CERTIFICATE-----