Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS204005.roa
File:                     AS204005.roa (raw, json)
Hash identifier:          sLhlrtwGqZElIo5NWwViKerYb3xv+7evYhvNNywpDeU=
Subject key identifier:   32:17:72:C3:32:79:4F:E1:D8:CA:A6:8C:E1:DD:31:3B:ED:64:8F:98
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       7BDECEC35730557A6A3084587E19F75B9B038704
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS204005.roa
Signing time:             Sat 08 Apr 2023 09:22:12 +0000
ROA not before:           Sat 08 Apr 2023 09:17:12 +0000
ROA not after:            Sat 06 Apr 2024 09:22:12 +0000
asID:                     204005
IP address blocks:        2a12:dd47:8130::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:de:ce:c3:57:30:55:7a:6a:30:84:58:7e:19:f7:5b:9b:03:87:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:12 2023 GMT
            Not After : Apr  6 09:22:12 2024 GMT
        Subject: CN=321772C332794FE1D8CAA68CE1DD313BED648F98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:43:38:af:15:41:f7:d3:08:97:76:a5:c1:
                    7a:5a:6e:75:b7:e7:49:9c:49:c3:60:96:f3:af:b8:
                    b7:08:ea:66:ed:29:4e:61:12:56:fc:cb:df:29:38:
                    e4:ea:23:44:da:2a:4e:57:ed:64:90:2c:33:17:cf:
                    b0:e2:70:29:dd:0a:ab:fa:df:d7:16:e7:47:b5:d0:
                    68:0b:9b:51:55:9a:fc:22:1f:a0:33:a2:6b:09:d4:
                    ae:ef:0a:fc:8d:78:77:42:f5:96:56:18:c2:27:d1:
                    f9:87:b9:51:5a:b6:c5:93:04:40:17:1e:37:fb:78:
                    38:e4:2d:6a:c7:65:8d:59:71:a3:10:9b:39:e6:e1:
                    c7:06:a2:e8:9c:81:42:5d:cd:45:54:e1:ef:40:eb:
                    8d:f0:6a:00:54:dd:24:a7:1e:ec:92:40:02:bc:1b:
                    e1:f4:9a:d0:d7:ce:a8:8c:6c:51:06:cf:4a:18:22:
                    ff:db:53:76:4b:88:f9:65:16:c7:9d:4b:bf:ea:18:
                    29:a0:7a:ca:ee:b0:06:69:2d:5f:be:de:0d:a7:98:
                    f6:e4:4a:25:26:ec:bd:e1:3e:00:84:f4:af:f1:ba:
                    1d:3a:be:d4:e3:c6:35:9d:a9:70:05:1d:75:66:8f:
                    28:ae:7c:27:9f:9f:dc:96:a6:80:d6:5f:59:81:26:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:17:72:C3:32:79:4F:E1:D8:CA:A6:8C:E1:DD:31:3B:ED:64:8F:98
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS204005.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8130::/44

    Signature Algorithm: sha256WithRSAEncryption
         c2:e7:c3:64:16:56:17:75:05:c5:c1:88:75:7e:cb:78:33:5a:
         a8:31:77:d6:37:01:59:3b:be:78:8a:51:ad:54:62:35:24:5d:
         96:ea:e2:e0:2f:18:b5:59:94:d3:dd:8c:f4:d1:00:ea:c2:14:
         cb:c8:49:4a:c4:6b:10:43:4e:23:45:67:ee:d1:b7:19:37:ca:
         68:7c:67:7d:78:17:dd:b4:3c:15:db:71:51:89:a4:d2:0a:11:
         f8:0c:88:ed:51:26:5c:3d:65:f6:7b:47:80:2a:2b:e4:ba:96:
         be:60:d5:f5:06:ec:b3:50:14:b6:f3:af:ba:43:5f:8e:74:ae:
         49:cc:91:23:e1:fe:63:28:4c:f5:68:4b:cf:5d:6f:89:66:82:
         8f:8e:f0:aa:fe:ab:49:ca:18:45:c1:3b:ed:be:37:5d:bb:87:
         e9:ce:ad:44:17:fb:ca:e6:3d:10:44:68:e1:d0:b4:38:9f:64:
         6d:3e:2d:e7:5a:e4:c4:18:b4:43:a6:4c:08:f0:16:45:35:1f:
         49:89:7b:fe:f2:f2:60:9d:bf:9c:c5:5e:f3:e2:20:3c:79:de:
         7c:78:c9:38:c0:2f:30:48:66:52:d0:7e:61:fd:60:f9:ef:10:
         41:3f:da:fa:a1:2e:94:a3:60:e1:88:06:1d:fa:8f:da:07:d7:
         61:95:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----