Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS204291.roa
File:                     AS204291.roa (raw, json)
Hash identifier:          kfLbxOcNhXAzuDFccMnBNusJFmb5yTkeu+jSla0iDIQ=
Subject key identifier:   29:D8:BA:7B:A9:DE:A4:0C:9F:74:A8:94:87:77:85:FF:9E:9D:AA:DC
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       7E7FF459D61152EF7812BD57BE00DF65CCE26D85
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS204291.roa
Signing time:             Sat 08 Apr 2023 09:22:19 +0000
ROA not before:           Sat 08 Apr 2023 09:17:19 +0000
ROA not after:            Sat 06 Apr 2024 09:22:19 +0000
asID:                     204291
IP address blocks:        2a12:dd47:8002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7f:f4:59:d6:11:52:ef:78:12:bd:57:be:00:df:65:cc:e2:6d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:19 2023 GMT
            Not After : Apr  6 09:22:19 2024 GMT
        Subject: CN=29D8BA7BA9DEA40C9F74A894877785FF9E9DAADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:8e:5d:5d:30:ac:14:6e:60:e5:fb:db:f4:
                    6c:17:d2:77:55:17:a9:8a:ea:e4:16:96:e2:97:3b:
                    3d:86:57:eb:30:fc:20:7a:f8:eb:bc:45:12:b8:51:
                    5a:bf:b0:8f:4f:da:0e:0b:ca:bf:c4:ac:d6:ec:a5:
                    85:d3:6a:ae:be:c2:6a:34:aa:ad:74:d5:59:67:47:
                    a5:e7:d1:59:77:84:d7:40:09:51:a3:ba:34:a2:de:
                    c3:ee:c5:3b:2c:ff:c2:20:cf:c3:e9:5a:97:cc:2f:
                    8c:64:e0:18:22:4c:dc:4f:66:14:ca:53:21:e5:a4:
                    d3:29:1c:2f:09:f6:6e:55:59:0f:54:86:5c:27:07:
                    af:16:e0:9a:71:f8:34:dd:67:96:29:2a:8a:f0:d4:
                    54:c0:fc:28:3a:71:6e:f9:c5:04:76:b5:98:25:60:
                    07:e4:7d:f7:f6:38:e5:16:ec:cb:33:8a:d9:c9:83:
                    9d:1e:6b:e2:ed:e6:1e:63:98:55:f0:9f:26:b5:d7:
                    3b:2c:2d:e4:58:5d:2f:ed:a0:95:21:68:69:dc:87:
                    fb:66:37:bf:97:ce:f1:00:85:bd:ca:05:2d:bd:b9:
                    96:29:5d:90:44:a3:9b:a6:5a:07:d0:cd:ed:33:98:
                    2c:06:6f:34:3a:0f:17:00:5f:46:b8:18:17:e4:1d:
                    ad:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D8:BA:7B:A9:DE:A4:0C:9F:74:A8:94:87:77:85:FF:9E:9D:AA:DC
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS204291.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:f1:ad:08:d8:1a:81:b0:72:a3:1d:8f:7d:36:1a:c1:af:2d:
         1b:be:a4:de:89:89:7d:57:50:ed:6d:63:fa:cf:ed:7e:00:da:
         d8:9e:a5:94:49:2e:34:13:de:e0:f3:8a:e3:ae:7c:66:d9:1d:
         2e:0d:e8:a6:ca:41:0e:b0:84:c1:34:fa:fc:c9:06:10:8f:63:
         a5:16:70:1b:5f:09:e9:f0:b6:b1:4e:8f:7e:d2:f8:f2:5a:fe:
         a8:96:2b:ce:2c:92:e1:77:fe:11:b4:c0:a2:0f:b7:46:7d:2d:
         5d:a5:cb:30:29:6b:e4:bf:00:11:bc:4c:8a:db:3f:34:91:f1:
         74:62:69:37:97:87:1d:02:96:36:9f:e9:56:df:a5:b0:5f:12:
         a3:b2:04:4a:93:94:1e:22:ad:38:0f:b2:46:da:f7:7d:b9:46:
         1f:bb:e6:c1:aa:fc:f8:bf:e9:cc:2a:27:88:0e:a6:88:7c:ae:
         3e:9f:4b:87:73:db:e6:43:76:82:b0:7f:71:9e:f7:6f:9c:ed:
         8e:1e:e2:0c:d6:d8:ab:13:0b:3f:a7:b5:66:78:f0:9c:4d:bd:
         f8:3b:ab:87:ce:07:f2:b8:1c:77:f0:08:b9:b9:2e:e4:cd:0b:
         97:95:a2:42:e6:f4:0e:9f:05:22:62:34:2f:7f:00:0e:f7:66:
         d8:e6:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----