Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS204375.roa
File:                     AS204375.roa (raw, json)
Hash identifier:          gh3Lz6NEf0q/sPSAX7TXI2MCBbPZGZgHbxGKhpbr6cY=
Subject key identifier:   7F:28:8D:B1:11:32:BF:FE:AB:F9:29:54:9E:8E:A6:46:A9:A4:C4:F2
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       38B90203AD0F4A50EFA918075C78AD2BB704568C
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS204375.roa
Signing time:             Sat 08 Apr 2023 09:22:20 +0000
ROA not before:           Sat 08 Apr 2023 09:17:20 +0000
ROA not after:            Sat 06 Apr 2024 09:22:20 +0000
asID:                     204375
IP address blocks:        2a12:dd47:8043::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b9:02:03:ad:0f:4a:50:ef:a9:18:07:5c:78:ad:2b:b7:04:56:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:20 2023 GMT
            Not After : Apr  6 09:22:20 2024 GMT
        Subject: CN=7F288DB11132BFFEABF929549E8EA646A9A4C4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:b3:55:7e:04:17:f9:9b:1a:db:d5:1a:21:
                    a8:15:2a:51:5c:88:92:30:fc:2b:c9:93:c7:b1:3c:
                    f8:49:c5:33:b9:23:c0:74:e6:84:ee:21:e6:1b:a5:
                    8c:d6:44:c1:04:8a:d1:3a:89:68:75:83:7a:24:f1:
                    a9:40:34:10:96:39:e2:d0:51:21:d7:65:53:79:40:
                    f6:5f:a1:c5:80:12:f9:63:c0:72:7e:ae:86:0f:80:
                    63:c6:4b:f6:dc:1f:d0:86:d9:27:2d:b0:b0:59:d9:
                    9b:cd:eb:26:3e:eb:0d:99:f1:dd:68:9b:ef:f3:10:
                    3c:ab:b4:e0:5a:fe:2d:c4:99:66:5d:3a:5b:eb:22:
                    72:1d:bd:d4:c8:a0:49:bb:0a:f4:fe:04:6e:32:82:
                    ae:e0:6b:b8:d5:10:7e:cc:22:62:cc:0b:d1:da:8c:
                    17:79:a5:a4:65:eb:09:6d:96:00:49:79:7f:b5:d9:
                    32:a1:8c:22:93:f6:30:4f:7c:9e:bc:cb:6a:74:a5:
                    3b:01:c8:70:7c:b0:a6:a3:9c:1a:b7:cf:8d:4f:2b:
                    7b:a2:1d:e4:8a:66:24:0f:b1:ed:bc:03:1e:dd:b1:
                    46:4e:ed:b3:a4:d5:e7:94:6d:fc:af:2d:e4:dd:dd:
                    5d:62:bf:34:55:44:f4:35:f3:9f:30:b1:a1:36:b2:
                    23:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:28:8D:B1:11:32:BF:FE:AB:F9:29:54:9E:8E:A6:46:A9:A4:C4:F2
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS204375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8043::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:15:a1:19:22:c3:cb:2b:16:81:fa:ad:ed:53:15:c6:25:
         84:3b:0d:dc:b6:fc:04:e8:8e:dc:1d:49:5a:8e:79:7a:80:d3:
         86:6e:63:d7:05:31:74:e2:39:dd:e3:1b:83:90:d7:9f:2c:6a:
         e7:70:b3:db:8a:14:64:6f:86:ba:90:e4:a6:7d:c9:44:01:7a:
         9f:0d:e8:58:2f:38:d2:72:e7:29:93:ff:10:0f:76:12:5b:b8:
         0c:3d:d0:a4:26:ee:a4:a5:26:84:c4:e1:8c:de:68:4d:19:d0:
         9f:e6:d1:5b:e8:8f:9e:63:3e:26:76:0d:2c:76:e6:a6:62:dc:
         6d:e9:2b:f1:b5:57:b7:c9:34:f6:0c:db:75:6d:fd:d1:9a:f7:
         a8:60:af:58:cd:d4:78:98:cd:7c:0f:f0:c7:9a:c7:e6:cb:f7:
         19:f2:36:72:4e:b9:67:59:b7:2d:06:b0:22:e9:8f:a3:fc:0a:
         64:86:0a:d2:86:15:60:d6:88:5b:35:4b:b5:27:16:33:f3:6e:
         e4:1b:e6:52:f3:ab:16:ff:d7:a2:8f:7d:da:8c:3c:26:2e:ae:
         d8:bc:d8:e2:cc:42:5b:78:11:c5:db:f9:c8:cb:60:c2:97:6b:
         8b:ac:ee:c2:8c:5f:a5:a3:17:54:94:09:ac:ae:56:26:fc:0f:
         55:78:ed:9f
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUOLkCA60PSlDvqRgHXHitK7cEVowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjBaFw0yNDA0MDYwOTIyMjBaMDMxMTAvBgNV
BAMTKDdGMjg4REIxMTEzMkJGRkVBQkY5Mjk1NDlFOEVBNjQ2QTlBNEM0RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyrNVfgQX+Zsa29UaIagVKlFc
iJIw/CvJk8exPPhJxTO5I8B05oTuIeYbpYzWRMEEitE6iWh1g3ok8alANBCWOeLQ
USHXZVN5QPZfocWAEvljwHJ+roYPgGPGS/bcH9CG2SctsLBZ2ZvN6yY+6w2Z8d1o
m+/zEDyrtOBa/i3EmWZdOlvrInIdvdTIoEm7CvT+BG4ygq7ga7jVEH7MImLMC9Ha
jBd5paRl6wltlgBJeX+12TKhjCKT9jBPfJ68y2p0pTsByHB8sKajnBq3z41PK3ui
HeSKZiQPse28Ax7dsUZO7bOk1eeUbfyvLeTd3V1ivzRVRPQ1858wsaE2siMnAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUfyiNsREyv/6r+SlUno6mRqmkxPIwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDQzNzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgEMwDQYJKoZIhvcNAQEL
BQADggEBADBqFaEZIsPLKxaB+q3tUxXGJYQ7Ddy2/ATojtwdSVqOeXqA04ZuY9cF
MXTiOd3jG4OQ158saudws9uKFGRvhrqQ5KZ9yUQBep8N6FgvONJy5ymT/xAPdhJb
uAw90KQm7qSlJoTE4YzeaE0Z0J/m0Vvoj55jPiZ2DSx25qZi3G3pK/G1V7fJNPYM
23Vt/dGa96hgr1jN1HiYzXwP8Meax+bL9xnyNnJOuWdZty0GsCLpj6P8CmSGCtKG
FWDWiFs1S7UnFjPzbuQb5lLzqxb/16KPfdqMPCYurti82OLMQlt4EcXb+cjLYMKX
a4us7sKMX6WjF1SUCayuVib8D1V47Z8=
-----END CERTIFICATE-----