Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS204466.roa
File:                     AS204466.roa (raw, json)
Hash identifier:          0qdWGhBTIikI/Xp/I1dmQsb4g9ru6xJYlP8fAd3tmaA=
Subject key identifier:   6C:3A:4C:B9:24:8C:83:A7:48:FC:C2:48:06:BA:14:B8:D8:3D:05:B5
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       41837B24F3B5D83030C94337AC24A1FFADE8F671
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS204466.roa
Signing time:             Sat 08 Apr 2023 09:22:19 +0000
ROA not before:           Sat 08 Apr 2023 09:17:19 +0000
ROA not after:            Sat 06 Apr 2024 09:22:19 +0000
asID:                     204466
IP address blocks:        2a12:dd47:8040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:83:7b:24:f3:b5:d8:30:30:c9:43:37:ac:24:a1:ff:ad:e8:f6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:19 2023 GMT
            Not After : Apr  6 09:22:19 2024 GMT
        Subject: CN=6C3A4CB9248C83A748FCC24806BA14B8D83D05B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:98:4f:d9:cb:cf:3b:33:f7:8a:7d:e8:a3:
                    a1:9a:74:d2:c6:78:0f:3e:f7:8b:a0:03:3d:b6:5a:
                    1c:61:c8:2f:da:39:38:78:ed:71:c5:99:e2:9a:b1:
                    d0:0c:5c:12:ce:11:a6:db:87:e5:17:cc:a2:92:9e:
                    66:ae:6e:2b:cf:c0:d2:09:3c:0a:8e:b0:7f:2c:09:
                    1c:af:aa:5d:57:42:4f:16:92:54:02:71:37:b7:7c:
                    1a:21:b0:ec:f9:a4:5f:09:45:00:ec:19:92:28:28:
                    b9:95:63:a7:e2:0b:bb:d0:ad:88:18:00:11:d7:60:
                    36:cf:8f:0c:53:8b:23:a3:9f:db:68:21:d7:57:2d:
                    ce:42:8b:7f:ba:86:14:32:48:da:0b:a3:e9:f8:03:
                    3f:d0:25:a5:d4:4f:d3:c9:37:47:22:aa:af:12:ff:
                    56:1e:d1:94:da:c6:f4:0b:f3:40:bd:71:e1:cc:a3:
                    80:58:2a:6b:87:c5:6d:4c:09:80:ee:3f:f2:9a:26:
                    7c:c8:53:f2:65:f4:e7:32:5a:27:d6:aa:8a:17:6f:
                    74:5f:de:52:77:bc:6e:0e:ca:07:65:6a:76:9d:7b:
                    a1:a6:79:09:b5:2c:b6:2b:ed:bb:79:bf:78:e6:45:
                    03:81:6c:94:0c:6e:e5:3b:54:0a:1f:2a:c5:35:04:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3A:4C:B9:24:8C:83:A7:48:FC:C2:48:06:BA:14:B8:D8:3D:05:B5
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS204466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:5a:3c:25:3a:87:74:e4:01:26:0b:59:93:48:82:96:05:20:
         5c:eb:33:83:eb:8e:25:09:0b:4a:0c:57:b6:ef:84:d2:18:12:
         3c:01:72:56:e2:e7:e5:d0:2d:eb:07:40:f8:6b:f6:b4:01:1d:
         ff:f3:da:98:8a:c2:f2:5c:57:b6:f9:80:b3:68:cc:12:39:84:
         e8:6c:44:b6:4b:e2:3e:c8:50:60:7e:88:cb:07:a4:e4:c3:29:
         60:ad:47:60:33:4c:de:af:7a:c8:97:0e:9f:d7:b1:81:58:28:
         6b:1b:e3:48:84:4e:a2:93:01:f9:12:f1:5f:f4:84:be:cf:e0:
         b4:70:d5:a2:d8:66:8c:a3:31:ac:34:4d:b4:f5:c2:21:cc:1b:
         2e:e2:cd:e7:d4:37:25:6b:dd:f5:c4:d6:0f:bf:23:a1:01:9e:
         b3:21:c7:6f:9d:e1:08:98:eb:3e:51:4d:4b:13:e2:53:c5:b7:
         05:1c:ab:22:17:b5:05:82:58:08:86:d3:57:46:c5:5b:36:45:
         de:a3:89:cf:79:16:24:9c:f1:23:82:21:46:8f:e3:e8:65:f9:
         e5:10:ba:08:31:83:dd:60:ff:76:c0:e3:9d:5d:da:cc:0f:97:
         49:41:e6:9d:e2:f6:c9:a7:dc:42:3b:63:e6:d8:6c:b2:42:b8:
         b5:20:1f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----