Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS204518.roa
File:                     AS204518.roa (raw, json)
Hash identifier:          mXgiVzYKiFga0t3i/a5pC6V/asCgUUlpJV14oDuKbV0=
Subject key identifier:   0F:89:4E:C5:61:2A:ED:5D:9A:9B:1E:65:EC:9E:20:65:F4:9A:56:F6
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3CEA27E7F0AE36AA73578DBDE0DECBF2BE2C2BB7
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS204518.roa
Signing time:             Sat 08 Apr 2023 09:22:21 +0000
ROA not before:           Sat 08 Apr 2023 09:17:21 +0000
ROA not after:            Sat 06 Apr 2024 09:22:21 +0000
asID:                     204518
IP address blocks:        2a12:dd47:8080::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ea:27:e7:f0:ae:36:aa:73:57:8d:bd:e0:de:cb:f2:be:2c:2b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:21 2023 GMT
            Not After : Apr  6 09:22:21 2024 GMT
        Subject: CN=0F894EC5612AED5D9A9B1E65EC9E2065F49A56F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:77:d2:b2:cb:7b:ae:ae:29:04:8e:17:09:
                    02:3a:33:2b:35:f3:88:d8:e5:3b:56:0a:59:19:f3:
                    0b:7c:8d:f7:51:a2:4d:c1:bf:48:60:93:6a:a5:1c:
                    b3:c9:90:02:32:f7:b1:4b:f1:1b:b7:4f:c7:12:64:
                    e5:20:4b:d9:74:12:52:ff:5e:3e:34:c0:a3:b5:65:
                    c0:28:34:bc:0b:8b:c9:76:8a:09:4c:d2:78:13:80:
                    e1:ad:4b:29:bb:10:2e:0e:ff:f4:f7:e7:b3:47:d5:
                    85:ae:06:b7:a3:c1:e9:da:20:90:b3:e1:49:d0:aa:
                    a4:1c:3e:f6:19:6c:e0:ec:2b:46:ab:10:fc:6d:0a:
                    9f:56:fb:19:6b:1c:d4:91:64:1c:a4:f0:dc:f1:0a:
                    83:1e:ae:88:2c:91:d9:ac:dd:f6:1a:a6:8b:96:d9:
                    0e:a6:b6:62:b1:7d:88:d0:70:29:b7:46:99:cf:ed:
                    d5:15:bd:56:f3:cf:9f:c8:05:f0:c8:23:74:d3:7e:
                    85:ad:b6:0e:44:a9:2a:15:be:b1:7f:c5:77:d6:62:
                    2a:1a:c3:46:e8:43:25:e1:9b:14:4b:e2:1a:d9:d2:
                    19:75:eb:8b:ab:f0:36:70:77:c3:26:ee:91:25:44:
                    31:71:06:37:be:9f:b8:56:36:f5:fc:a6:e3:19:1a:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:89:4E:C5:61:2A:ED:5D:9A:9B:1E:65:EC:9E:20:65:F4:9A:56:F6
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS204518.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8080::/44

    Signature Algorithm: sha256WithRSAEncryption
         5e:92:aa:c0:98:c2:93:af:b7:66:52:48:50:7d:fa:3d:14:e8:
         06:5e:f0:b4:42:24:c2:a7:24:fd:9e:06:89:7a:be:7b:ca:31:
         c1:04:f7:07:b1:bc:8e:a5:8c:89:e1:04:a8:5a:5b:e0:58:0e:
         ab:cd:d0:f1:81:b3:78:85:a5:77:cf:97:e7:53:72:00:6d:5a:
         53:c3:97:ca:b9:8f:28:f6:e4:42:56:66:57:8e:3d:1e:c6:9f:
         8e:ac:87:2c:f0:30:5a:b7:d5:84:b1:ab:35:7a:0a:f4:e7:64:
         17:31:90:bf:78:49:cb:c3:12:1b:a7:c6:5e:03:66:3c:85:1b:
         5d:71:1b:e2:be:6d:f1:e3:ce:34:25:03:86:42:c6:ae:7e:24:
         34:56:e6:50:90:34:a8:e9:0b:18:81:3d:49:12:be:74:b6:59:
         61:4f:5c:3a:f3:4c:1c:53:37:1e:5c:34:8f:19:f5:74:6c:98:
         1b:d0:cb:ee:92:1a:0a:12:7d:26:35:56:fe:2d:a1:06:ef:26:
         81:46:e3:35:a1:6f:62:b7:a7:27:d1:79:63:09:4a:de:d5:3e:
         c2:c8:5f:d5:2f:c4:5f:3b:c8:dc:32:d1:a2:a1:08:97:54:ea:
         54:b5:80:88:87:d4:5f:5d:b6:60:b6:cd:d1:af:25:33:6a:e4:
         59:d8:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----