Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS204611.roa
File:                     AS204611.roa (raw, json)
Hash identifier:          0sIIfdSYktSFRDjemwQZLYFivZhdSliaeuWWGv8flaI=
Subject key identifier:   5D:5E:8F:99:E8:02:C2:90:CC:91:A7:D1:B4:91:94:C6:16:D7:66:BA
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       429A0D8940F8D108CFD1812790A5212BEEBB1526
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS204611.roa
Signing time:             Sat 08 Apr 2023 09:22:28 +0000
ROA not before:           Sat 08 Apr 2023 09:17:28 +0000
ROA not after:            Sat 06 Apr 2024 09:22:28 +0000
asID:                     204611
IP address blocks:        2a12:dd47:83f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9a:0d:89:40:f8:d1:08:cf:d1:81:27:90:a5:21:2b:ee:bb:15:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:28 2023 GMT
            Not After : Apr  6 09:22:28 2024 GMT
        Subject: CN=5D5E8F99E802C290CC91A7D1B49194C616D766BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:41:5e:80:34:1c:ca:bd:97:81:5d:f3:06:
                    59:b8:b6:37:f3:89:94:67:b6:34:30:a0:c5:ed:0c:
                    1f:88:33:d0:51:71:e9:b7:4f:76:81:6c:0a:54:bf:
                    b6:c0:8a:35:9f:07:c2:c7:23:61:5b:29:65:9a:ec:
                    cc:24:b2:b1:67:d0:df:74:13:4f:51:ec:a0:13:d4:
                    b6:93:49:24:d8:92:7e:2d:63:59:41:b7:16:3b:a7:
                    6c:9d:58:78:08:73:a5:a3:19:c3:24:c9:b1:fd:04:
                    53:1c:f0:83:fd:ed:20:01:7b:8c:a4:41:78:43:a8:
                    2e:0e:49:41:78:42:60:cd:db:52:dc:cf:6a:25:70:
                    7e:4a:95:b0:c8:78:c0:6b:94:a9:df:ce:f6:d1:d0:
                    ff:3a:da:f3:12:28:52:fd:1d:66:90:0f:f9:e8:51:
                    63:d5:ca:e7:1d:8e:c1:60:7d:fd:2a:63:46:d2:55:
                    03:67:5b:e1:6a:35:22:f1:32:4d:f7:9c:ad:46:22:
                    59:9e:63:08:84:02:b7:75:71:0d:df:aa:94:88:21:
                    bc:1f:3d:c1:95:46:39:75:01:cb:f9:96:09:48:80:
                    d6:8d:19:af:32:8d:65:46:a9:97:f1:02:f3:55:72:
                    d5:14:f3:48:ec:0e:f6:be:d8:c5:93:50:91:70:fb:
                    92:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5E:8F:99:E8:02:C2:90:CC:91:A7:D1:B4:91:94:C6:16:D7:66:BA
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS204611.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:2c:2e:91:29:b3:25:21:8b:8a:c1:da:63:37:0b:89:a1:04:
         64:b1:5b:5f:43:19:d6:4b:16:fc:12:fa:0e:0e:b7:f2:62:8f:
         f4:64:ac:4a:43:80:1a:c6:9b:c2:50:9e:40:ca:9b:30:31:18:
         d9:b4:ab:6c:74:f7:92:64:9c:6f:52:d7:81:ec:3c:44:7e:9f:
         a4:6b:f3:8b:1c:6b:37:5d:9b:0a:95:43:dd:26:02:d2:79:a4:
         3a:e8:8f:3f:29:3e:8d:c1:6e:96:4e:02:ae:bf:c7:58:33:e2:
         0b:1e:29:ee:db:95:44:20:1f:16:10:1e:38:d8:83:a6:d8:f4:
         73:df:4f:2b:5a:d3:8d:c0:19:b4:a3:23:48:59:52:bd:16:66:
         e6:1c:7d:2e:90:17:a6:38:f8:1a:c0:eb:c9:00:a0:c7:67:78:
         48:a4:74:59:48:b4:a2:0e:96:b1:f3:33:d9:26:90:f8:ad:ab:
         50:9f:48:01:cf:69:b4:2d:93:a9:49:39:d0:07:54:11:59:7b:
         a4:1b:87:5b:cb:fb:85:b1:46:e9:10:bb:86:b0:fa:44:1d:2d:
         18:c7:69:0a:80:ee:c1:27:81:43:6c:f4:38:95:36:ef:6e:47:
         3b:68:25:7b:b8:e8:2a:03:7d:f2:13:1e:95:ab:d7:29:4c:f9:
         9a:cb:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----