Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS204676.roa
File:                     AS204676.roa (raw, json)
Hash identifier:          Nard+MMrzVMMSRKaKGwFpOoFxzb3o04v3x/2yowxxmc=
Subject key identifier:   55:77:B2:6E:F1:41:7D:AA:7E:45:7E:DE:3A:B6:3E:DE:D3:63:D7:E1
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       20F6E4611EB9422163DF555BE0AB23B418973326
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS204676.roa
Signing time:             Sat 08 Apr 2023 09:22:29 +0000
ROA not before:           Sat 08 Apr 2023 09:17:29 +0000
ROA not after:            Sat 06 Apr 2024 09:22:29 +0000
asID:                     204676
IP address blocks:        2a12:dd46:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f6:e4:61:1e:b9:42:21:63:df:55:5b:e0:ab:23:b4:18:97:33:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:29 2023 GMT
            Not After : Apr  6 09:22:29 2024 GMT
        Subject: CN=5577B26EF1417DAA7E457EDE3AB63EDED363D7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:86:ac:6f:1d:dc:a1:81:e6:49:55:e4:de:
                    2d:94:25:dc:25:67:84:1a:0f:39:d0:25:55:6f:62:
                    bf:32:19:df:5d:d8:28:2d:22:99:ef:9e:c0:1a:65:
                    59:ea:05:5e:98:10:ef:09:d0:55:cc:c0:b1:37:9d:
                    f9:12:cf:1c:46:c5:ce:0c:47:d7:4f:b4:72:e8:9b:
                    ad:af:57:70:cf:fe:6e:14:00:d3:6c:70:83:ea:b3:
                    a2:80:46:14:f3:d2:5d:f7:dc:9b:d3:e7:fe:e7:f8:
                    34:ef:52:b3:56:f3:46:c8:df:40:f0:1d:7e:bc:7b:
                    68:08:51:bd:d4:8e:d5:06:af:75:67:16:20:cf:39:
                    ad:5c:39:e2:73:57:ba:82:c0:7e:d6:58:86:dc:82:
                    93:5e:85:18:d6:0b:61:c5:40:88:4a:c5:0f:d5:84:
                    81:d5:fe:96:30:47:3f:fd:69:b3:7d:76:59:bb:61:
                    0d:49:40:0a:6b:b2:2e:14:00:7f:d3:7e:ed:87:27:
                    59:62:d2:1e:62:43:40:f9:23:f1:45:95:18:e4:72:
                    cf:9d:c2:21:70:28:e2:0b:ca:58:8b:d4:9e:1b:b4:
                    0c:c6:49:52:b6:bd:98:b4:d8:2b:c2:28:b5:74:8a:
                    fa:93:cd:47:7b:da:d6:33:8e:7f:7b:b3:1b:8a:26:
                    c6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:77:B2:6E:F1:41:7D:AA:7E:45:7E:DE:3A:B6:3E:DE:D3:63:D7:E1
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS204676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:26:da:36:fa:82:85:69:10:f3:e6:6b:74:81:ed:a4:87:bf:
         d6:4b:00:da:58:2b:5f:db:cf:a4:7d:2c:6e:f2:e4:31:83:78:
         0f:4b:62:8f:20:d1:8d:74:cb:9d:f7:e9:4c:c7:83:76:67:35:
         6c:11:08:14:6d:35:36:60:2d:57:45:50:0e:96:a3:66:d5:ef:
         58:77:a7:f1:7a:10:4e:7c:86:4c:1b:ec:38:04:eb:94:63:57:
         64:0b:a9:09:e9:1f:be:ea:6b:ed:59:6b:f3:8d:49:b4:56:f5:
         cc:60:f0:14:42:97:b7:3f:81:f7:5a:63:5f:e0:df:a4:97:12:
         0e:71:6d:17:7c:02:eb:35:97:3d:54:6d:3c:8f:c4:a0:69:3a:
         37:d3:84:84:c2:8f:34:00:51:87:ac:2b:c7:e9:37:2b:f2:e2:
         21:65:bb:e1:b9:a6:74:4f:e7:1b:04:9d:ac:9a:57:00:0a:d2:
         f9:f3:35:a6:c0:6a:45:29:2e:89:0f:67:ea:b9:ff:63:30:87:
         15:97:53:91:0e:6b:b2:b6:36:24:e2:23:d1:1c:72:59:92:61:
         e9:52:23:42:70:9e:73:e9:8b:ff:be:34:81:77:48:56:88:4d:
         7f:91:0b:8b:48:f9:99:e7:ba:c4:9e:c7:ba:78:ec:7c:ab:cf:
         6d:a0:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----