Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS204769.roa
File:                     AS204769.roa (raw, json)
Hash identifier:          YYeutF9jbo7EjqMGuZMhTvb2lHeMlIMBLHX9sm1bg9A=
Subject key identifier:   64:AE:52:EC:D9:9F:6D:C2:AE:04:06:84:3A:F4:11:7B:55:EC:BE:80
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6C8C390AF45A5115281D214C57B3215C5FC37802
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS204769.roa
Signing time:             Sat 08 Apr 2023 09:22:24 +0000
ROA not before:           Sat 08 Apr 2023 09:17:24 +0000
ROA not after:            Sat 06 Apr 2024 09:22:24 +0000
asID:                     204769
IP address blocks:        2a12:dd47:82a0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8c:39:0a:f4:5a:51:15:28:1d:21:4c:57:b3:21:5c:5f:c3:78:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:24 2023 GMT
            Not After : Apr  6 09:22:24 2024 GMT
        Subject: CN=64AE52ECD99F6DC2AE0406843AF4117B55ECBE80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:52:1d:ff:bd:8c:04:f2:f0:20:58:3c:08:
                    77:e6:d1:6e:2a:14:35:27:28:fb:b8:15:81:8b:6b:
                    3b:7e:67:57:40:e5:2a:71:96:a4:12:7b:bd:a6:9b:
                    5d:eb:1c:b4:53:7d:1f:bd:49:02:88:d0:de:6b:3a:
                    9c:a7:f7:57:04:b2:27:85:3c:60:43:f8:3d:6a:35:
                    19:40:f8:80:b2:ad:85:ed:f6:da:a1:9f:b2:82:7b:
                    84:99:26:b5:d1:e6:bd:b7:0c:62:b2:92:db:23:f5:
                    05:cf:27:ef:27:a6:7b:e7:31:cf:9f:e1:1e:5c:d4:
                    b8:a5:bb:50:4d:3e:84:92:a2:8e:74:03:b1:c1:59:
                    10:62:a1:80:13:05:9a:da:2b:d3:ca:2b:99:09:1f:
                    49:5b:1f:44:d3:8b:6f:a6:de:8d:09:5d:c3:cc:c0:
                    55:61:a2:05:33:9e:f8:61:92:65:fe:b4:95:e6:98:
                    54:9c:ec:ad:a5:45:37:36:3b:bc:3a:90:95:30:64:
                    cb:ed:2b:34:50:95:b5:38:02:87:85:d5:16:9e:58:
                    77:e7:b8:32:16:34:f9:bf:c5:5a:32:95:4f:96:7b:
                    eb:8b:3a:93:66:d4:5f:13:b0:49:a3:22:2f:6a:4a:
                    f9:b4:73:5b:9c:a3:3c:24:c0:c8:80:af:a6:03:f6:
                    4f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AE:52:EC:D9:9F:6D:C2:AE:04:06:84:3A:F4:11:7B:55:EC:BE:80
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS204769.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b6:6b:ed:c3:df:0c:7d:24:26:00:4f:c8:2e:e9:88:ec:06:c9:
         39:5b:be:f7:3f:a0:43:af:73:ca:57:82:59:eb:30:67:b3:a7:
         4d:35:3c:9a:c3:27:8a:ec:6c:9b:5c:8f:8d:dc:53:4e:9c:2c:
         7e:11:f6:a0:b2:4a:c6:96:fc:dc:57:b4:f4:dd:5b:fc:f0:3b:
         01:cd:82:84:34:46:aa:a8:ab:78:b6:20:1d:73:c9:25:3d:2a:
         08:74:d5:be:a0:b7:f0:cf:4c:94:11:bf:6e:58:bf:9d:41:bb:
         89:2f:e0:25:df:9a:fd:66:8f:40:b7:46:c8:fc:a8:73:f1:3f:
         f7:a1:1b:44:f1:28:61:f2:15:8d:5e:07:93:84:b2:b5:9a:77:
         31:6a:82:fb:2c:9c:43:15:2b:a6:bd:11:97:02:ff:6c:6d:c9:
         49:36:59:77:b7:5e:d6:2d:e9:70:96:93:8c:d1:c5:08:9c:e5:
         5c:7a:6b:1e:de:66:9e:2f:e7:88:98:e8:21:40:35:75:29:ef:
         c0:06:82:15:40:af:e2:ed:9a:39:6a:f9:32:02:01:19:a4:37:
         8c:d3:27:88:6c:07:b7:2c:ad:6b:de:c6:54:45:bd:03:e7:38:
         13:c8:84:ea:b5:5e:e8:4c:0f:61:9b:17:bd:95:ec:22:e6:69:
         94:1c:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----