Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS204829.roa
File:                     AS204829.roa (raw, json)
Hash identifier:          0EWV6yH2CTreD01n8NHi24qpNNrUJ7U8YNVtluJ76Cc=
Subject key identifier:   B0:BC:F9:D1:0A:34:45:1D:43:88:D4:40:75:6A:C5:1F:F1:1B:B5:3C
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       18CF4B1212D82D30DEECA4B2A6499B9165B237D4
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS204829.roa
Signing time:             Sat 08 Apr 2023 09:22:10 +0000
ROA not before:           Sat 08 Apr 2023 09:17:10 +0000
ROA not after:            Sat 06 Apr 2024 09:22:10 +0000
asID:                     204829
IP address blocks:        2a12:dd47:8100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cf:4b:12:12:d8:2d:30:de:ec:a4:b2:a6:49:9b:91:65:b2:37:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:10 2023 GMT
            Not After : Apr  6 09:22:10 2024 GMT
        Subject: CN=B0BCF9D10A34451D4388D440756AC51FF11BB53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:94:64:91:f0:5c:98:1d:0d:5d:32:8a:e8:
                    fe:02:80:8a:c3:5e:d0:28:62:ba:c7:0c:11:25:03:
                    7b:ee:ac:32:14:f4:71:40:74:65:1d:2d:61:a6:45:
                    a9:8a:44:d8:de:2a:30:27:08:a8:29:37:59:4e:c0:
                    26:fe:12:71:8d:22:e6:9c:1b:b8:a8:3b:3b:1a:e2:
                    af:f8:03:33:5b:f5:3c:df:1b:d4:d7:f0:2b:76:a4:
                    7b:7f:34:9d:df:1e:91:18:f7:37:3a:2e:5d:a8:f2:
                    46:4a:b4:86:2c:5e:7f:7d:47:72:84:5c:99:96:88:
                    6d:91:10:11:d8:c6:c0:d4:fe:40:5e:1a:98:fc:6e:
                    6a:06:ee:45:2f:8a:18:0b:40:cc:8d:b3:80:4b:9f:
                    29:2b:13:12:02:34:73:d7:7c:5e:e8:64:e8:67:3e:
                    51:db:bc:02:ee:b8:7f:d7:c9:26:c8:f9:f5:70:7b:
                    2f:9c:df:f8:cb:87:32:14:6f:8b:29:29:a3:4c:74:
                    0a:4f:ee:6d:7d:0c:d3:35:51:ad:f3:45:56:0f:a3:
                    7a:df:48:6e:0a:cd:de:83:a5:65:77:0d:d0:b7:14:
                    7b:f3:9e:f0:05:a1:d0:69:94:f5:9f:6d:e2:8e:cf:
                    d0:8d:c4:b0:68:3d:49:59:59:56:ba:f2:b3:7e:8f:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BC:F9:D1:0A:34:45:1D:43:88:D4:40:75:6A:C5:1F:F1:1B:B5:3C
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS204829.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8100::/44

    Signature Algorithm: sha256WithRSAEncryption
         9a:28:25:e0:12:f0:15:d0:57:9d:92:d8:c9:6b:ab:75:e1:59:
         5d:61:c1:8b:87:ac:65:fa:03:5d:0d:11:c3:98:dc:af:90:ce:
         c5:16:fc:aa:13:b3:62:6e:9d:cc:e3:3f:f0:00:e4:98:82:e3:
         d0:08:e4:9d:43:74:44:08:b0:79:27:8b:98:69:69:de:2e:b9:
         9e:4e:74:b3:1c:29:e4:d8:41:87:02:e5:cf:79:d8:9f:ce:b7:
         83:4b:61:d7:51:e1:42:a5:f8:7f:c8:89:1d:fd:f9:11:b3:24:
         69:c4:88:8d:bb:72:b4:a4:e7:3e:81:7b:9c:3c:0c:7a:a2:96:
         5c:0a:4f:e4:bd:e8:7b:21:54:d1:ae:31:e5:c5:5e:6f:f0:84:
         61:c8:63:78:bf:bd:88:ce:7d:d7:3a:7c:69:c4:1d:06:8d:10:
         86:9a:fa:8b:4b:25:14:54:07:a7:fc:44:fb:2d:08:63:50:4a:
         a1:d1:c3:2d:03:bd:7e:43:b2:13:ae:f0:af:0e:9d:2b:10:f7:
         f3:e6:58:b2:af:39:41:79:9a:bc:89:b5:10:b9:9b:9b:41:3c:
         60:9d:0a:4d:9c:13:53:9b:e3:e8:79:76:c7:b1:66:eb:fe:1b:
         84:c7:e8:1e:06:3e:11:7e:62:1a:75:3a:58:96:93:37:34:6b:
         04:7c:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----