Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS204844.roa
File:                     AS204844.roa (raw, json)
Hash identifier:          McPfbx69cZ+2kwEFpACj8gxVBZ67XK+gaHgA6iG1fOU=
Subject key identifier:   70:8A:47:69:B0:DD:04:5E:FA:F3:DB:03:8A:F9:39:A2:F2:CF:2C:32
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       318AE525D1A86F6951EE2A5AA5CB3B851B8ADA6E
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS204844.roa
Signing time:             Sat 08 Apr 2023 09:22:16 +0000
ROA not before:           Sat 08 Apr 2023 09:17:16 +0000
ROA not after:            Sat 06 Apr 2024 09:22:16 +0000
asID:                     204844
IP address blocks:        2a12:dd47:8003::/48 maxlen: 48
                          2a12:dd47:8044::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8a:e5:25:d1:a8:6f:69:51:ee:2a:5a:a5:cb:3b:85:1b:8a:da:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:16 2023 GMT
            Not After : Apr  6 09:22:16 2024 GMT
        Subject: CN=708A4769B0DD045EFAF3DB038AF939A2F2CF2C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:21:10:b3:49:a8:4b:1e:40:12:3b:a5:d2:
                    85:31:7b:6a:ba:69:6f:4f:81:a8:7c:45:60:36:42:
                    f9:11:83:3d:34:0e:68:0d:d4:62:49:a6:a3:43:d5:
                    4c:7a:49:b9:bc:3f:ed:64:4d:f6:9d:19:14:a4:e7:
                    d6:38:76:a1:d4:7e:64:6f:04:ee:e9:40:58:0f:d3:
                    f1:84:73:27:e7:55:c2:05:51:b0:85:79:d9:53:d8:
                    f3:22:42:62:62:f9:70:60:a8:3d:82:ff:26:21:b5:
                    d2:a9:54:52:4f:74:60:4f:16:b9:63:bd:bc:58:ac:
                    a1:ba:b4:76:ec:92:f1:60:b5:8a:d9:1a:60:ac:a2:
                    e3:d4:23:e9:ed:14:b0:c7:7f:58:21:02:c9:b3:c8:
                    2f:24:3f:1a:18:02:5d:1a:71:ef:a7:41:28:8a:67:
                    92:48:54:a4:49:bf:36:17:6f:03:3e:a7:23:c6:95:
                    1f:51:f5:a1:53:4b:e9:da:6f:57:4c:24:68:83:76:
                    09:8d:a4:f0:d3:87:69:63:52:f1:00:a5:2e:05:48:
                    f8:09:c0:0d:a4:20:4d:60:06:58:f0:4a:dc:47:28:
                    d4:ac:62:72:ac:63:72:c8:2d:62:ee:d8:52:a3:08:
                    02:9c:37:d6:a5:78:48:33:00:1d:1d:7f:70:71:fa:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8A:47:69:B0:DD:04:5E:FA:F3:DB:03:8A:F9:39:A2:F2:CF:2C:32
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS204844.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8003::/48
                  2a12:dd47:8044::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:0c:77:c8:13:ec:33:42:3a:4d:b0:e7:5e:bd:53:32:2c:fb:
         b3:e8:d2:55:26:0c:ec:17:0e:9d:01:78:5c:34:8e:08:f8:33:
         a8:12:ff:44:9d:a0:23:7e:bf:3a:1b:5d:c1:da:96:ed:38:71:
         50:3d:8f:ee:38:8b:6b:8a:39:40:f0:61:21:83:4c:83:ee:4a:
         0c:f1:88:73:6d:ea:7b:f9:1b:37:81:43:e6:d9:d4:c2:2d:58:
         22:ae:8c:7b:0a:6e:35:6d:70:82:67:3d:ed:fe:7f:77:3f:10:
         a2:e2:18:ba:d4:1e:ba:8e:64:08:71:5f:32:38:fd:a3:3a:dc:
         63:f7:2b:5a:ab:5c:5b:eb:67:2c:d6:1e:00:cd:68:f9:50:e2:
         b6:75:9f:a8:0d:66:43:d1:fa:17:ab:ff:79:d7:74:93:df:3d:
         42:4e:9d:7c:8f:bc:f0:84:1b:f7:0c:cf:a9:51:eb:ac:4a:c0:
         2c:f4:92:1d:ef:cc:27:6a:89:0a:2f:7a:4b:a0:ff:af:1e:52:
         35:1c:21:e6:00:b5:1d:57:52:d3:a8:4c:b4:d1:6c:6c:be:97:
         d8:aa:eb:73:80:d4:b3:83:83:cd:0e:ff:ce:2b:97:28:d6:aa:
         cc:85:bf:8f:57:e1:ca:e8:43:c8:92:2e:5e:cc:85:60:ba:ae:
         50:02:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----