Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS204876.roa
File:                     AS204876.roa (raw, json)
Hash identifier:          MUHcM2oADUozzx/OklWaWvHZNZg6dVtKw9Han8saWNs=
Subject key identifier:   99:46:1D:EB:E7:A8:B5:70:4C:D8:8C:D4:32:C0:80:35:86:BA:F2:FE
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3005CF325607CBC1ABB496FBD08FCF5A9675362E
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS204876.roa
Signing time:             Sat 08 Apr 2023 09:22:23 +0000
ROA not before:           Sat 08 Apr 2023 09:17:23 +0000
ROA not after:            Sat 06 Apr 2024 09:22:23 +0000
asID:                     204876
IP address blocks:        2a12:dd47:8008::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:05:cf:32:56:07:cb:c1:ab:b4:96:fb:d0:8f:cf:5a:96:75:36:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:23 2023 GMT
            Not After : Apr  6 09:22:23 2024 GMT
        Subject: CN=99461DEBE7A8B5704CD88CD432C0803586BAF2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:15:48:af:fd:cd:a6:49:f9:ff:49:7f:10:
                    80:27:27:58:ce:f2:8f:80:01:cc:75:96:2d:e0:d3:
                    8e:92:4d:f8:9b:f9:04:66:11:23:2b:34:5e:31:1d:
                    56:c5:28:c3:c8:9e:9a:5a:0b:cf:73:1d:30:a6:35:
                    4f:dc:1e:7e:f2:2f:5c:69:04:67:1a:bf:fd:be:e5:
                    b4:bc:81:78:f4:3b:5b:c0:c4:4a:ca:12:85:b4:a1:
                    1c:a8:9c:d5:70:3f:90:d7:67:33:df:16:19:37:be:
                    bc:29:f5:ab:52:85:58:c1:0d:85:44:1e:ad:61:ed:
                    a2:43:6a:6b:96:34:a9:f4:3e:94:c1:b4:c5:d2:f0:
                    2d:fd:e1:b4:6a:47:59:8f:fc:eb:8b:64:e9:e0:f7:
                    b6:17:8d:61:bc:86:1d:8c:1b:e0:bd:a0:31:76:33:
                    cb:b6:f2:22:db:c8:29:83:a2:ac:3c:4f:c7:4e:79:
                    23:da:36:26:8d:43:9b:0d:d4:67:4d:5c:82:b8:17:
                    95:cd:66:6c:59:f9:19:5b:bb:e7:79:88:30:86:ae:
                    55:ab:1f:bb:bd:c4:18:33:23:e3:24:18:b4:31:97:
                    f8:ab:10:81:92:f6:2e:5a:d7:15:e6:2c:73:f8:49:
                    b1:5a:a5:14:e2:d0:df:c5:87:db:14:9a:59:32:f4:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:46:1D:EB:E7:A8:B5:70:4C:D8:8C:D4:32:C0:80:35:86:BA:F2:FE
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS204876.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8008::/45

    Signature Algorithm: sha256WithRSAEncryption
         0e:df:25:71:53:6c:1b:3e:4a:39:e4:21:a9:be:3c:f2:f1:7d:
         a2:e7:7f:be:38:e0:62:a7:66:50:83:c3:3b:38:08:2d:fc:dd:
         3a:6b:cc:55:05:65:2c:71:c3:aa:da:0c:ea:fd:71:a8:65:01:
         a4:36:3f:11:13:51:40:9b:b4:d5:e7:ba:4d:bf:dc:0a:bf:ee:
         73:a2:0a:98:34:69:a9:ff:30:04:7f:ba:2a:9a:8f:62:4f:37:
         0e:3e:b5:a4:c7:5e:3a:9f:ad:fb:80:12:0d:ff:72:9c:36:6f:
         f9:1a:3e:87:3f:3a:33:99:dd:65:a1:3a:ba:02:ee:d5:1f:2c:
         22:05:f0:66:0f:93:d3:55:57:31:e9:77:ab:41:12:f0:50:4a:
         70:07:a1:5b:87:89:93:3c:18:6c:ce:7a:f5:6c:62:84:17:a9:
         fe:07:f7:91:66:d6:cd:98:71:46:9e:47:67:5e:a3:0d:97:85:
         00:74:4b:4b:01:f7:da:77:b1:b0:d0:c8:a3:f8:e5:9d:50:f5:
         c1:84:6e:79:91:4d:af:ca:6e:f2:1e:fa:e2:72:af:02:87:8b:
         1d:a5:bb:b0:3b:17:00:eb:20:79:93:7f:0a:50:36:a6:e6:d5:
         ca:ae:0d:e8:03:ac:fa:75:20:b0:b2:b4:8d:c6:98:85:1d:71:
         38:a8:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----