Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS205329.roa
File:                     AS205329.roa (raw, json)
Hash identifier:          +NSFARviHnI2fsg5atsW5nprMvYeepmQfAr2OK6qI3o=
Subject key identifier:   7F:A7:38:F4:13:C5:EA:DC:25:51:CB:C4:54:6C:72:8D:60:7B:8F:B6
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       4F07DBC6AB844CBB34F40BFC34FD8ACF44A548A0
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS205329.roa
Signing time:             Sun 09 Apr 2023 21:06:22 +0000
ROA not before:           Sun 09 Apr 2023 21:01:22 +0000
ROA not after:            Sun 07 Apr 2024 21:06:22 +0000
asID:                     205329
IP address blocks:        2a12:dd47:8240::/43 maxlen: 43
                          2a12:dd47:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:07:db:c6:ab:84:4c:bb:34:f4:0b:fc:34:fd:8a:cf:44:a5:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  9 21:01:22 2023 GMT
            Not After : Apr  7 21:06:22 2024 GMT
        Subject: CN=7FA738F413C5EADC2551CBC4546C728D607B8FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:b0:98:a0:e7:1c:0a:2a:3a:47:fd:50:ed:
                    3b:e0:49:8f:6b:0d:d9:67:40:6c:a2:ff:4b:6e:09:
                    d1:9c:b9:0d:c4:85:92:e0:f0:36:02:14:67:b8:db:
                    29:27:c5:16:ea:b5:47:2d:95:f2:77:0a:42:d6:bd:
                    13:e2:51:52:5e:0a:9e:31:c0:b6:10:0a:37:f4:65:
                    63:83:00:06:f6:d1:26:60:cd:fa:68:4a:41:35:d5:
                    eb:11:ae:29:ca:c5:48:b8:f2:d4:8a:3c:6d:e1:cb:
                    2c:27:2b:d7:51:2b:d1:dd:a8:f4:b2:05:5a:8b:12:
                    1c:db:ba:72:76:c7:c3:b5:71:67:ae:b6:bf:64:e9:
                    8d:6a:05:1a:8b:82:ff:04:05:53:e9:23:49:5f:3a:
                    96:d0:f4:8f:56:89:bc:6d:94:96:6c:ab:30:55:a7:
                    7b:85:1f:f6:a3:e4:7a:61:4f:4c:4d:a6:e8:8b:b6:
                    8c:46:fb:03:f0:d0:d4:6a:e6:e1:2b:e0:81:55:37:
                    f3:41:be:d2:a8:2a:ff:f5:01:01:05:db:46:60:d6:
                    7c:d9:10:01:61:a9:be:dd:75:49:87:30:e3:aa:dd:
                    71:01:50:7f:36:0d:bd:2d:2a:5c:e7:a1:2c:93:27:
                    0c:1f:e1:53:e7:92:75:d6:69:6e:82:ef:a3:aa:e3:
                    65:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A7:38:F4:13:C5:EA:DC:25:51:CB:C4:54:6C:72:8D:60:7B:8F:B6
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS205329.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8240::/43
                  2a12:dd47:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:bf:37:59:07:7b:60:59:55:e5:da:0d:0e:df:f6:93:93:1b:
         d0:5c:ed:d4:31:10:82:3e:bd:aa:e0:c3:38:d6:ad:3d:1a:b4:
         9d:b6:70:6a:68:e4:1d:8a:1d:2e:9e:bc:b9:2e:0f:69:ed:2f:
         f5:b3:e6:7e:46:e2:46:d4:86:67:75:14:0f:20:00:5e:70:9a:
         29:4a:8e:79:44:1f:45:57:72:f7:99:32:89:2c:0a:a9:72:31:
         90:5a:cf:e2:96:5c:37:98:60:d3:0f:9d:06:48:ba:65:64:54:
         5f:4e:fb:0f:02:ac:ed:1d:db:d4:9a:c2:a1:f9:dd:55:14:a1:
         cf:d5:d9:63:6a:24:23:a5:27:e8:dc:c9:7d:77:22:2d:ec:a8:
         65:bf:a3:8b:49:37:ef:3f:f1:96:db:4f:c4:ee:9d:8c:b7:57:
         ca:d5:bf:71:84:38:8c:e5:d5:ac:35:94:c9:d4:41:e1:a8:5c:
         26:15:91:52:45:68:e4:55:13:30:15:81:bd:51:2d:86:1f:40:
         82:34:31:d0:75:65:02:4a:df:98:f4:e2:bd:ad:e9:67:82:70:
         f8:7d:90:19:dd:da:93:6e:cb:71:cd:35:64:00:1d:7e:96:9a:
         77:c4:7d:1f:7e:63:1c:75:07:5a:e3:ac:ea:9d:b8:ba:e1:bf:
         12:cb:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----