Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS205421.roa
File:                     AS205421.roa (raw, json)
Hash identifier:          ARs6/MCJiYQH6FFXaXxb96sjZ9vvHWzLOhEp7uMOvzU=
Subject key identifier:   87:DD:80:08:7D:0A:73:97:74:A6:5F:20:BA:A9:76:09:DF:A3:EF:6D
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       255BA81E20DFF42AAD88F4D94BCEBDF5F63F7ECE
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS205421.roa
Signing time:             Sat 08 Apr 2023 09:22:14 +0000
ROA not before:           Sat 08 Apr 2023 09:17:14 +0000
ROA not after:            Sat 06 Apr 2024 09:22:14 +0000
asID:                     205421
IP address blocks:        2a12:dd47:8220::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5b:a8:1e:20:df:f4:2a:ad:88:f4:d9:4b:ce:bd:f5:f6:3f:7e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:14 2023 GMT
            Not After : Apr  6 09:22:14 2024 GMT
        Subject: CN=87DD80087D0A739774A65F20BAA97609DFA3EF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:16:a0:e7:55:c1:87:66:8b:9a:47:65:1a:
                    85:92:e2:a1:fd:9a:41:28:b0:41:41:91:bb:47:e6:
                    68:f5:5c:32:93:f4:80:ec:d4:7b:ca:a3:1b:d0:6c:
                    00:75:45:4f:7b:16:1d:49:6d:2d:d3:1e:af:2e:a2:
                    72:71:ad:5b:fb:c1:1d:93:a3:5f:27:f2:86:79:fd:
                    f1:fc:a7:5e:b3:ad:ad:bd:23:89:3d:9e:99:a4:6f:
                    d1:6f:96:19:5b:32:22:33:fa:58:b0:67:14:04:36:
                    2a:db:92:a4:be:6e:f6:02:37:74:c2:0c:36:d2:a6:
                    cd:1b:12:a5:1b:69:8c:a7:46:91:34:80:7a:db:e1:
                    26:f1:02:79:e5:9c:70:d5:d8:1a:2a:20:5c:e6:c7:
                    a5:dd:f1:d5:a0:2f:0d:95:2e:69:c3:24:69:a0:2a:
                    a1:16:51:83:64:ee:42:9a:a5:23:9f:f6:bc:2d:68:
                    6e:49:dd:96:ee:51:08:ac:34:81:e6:f0:09:3c:65:
                    d7:d1:bd:32:56:0f:48:71:54:1c:86:c9:f4:44:b4:
                    95:8d:af:97:a4:56:84:d3:eb:11:70:db:89:aa:37:
                    c9:de:fe:de:16:8d:c6:47:35:c9:c8:4c:c5:eb:5b:
                    da:aa:75:84:3f:2a:2c:a7:96:fd:1b:7f:1c:cc:f4:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DD:80:08:7D:0A:73:97:74:A6:5F:20:BA:A9:76:09:DF:A3:EF:6D
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS205421.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8220::/44

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:a1:99:60:0b:63:0a:d6:c2:04:10:da:c2:e9:c6:26:53:
         60:f2:d4:79:53:c3:d6:29:6c:5a:41:76:76:59:b3:d7:ea:bc:
         0f:52:e9:b4:7b:e6:93:4c:6e:5b:9f:2d:30:29:00:9d:cf:6f:
         2f:9a:a2:a5:10:b2:5b:54:20:ab:72:3e:02:d3:fa:db:0c:fd:
         93:12:30:09:eb:a7:c7:66:11:c8:7d:7d:4c:0b:9c:a5:f9:c4:
         92:0d:fb:7b:00:97:a8:3f:90:e8:59:ad:31:f0:00:dd:66:90:
         07:6c:f1:cc:2c:89:41:7d:84:d9:4c:2c:33:da:fb:ba:9d:23:
         86:9f:01:56:4a:7d:a0:7e:99:28:41:8d:e7:7f:96:ab:d4:7e:
         83:d0:fd:a2:7d:8b:5e:d9:48:2e:22:4a:90:09:ec:e6:27:b1:
         7e:95:92:95:fd:7f:56:2e:5e:d0:b7:19:8c:22:6a:d9:a1:96:
         9a:32:ac:25:72:a1:5a:3c:d9:35:de:a5:bb:8a:e7:a0:94:ce:
         91:49:1c:0d:03:03:c8:f4:5d:44:6c:15:c8:5e:ea:56:5d:cb:
         40:c2:47:29:6a:41:3e:12:d4:04:98:35:80:d6:3d:c2:ff:a5:
         69:93:ca:84:72:33:a5:92:5b:77:3d:55:8a:1e:90:3f:06:8b:
         1c:ae:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----