Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS205431.roa
File:                     AS205431.roa (raw, json)
Hash identifier:          28wJQKQ1QnDRasDY9N39ouPnY92/6e+sM3QX1jC2gns=
Subject key identifier:   D5:8C:B2:77:62:BC:FC:66:F9:4D:21:90:02:31:2D:7D:4E:8A:98:5E
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3BA8FEEB4E6D643D927D427C7DD7ACF039694736
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS205431.roa
Signing time:             Sat 08 Apr 2023 09:22:10 +0000
ROA not before:           Sat 08 Apr 2023 09:17:10 +0000
ROA not after:            Sat 06 Apr 2024 09:22:10 +0000
asID:                     205431
IP address blocks:        2a12:dd40::/31 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a8:fe:eb:4e:6d:64:3d:92:7d:42:7c:7d:d7:ac:f0:39:69:47:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:10 2023 GMT
            Not After : Apr  6 09:22:10 2024 GMT
        Subject: CN=D58CB27762BCFC66F94D219002312D7D4E8A985E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:d4:4a:62:97:c5:24:07:61:aa:e9:7a:e6:
                    dd:0d:e8:77:7a:8a:cb:7f:f9:95:a4:f3:ac:26:66:
                    9f:ba:dc:95:04:a5:05:82:85:e7:c6:ca:a1:8e:a8:
                    c4:52:6e:3c:98:e7:68:7a:8b:36:6d:9f:fb:3f:63:
                    4e:de:37:32:9a:2a:d7:e4:32:06:61:ea:e8:5d:f5:
                    4c:50:ea:6d:51:ba:8e:c5:23:d9:ea:9e:f7:79:de:
                    8c:af:36:ae:fa:bc:89:dd:b9:35:90:0c:72:a4:95:
                    30:53:99:92:ab:01:fc:55:14:f2:af:a6:df:eb:d4:
                    37:69:45:25:9b:24:60:ea:6f:9d:83:0c:7f:6c:2d:
                    10:d5:db:b6:37:9d:8e:46:05:63:c8:92:bd:1a:16:
                    4c:74:b8:5c:7c:ba:4d:da:0b:0e:b7:04:ca:75:3e:
                    c6:b1:ca:3f:11:88:08:51:1d:47:8d:4c:a1:eb:25:
                    32:08:7f:35:31:fd:de:ba:9e:a9:a2:a5:0d:37:10:
                    18:84:4b:d3:fb:34:f6:d0:d5:26:ea:08:dd:e6:3d:
                    98:91:79:2e:9a:fd:eb:ea:0f:74:38:c8:91:14:cc:
                    47:5a:bd:59:c4:1e:e3:20:38:ac:d6:81:c6:fa:0d:
                    4e:24:dd:c6:f0:24:24:7c:f0:2e:f3:5a:f6:da:63:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8C:B2:77:62:BC:FC:66:F9:4D:21:90:02:31:2D:7D:4E:8A:98:5E
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS205431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd40::/31

    Signature Algorithm: sha256WithRSAEncryption
         22:9b:18:a1:86:b9:48:e0:d0:d1:49:0f:83:5d:4c:b0:40:57:
         4a:92:5a:55:29:b4:09:16:f5:40:1d:d9:50:d3:71:dd:e9:f4:
         27:b1:25:cb:d7:e9:48:54:75:db:6f:30:98:fa:fe:34:70:d1:
         b8:38:b9:d3:39:5d:a8:d0:c7:29:81:57:2d:de:16:37:23:87:
         c2:d6:80:aa:78:0e:60:0f:ec:3b:dd:a3:d4:79:f7:f6:5c:9d:
         e6:65:1d:28:d7:14:61:37:92:13:04:de:00:9d:46:06:1b:22:
         a8:b1:fe:4a:76:57:a6:3a:3f:15:20:69:b4:a8:3b:e5:36:2b:
         23:d7:bf:3d:1c:7a:d6:d1:86:d1:09:18:7c:56:0b:d3:d5:f9:
         72:31:f9:81:c8:48:ce:93:d6:cf:b3:a7:45:a1:45:f3:80:32:
         6f:80:9e:be:a3:1b:68:5e:09:26:b7:b8:42:01:47:69:12:02:
         d7:ec:58:72:08:d4:be:b0:d6:b5:e4:9c:1d:3e:9d:a1:1b:2a:
         3e:6d:27:59:96:13:23:60:06:74:06:d9:07:2d:9e:5d:d7:f3:
         c0:16:e5:cc:fe:56:e5:be:cc:bd:e6:1e:c1:b2:c7:4a:db:8e:
         ff:df:d4:5d:46:d8:08:11:42:11:4f:a5:0d:4c:e8:41:61:2b:
         7b:44:9f:28
-----BEGIN CERTIFICATE-----
MIIEkTCCA3mgAwIBAgIUO6j+605tZD2SfUJ8fdes8DlpRzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MTBaFw0yNDA0MDYwOTIyMTBaMDMxMTAvBgNV
BAMTKEQ1OENCMjc3NjJCQ0ZDNjZGOTREMjE5MDAyMzEyRDdENEU4QTk4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFdRKYpfFJAdhqul65t0N6Hd6
ist/+ZWk86wmZp+63JUEpQWChefGyqGOqMRSbjyY52h6izZtn/s/Y07eNzKaKtfk
MgZh6uhd9UxQ6m1Ruo7FI9nqnvd53oyvNq76vInduTWQDHKklTBTmZKrAfxVFPKv
pt/r1DdpRSWbJGDqb52DDH9sLRDV27Y3nY5GBWPIkr0aFkx0uFx8uk3aCw63BMp1
Psaxyj8RiAhRHUeNTKHrJTIIfzUx/d66nqmipQ03EBiES9P7NPbQ1SbqCN3mPZiR
eS6a/evqD3Q4yJEUzEdavVnEHuMgOKzWgcb6DU4k3cbwJCR88C7zWvbaYyy9AgMB
AAGjggGbMIIBlzAdBgNVHQ4EFgQU1Yyyd2K8/Gb5TSGQAjEtfU6KmF4wHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDU0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQEqEt1AMA0GCSqGSIb3DQEBCwUA
A4IBAQAimxihhrlI4NDRSQ+DXUywQFdKklpVKbQJFvVAHdlQ03Hd6fQnsSXL1+lI
VHXbbzCY+v40cNG4OLnTOV2o0McpgVct3hY3I4fC1oCqeA5gD+w73aPUeff2XJ3m
ZR0o1xRhN5ITBN4AnUYGGyKosf5KdlemOj8VIGm0qDvlNisj1789HHrW0YbRCRh8
VgvT1flyMfmByEjOk9bPs6dFoUXzgDJvgJ6+oxtoXgkmt7hCAUdpEgLX7FhyCNS+
sNa15JwdPp2hGyo+bSdZlhMjYAZ0BtkHLZ5d1/PAFuXM/lblvsy95h7BssdK247/
39RdRtgIEUIRT6UNTOhBYSt7RJ8o
-----END CERTIFICATE-----