Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS205432.roa
File:                     AS205432.roa (raw, json)
Hash identifier:          YtW7wubsPivKLxwNirQOS9iC5lqY1m8kBTRpKQOnb/s=
Subject key identifier:   F9:10:07:45:89:20:01:A8:D6:C8:01:3F:72:FF:73:83:CC:66:EC:FC
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       4DFAB1D6E134EEE717A6FF52B100C5E4470C35F6
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS205432.roa
Signing time:             Sat 08 Apr 2023 09:22:22 +0000
ROA not before:           Sat 08 Apr 2023 09:17:22 +0000
ROA not after:            Sat 06 Apr 2024 09:22:22 +0000
asID:                     205432
IP address blocks:        2a12:dd47:84fe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fa:b1:d6:e1:34:ee:e7:17:a6:ff:52:b1:00:c5:e4:47:0c:35:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:22 2023 GMT
            Not After : Apr  6 09:22:22 2024 GMT
        Subject: CN=F9100745892001A8D6C8013F72FF7383CC66ECFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:1b:b4:7e:26:c7:28:77:9e:46:da:e2:48:
                    c0:eb:30:59:9d:2b:15:07:e7:38:b1:70:33:cf:db:
                    e8:81:af:4d:5a:7d:d3:12:2e:2e:8c:32:f8:56:12:
                    80:da:22:e9:02:69:77:e8:3b:8a:d7:8d:46:17:60:
                    3b:02:ba:e2:67:5f:46:f1:d6:93:b6:92:0d:2d:0e:
                    9a:dc:8f:de:62:8f:ff:8d:83:b7:f4:1b:bc:99:48:
                    c8:ca:5c:c7:9a:6e:65:eb:b9:5d:03:95:73:1d:ea:
                    46:4d:81:f7:53:95:57:95:3a:55:f2:52:0a:f5:6d:
                    24:e8:42:55:ab:24:42:21:24:b9:8d:cd:22:d5:18:
                    ba:90:18:fc:f7:49:f6:ac:07:e8:a5:83:2c:00:e3:
                    11:7c:17:c5:94:90:91:00:08:a7:ac:c3:db:06:4a:
                    b4:ef:26:78:82:a6:95:33:5d:72:21:59:7f:54:35:
                    56:ff:d7:0b:44:3c:cc:c9:7e:8c:7e:e2:c2:98:54:
                    b9:36:6a:96:e8:84:67:80:2b:49:5d:34:f0:ee:66:
                    15:f1:75:e6:f1:cb:e9:49:32:5a:83:df:e6:58:66:
                    2f:34:f8:b5:c2:11:f1:10:01:e4:26:3d:36:86:a7:
                    36:32:10:14:b8:1d:48:82:ef:e1:8f:bc:11:b8:a7:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:10:07:45:89:20:01:A8:D6:C8:01:3F:72:FF:73:83:CC:66:EC:FC
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS205432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:6c:dd:85:28:a3:a3:11:6a:aa:a8:41:2c:6e:f3:cc:58:db:
         15:04:fe:39:ef:b9:99:00:0d:8f:fe:a5:a9:c5:ca:7d:e2:db:
         4e:c5:17:f3:38:fd:02:1f:f5:92:43:fa:3b:98:95:29:b9:48:
         18:47:fc:33:6a:75:e3:4a:60:30:8c:63:0c:87:ca:aa:10:6a:
         ea:b0:9f:ca:ab:7c:ba:a9:96:32:d0:57:26:8e:fd:8d:9d:75:
         ff:dd:36:c9:8a:d0:14:b5:fc:f6:bc:11:d8:7d:7f:6a:62:cc:
         4e:07:ab:72:cf:72:96:ae:44:a7:54:53:fd:52:a4:a0:e5:61:
         c8:aa:44:05:f1:ad:db:57:f2:cc:6e:1c:f2:93:17:24:59:c8:
         d9:e3:2c:b7:ef:4e:ff:c9:75:d5:83:0d:67:2f:74:94:2b:19:
         2f:44:32:24:0a:80:59:f4:20:2c:66:3c:60:dc:d1:01:97:1d:
         fe:9e:fb:7c:e5:60:4f:6d:f5:28:fc:88:12:03:d5:17:f0:1a:
         67:0c:3a:65:dd:cd:bb:f0:c7:5b:c4:8a:11:46:4a:0f:8f:96:
         cc:0e:b2:9b:45:d3:ad:af:9e:c8:c4:03:6a:e9:99:a5:26:12:
         2d:ba:11:0a:26:14:4d:3c:e7:11:c4:2b:06:91:ab:d5:6b:12:
         8a:fa:10:7e
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUTfqx1uE07ucXpv9SsQDF5EcMNfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjJaFw0yNDA0MDYwOTIyMjJaMDMxMTAvBgNV
BAMTKEY5MTAwNzQ1ODkyMDAxQThENkM4MDEzRjcyRkY3MzgzQ0M2NkVDRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/xu0fibHKHeeRtriSMDrMFmd
KxUH5zixcDPP2+iBr01afdMSLi6MMvhWEoDaIukCaXfoO4rXjUYXYDsCuuJnX0bx
1pO2kg0tDprcj95ij/+Ng7f0G7yZSMjKXMeabmXruV0DlXMd6kZNgfdTlVeVOlXy
Ugr1bSToQlWrJEIhJLmNzSLVGLqQGPz3SfasB+ilgywA4xF8F8WUkJEACKesw9sG
SrTvJniCppUzXXIhWX9UNVb/1wtEPMzJfox+4sKYVLk2apbohGeAK0ldNPDuZhXx
debxy+lJMlqD3+ZYZi80+LXCEfEQAeQmPTaGpzYyEBS4HUiC7+GPvBG4p5+5AgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQU+RAHRYkgAajWyAE/cv9zg8xm7PwwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDU0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HhP4wDQYJKoZIhvcNAQEL
BQADggEBAJ5s3YUoo6MRaqqoQSxu88xY2xUE/jnvuZkADY/+panFyn3i207FF/M4
/QIf9ZJD+juYlSm5SBhH/DNqdeNKYDCMYwyHyqoQauqwn8qrfLqpljLQVyaO/Y2d
df/dNsmK0BS1/Pa8Edh9f2pizE4Hq3LPcpauRKdUU/1SpKDlYciqRAXxrdtX8sxu
HPKTFyRZyNnjLLfvTv/JddWDDWcvdJQrGS9EMiQKgFn0ICxmPGDc0QGXHf6e+3zl
YE9t9Sj8iBID1RfwGmcMOmXdzbvwx1vEihFGSg+PlswOsptF062vnsjEA2rpmaUm
Ei26EQomFE085xHEKwaRq9VrEor6EH4=
-----END CERTIFICATE-----