Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS205848.roa
File:                     AS205848.roa (raw, json)
Hash identifier:          5Q2b9q2Vk0EKnIKk8YVSOWuvGPXRDqW4G9fM3NE9D2c=
Subject key identifier:   15:97:50:68:C7:B9:8A:A4:BB:19:7E:8D:5B:78:9B:F1:E8:CD:75:FB
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2E3B9DFEBC8BD24F6950517155AF9806D0E0ED9C
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS205848.roa
Signing time:             Sat 08 Apr 2023 09:22:15 +0000
ROA not before:           Sat 08 Apr 2023 09:17:15 +0000
ROA not after:            Sat 06 Apr 2024 09:22:15 +0000
asID:                     205848
IP address blocks:        2a12:dd47:8049::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3b:9d:fe:bc:8b:d2:4f:69:50:51:71:55:af:98:06:d0:e0:ed:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:15 2023 GMT
            Not After : Apr  6 09:22:15 2024 GMT
        Subject: CN=15975068C7B98AA4BB197E8D5B789BF1E8CD75FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5b:a0:30:e5:5a:e4:b5:f3:bb:99:cf:a1:e7:
                    32:0b:33:7c:d6:cd:28:4a:3e:38:c4:61:f1:99:c3:
                    e7:11:f2:eb:1b:8e:1f:4d:f2:be:67:82:42:13:c1:
                    35:93:9e:1a:7b:02:fe:d6:31:8e:df:c1:1b:98:b1:
                    4b:31:4b:1d:5e:51:a0:13:66:bc:e7:0d:81:92:1b:
                    8a:43:34:d5:bb:9a:b8:08:ba:13:8c:8b:82:e8:e7:
                    08:03:b3:c1:6a:32:e3:7f:b1:33:ff:3f:84:3c:9b:
                    8a:52:c2:2d:11:57:e1:64:54:2c:f6:56:8c:87:33:
                    3a:57:42:44:41:98:ea:dc:38:7e:8b:b5:9f:76:08:
                    93:f3:c5:3d:58:9f:eb:9b:be:4d:74:e4:ec:70:f8:
                    48:c1:21:71:80:f2:78:f1:12:7f:d8:d9:fc:e3:bc:
                    d5:14:a3:fe:e4:40:85:6b:85:4e:0d:ba:6d:6c:c2:
                    00:6d:d5:36:b1:6c:fe:91:28:07:f7:56:01:a9:4e:
                    a1:33:11:df:2a:f4:84:04:09:df:3f:78:df:99:39:
                    14:09:c5:cb:66:e4:2c:af:6a:29:1d:be:f8:b8:1c:
                    f0:38:b3:17:3f:e6:15:2d:06:ec:ef:28:07:ed:7a:
                    3b:3a:61:79:c7:c8:1d:3f:be:04:f9:99:b9:5b:be:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:97:50:68:C7:B9:8A:A4:BB:19:7E:8D:5B:78:9B:F1:E8:CD:75:FB
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS205848.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8049::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:6b:02:cc:32:07:95:0a:76:25:f3:90:09:52:f3:ee:4d:06:
         3c:3f:0b:77:2a:58:a8:41:ea:52:eb:cc:9d:5d:83:2c:c0:90:
         e3:38:18:d3:e9:50:f0:f7:5c:50:e1:2d:18:28:ad:6a:64:5d:
         c6:dd:4f:69:74:3d:28:83:31:fa:40:e7:78:a5:9e:18:ba:df:
         32:7c:45:25:6d:59:30:1d:49:15:69:4a:a1:43:3f:cc:f7:5b:
         66:4f:e5:10:fd:d3:d1:4a:ba:bd:57:fa:39:c5:91:5b:79:26:
         94:1e:7d:c2:60:75:81:1a:d4:01:17:64:1a:86:36:cf:84:2b:
         cd:59:80:ae:91:15:44:5b:ef:f8:af:a5:9d:27:a8:ed:c6:f5:
         a2:65:24:68:1e:91:ff:c7:e9:25:e8:02:84:19:81:60:0d:13:
         a7:e2:c2:f0:fc:d5:22:aa:27:67:10:23:ff:8e:55:08:38:6c:
         8e:d2:17:0a:ba:d3:74:8f:9b:18:36:6a:d3:4a:82:5d:29:72:
         4b:3b:2c:05:4a:f2:48:7c:79:a3:fc:a0:6e:28:9b:a8:49:a2:
         00:ce:b2:22:89:da:ff:df:f1:4d:b6:74:3b:62:26:38:81:6c:
         ab:33:fa:86:3f:58:2a:72:da:63:05:f2:b4:f7:a7:f5:ab:14:
         c3:4c:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----