Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS205980.roa
File:                     AS205980.roa (raw, json)
Hash identifier:          8HLGMfvC2ShuUx4I+3mTV6H3Dr8s98MbJtYJn+lFiTE=
Subject key identifier:   32:DD:E5:39:63:6A:8F:16:A7:F2:85:E8:48:AF:29:49:EC:18:55:3C
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3F2FA4955085C6D42C2B367531EB08EB5E1D414D
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS205980.roa
Signing time:             Sat 08 Apr 2023 09:22:26 +0000
ROA not before:           Sat 08 Apr 2023 09:17:26 +0000
ROA not after:            Sat 06 Apr 2024 09:22:26 +0000
asID:                     205980
IP address blocks:        2a12:dd47:80c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2f:a4:95:50:85:c6:d4:2c:2b:36:75:31:eb:08:eb:5e:1d:41:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:26 2023 GMT
            Not After : Apr  6 09:22:26 2024 GMT
        Subject: CN=32DDE539636A8F16A7F285E848AF2949EC18553C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:f1:ae:27:df:5b:61:4f:7d:de:f7:80:11:
                    9e:17:a2:08:ad:dd:d1:a6:e4:d4:44:82:7e:c1:11:
                    9e:2b:0a:3d:d8:4a:4f:f0:f7:d5:05:6e:b9:b1:5b:
                    cc:3e:7d:28:f4:f9:62:64:f6:0b:0c:8c:02:97:0a:
                    e7:2e:6c:94:59:77:60:31:92:b5:88:1a:b2:9e:f8:
                    b3:4e:c7:9f:ad:dc:db:3f:16:72:b3:21:63:ce:03:
                    c9:0a:39:85:d8:bd:76:01:b6:3e:55:e0:6e:68:59:
                    36:b2:b8:e8:dc:e6:07:da:3b:79:89:44:2d:f5:1b:
                    44:e1:89:a6:1b:99:49:2c:12:53:2a:34:d5:f9:e3:
                    3c:8e:2e:44:65:02:c8:ee:5a:3e:0c:a1:d8:8a:99:
                    df:ba:96:21:ae:fb:10:a7:e3:e6:1b:ab:bf:14:c9:
                    8e:79:b7:47:5a:57:d8:22:d5:a4:3e:a1:a4:27:2e:
                    6b:01:bf:d6:14:60:b6:9f:e6:80:df:46:fc:f8:42:
                    33:1c:af:27:12:cd:da:3f:57:f4:d4:1c:13:de:47:
                    4b:78:67:aa:c4:46:04:bb:f7:9c:19:92:c2:78:76:
                    f2:dd:0a:f4:4b:1c:86:11:9e:a6:df:a9:64:b4:40:
                    ee:e5:62:3e:ae:ae:0a:90:38:25:39:2e:92:33:2a:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DD:E5:39:63:6A:8F:16:A7:F2:85:E8:48:AF:29:49:EC:18:55:3C
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS205980.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:22:8a:b2:0a:81:e3:a5:a1:de:38:5b:ac:ad:86:3e:77:
         30:91:54:81:39:87:bd:22:bf:f7:9f:9b:de:25:ba:51:c0:72:
         3b:fb:2d:f1:15:c3:38:2b:5b:a2:52:8e:48:4f:7e:30:8c:fe:
         4a:ee:36:e5:84:f6:40:03:51:80:34:13:fb:db:16:97:cf:f1:
         62:48:75:3d:f7:a2:13:e1:be:a1:a1:89:ad:07:22:aa:24:c7:
         06:ee:fd:ff:17:28:7b:3c:05:23:74:5f:d8:65:12:db:1b:84:
         ab:e5:3b:92:81:0f:3a:ab:2b:f9:23:ab:bc:cd:f7:2e:05:88:
         c7:c9:78:9b:9f:16:6d:15:d9:01:36:28:8f:f9:30:37:ba:3e:
         4a:b1:e5:29:40:a0:4a:f8:1c:c8:3d:74:f4:24:3c:88:82:ae:
         cc:9a:a9:82:3c:68:94:df:54:3f:9b:1a:bc:4d:4e:46:ff:6a:
         10:e5:12:5d:1b:53:07:7e:f8:f0:fd:e7:0e:af:ef:7c:45:eb:
         eb:04:de:2e:05:cc:5f:fb:cb:fd:55:21:c6:a7:3d:f4:af:e5:
         35:43:d1:34:cb:50:b4:d6:a5:32:44:4c:b2:53:51:e0:6b:ac:
         ac:10:33:99:f5:4c:fb:72:e7:d4:d6:40:52:01:6a:a9:3a:89:
         31:b9:b9:7c
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUPy+klVCFxtQsKzZ1MesI614dQU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjZaFw0yNDA0MDYwOTIyMjZaMDMxMTAvBgNV
BAMTKDMyRERFNTM5NjM2QThGMTZBN0YyODVFODQ4QUYyOTQ5RUMxODU1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpfGuJ99bYU993veAEZ4Xogit
3dGm5NREgn7BEZ4rCj3YSk/w99UFbrmxW8w+fSj0+WJk9gsMjAKXCucubJRZd2Ax
krWIGrKe+LNOx5+t3Ns/FnKzIWPOA8kKOYXYvXYBtj5V4G5oWTayuOjc5gfaO3mJ
RC31G0ThiaYbmUksElMqNNX54zyOLkRlAsjuWj4ModiKmd+6liGu+xCn4+Ybq78U
yY55t0daV9gi1aQ+oaQnLmsBv9YUYLaf5oDfRvz4QjMcrycSzdo/V/TUHBPeR0t4
Z6rERgS795wZksJ4dvLdCvRLHIYRnqbfqWS0QO7lYj6urgqQOCU5LpIzKhfdAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUMt3lOWNqjxan8oXoSK8pSewYVTwwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDU5ODAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HgMAwDQYJKoZIhvcNAQEL
BQADggEBAJ26IoqyCoHjpaHeOFusrYY+dzCRVIE5h70iv/efm94lulHAcjv7LfEV
wzgrW6JSjkhPfjCM/kruNuWE9kADUYA0E/vbFpfP8WJIdT33ohPhvqGhia0HIqok
xwbu/f8XKHs8BSN0X9hlEtsbhKvlO5KBDzqrK/kjq7zN9y4FiMfJeJufFm0V2QE2
KI/5MDe6Pkqx5SlAoEr4HMg9dPQkPIiCrsyaqYI8aJTfVD+bGrxNTkb/ahDlEl0b
Uwd++PD95w6v73xF6+sE3i4FzF/7y/1VIcanPfSv5TVD0TTLULTWpTJETLJTUeBr
rKwQM5n1TPty59TWQFIBaqk6iTG5uXw=
-----END CERTIFICATE-----