Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS206016.roa
File:                     AS206016.roa (raw, json)
Hash identifier:          9FgsyRcZlDlZJmmQANBvVk8wlWeoP3mod3lQ5msvy7g=
Subject key identifier:   49:B0:DB:84:D5:EF:5E:7C:9D:8A:61:0D:2C:41:56:E0:1F:BA:DB:CF
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       51F3323D21D56185C59349E812760F051B035899
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS206016.roa
Signing time:             Sat 08 Apr 2023 09:22:13 +0000
ROA not before:           Sat 08 Apr 2023 09:17:13 +0000
ROA not after:            Sat 06 Apr 2024 09:22:13 +0000
asID:                     206016
IP address blocks:        2a12:dd47:8006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f3:32:3d:21:d5:61:85:c5:93:49:e8:12:76:0f:05:1b:03:58:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:13 2023 GMT
            Not After : Apr  6 09:22:13 2024 GMT
        Subject: CN=49B0DB84D5EF5E7C9D8A610D2C4156E01FBADBCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:d8:14:ab:0c:a8:06:80:63:75:38:1f:63:
                    48:7a:3d:b2:48:69:06:b7:8c:8e:77:01:01:22:06:
                    81:3a:e3:5b:ef:4c:fd:7b:8b:aa:87:84:bb:07:ef:
                    02:51:cd:43:9c:1b:8e:7e:3f:b7:33:95:85:a5:86:
                    b5:7e:ed:9d:ee:a0:da:e8:39:6d:db:f1:d4:04:f8:
                    d1:ba:27:51:dc:79:fd:47:83:d7:c2:52:88:74:c3:
                    8f:4c:d9:d9:9f:6d:c2:aa:cc:63:a9:37:48:39:2e:
                    e0:03:6d:f8:8d:bb:a4:68:f3:6b:a4:7e:1d:3c:a6:
                    ed:9e:51:92:3d:a6:04:19:a2:28:4b:f8:c9:86:13:
                    67:e2:85:c9:76:5c:17:11:37:bc:42:ed:19:4d:b9:
                    f2:b3:d9:33:2d:ac:59:7c:c9:01:5c:44:a3:58:1b:
                    8c:73:bc:27:be:d6:04:d1:18:c4:51:8a:1f:1a:aa:
                    c0:31:fb:01:44:0d:32:a5:9f:6e:45:29:d5:70:b5:
                    8c:e3:79:eb:bd:74:07:97:50:03:7c:91:89:d9:35:
                    09:41:62:0c:b8:10:2e:26:6a:43:29:a6:05:f2:9c:
                    f8:a3:af:53:c7:a5:34:9c:cc:65:0a:02:34:74:df:
                    9c:d3:5f:77:7b:69:6b:1e:69:51:62:29:7f:49:d3:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B0:DB:84:D5:EF:5E:7C:9D:8A:61:0D:2C:41:56:E0:1F:BA:DB:CF
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS206016.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8006::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:80:a1:31:fd:8e:60:45:bc:d5:b9:b5:a2:4c:29:d3:fb:
         63:4c:76:7a:8f:72:be:64:aa:10:a3:f2:36:61:d8:3d:be:67:
         05:9a:df:c8:3c:aa:bb:6d:61:b4:f9:df:66:e8:43:40:d0:48:
         fa:ab:5c:ee:e7:56:39:e3:e9:b1:72:23:dd:43:50:b6:1b:31:
         1b:09:27:40:59:14:8f:d3:ba:ab:b5:13:ad:b1:75:1d:e0:48:
         2c:0e:80:4d:62:0a:4e:23:31:68:5a:0f:6c:b3:ac:7d:db:1d:
         c5:d2:5a:d1:20:42:99:ea:d4:c6:fd:8b:f6:a3:06:ac:2b:f8:
         de:0c:50:ac:d9:d9:bf:78:e8:54:e6:e9:be:04:7a:cf:3d:8f:
         ab:41:3b:6d:6f:9c:71:34:62:a6:2c:47:c9:3b:4c:a0:96:59:
         9d:9c:58:8b:32:e0:7b:96:5a:88:35:d5:bc:72:a0:6a:b4:30:
         5c:75:13:15:ad:88:80:0e:f8:7c:e1:66:f0:f7:69:cb:b4:e0:
         93:6e:d9:7a:94:11:ba:9f:c2:cf:37:a9:bd:c7:62:5e:21:a1:
         f7:81:43:90:9c:be:86:83:08:64:9a:28:34:82:3e:eb:29:a8:
         e7:ff:0c:b8:c1:48:32:99:6b:9b:5e:03:0b:50:93:1a:f4:25:
         05:9e:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----