Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS206368.roa
File:                     AS206368.roa (raw, json)
Hash identifier:          iFNiNQAG+RqILcCI3oEohB77KI1NvGnYxwPF9IZjnW4=
Subject key identifier:   64:78:FF:2B:68:5A:2D:D3:78:1F:C3:BC:B5:49:EB:22:03:AB:16:59
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2573E72B34B82A3106B5A5BE396E14389E49565E
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS206368.roa
Signing time:             Sat 08 Apr 2023 09:22:18 +0000
ROA not before:           Sat 08 Apr 2023 09:17:18 +0000
ROA not after:            Sat 06 Apr 2024 09:22:18 +0000
asID:                     206368
IP address blocks:        2a12:dd47:80f0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:73:e7:2b:34:b8:2a:31:06:b5:a5:be:39:6e:14:38:9e:49:56:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:18 2023 GMT
            Not After : Apr  6 09:22:18 2024 GMT
        Subject: CN=6478FF2B685A2DD3781FC3BCB549EB2203AB1659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:f2:01:a9:0d:c6:68:5e:67:c2:d8:19:74:
                    03:96:c1:d8:8a:73:c5:3c:51:0c:ec:30:4a:82:48:
                    22:da:90:37:72:d0:21:a9:48:2a:df:04:60:4a:69:
                    4c:8b:58:17:e8:4e:de:47:96:6b:33:2e:85:bb:13:
                    36:da:e7:c3:23:0a:60:9d:28:d9:b2:e6:65:aa:44:
                    e4:a4:4b:65:e0:98:36:1c:6a:2a:20:e7:1d:36:d6:
                    79:d5:fa:74:f1:a6:ac:90:59:19:fe:30:d5:d2:2e:
                    5a:22:0e:e5:6e:71:b7:2e:58:7d:00:3b:c9:b0:78:
                    97:9c:21:d9:e9:da:42:74:fb:1c:e3:e6:07:92:4a:
                    2f:6c:6c:a0:ef:cf:83:71:1e:7c:cc:ea:53:bd:a2:
                    36:be:9e:e3:9e:ba:12:73:3e:f3:ac:b1:df:ce:75:
                    6b:27:57:9f:63:05:6e:47:bb:de:92:4c:52:ec:f9:
                    97:0d:bc:93:0b:8a:86:65:de:b2:6d:60:92:25:74:
                    18:74:a7:80:6f:5f:ef:6c:4e:0d:5a:1a:fc:c7:e6:
                    23:8b:d8:39:91:6d:9d:e3:39:44:58:65:bd:d4:6d:
                    b9:ee:e0:4c:81:bf:d9:07:11:72:36:c2:36:bb:fa:
                    90:02:04:75:97:d8:1a:b5:d0:df:b5:e6:5c:f6:87:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:FF:2B:68:5A:2D:D3:78:1F:C3:BC:B5:49:EB:22:03:AB:16:59
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS206368.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:fb:41:b0:98:14:89:89:65:26:f0:5b:0b:ed:19:c5:e7:da:
         c2:b1:38:fb:78:4f:7c:8d:95:22:44:e5:da:30:75:00:fb:b8:
         79:e4:1d:6f:91:66:d8:4a:29:ee:22:8b:2c:12:fe:d0:d2:3f:
         29:3c:d7:6a:ef:93:a4:42:77:71:b9:be:dc:97:c6:d8:05:e0:
         de:b2:db:d8:da:ee:e5:8e:18:f8:4e:2d:d0:be:dd:a3:b7:22:
         42:e7:a9:25:37:9b:f3:62:9d:39:10:15:6d:6e:38:c9:c1:ce:
         91:45:55:ff:35:7f:1c:2a:82:13:00:67:0a:f3:78:bd:cf:f1:
         4a:c7:d2:2c:09:e1:ce:69:41:95:64:cc:7a:9f:17:ae:d2:d5:
         90:bb:b2:e7:5d:bc:ff:01:2b:2f:90:b8:7e:d9:ed:e4:32:f5:
         9b:9a:37:a9:e1:9b:29:e6:3c:5a:02:76:91:f1:4b:cd:c5:37:
         30:cc:57:42:ef:cc:83:77:06:bb:1a:9d:77:3d:c8:b8:b7:8b:
         57:b7:e6:11:bb:1f:c9:ec:1f:79:18:79:27:cc:5a:b6:cb:fb:
         a8:c9:3f:22:a9:ae:24:e1:e9:3f:0f:54:1e:43:83:e1:ca:3f:
         40:8b:23:29:d9:ca:3c:1f:75:8b:f6:4f:c0:a6:a3:6c:f8:71:
         b0:bc:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----