Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS207142.roa
File:                     AS207142.roa (raw, json)
Hash identifier:          61AkJa9c0ksaO3gclujNm/vUNBhQrs4K5573Nnn4NZ8=
Subject key identifier:   A6:C8:F9:8D:CC:69:8D:3C:1A:33:7E:3C:E9:F2:8E:62:76:5A:48:D6
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       164259CDEC479EFD80ABD21F78A782CEA396BF03
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS207142.roa
Signing time:             Sat 08 Apr 2023 09:22:12 +0000
ROA not before:           Sat 08 Apr 2023 09:17:12 +0000
ROA not after:            Sat 06 Apr 2024 09:22:12 +0000
asID:                     207142
IP address blocks:        2a12:dd47:8090::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:42:59:cd:ec:47:9e:fd:80:ab:d2:1f:78:a7:82:ce:a3:96:bf:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:12 2023 GMT
            Not After : Apr  6 09:22:12 2024 GMT
        Subject: CN=A6C8F98DCC698D3C1A337E3CE9F28E62765A48D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:92:ea:ac:7e:8b:a1:55:92:44:1d:fd:ec:
                    2e:08:77:a6:f7:d5:52:cf:31:d4:63:b7:f5:53:94:
                    96:51:8a:09:8c:e1:60:1e:fc:d8:70:c9:de:d3:e5:
                    f0:1e:3e:05:10:fd:f6:20:00:0b:ee:a4:54:0d:ed:
                    b7:aa:1f:3a:ec:ce:da:75:49:cc:4c:f6:99:0f:a7:
                    70:89:f1:9a:96:08:ba:f3:d7:aa:89:4d:b9:98:db:
                    da:8a:0f:cc:95:77:6b:5e:d1:66:bc:32:17:c0:1a:
                    ea:21:58:7c:2f:5e:01:19:17:49:78:21:63:5b:49:
                    29:ef:e1:70:2c:3d:2a:c9:3a:66:d0:ab:3c:7e:2c:
                    cd:ad:ad:ad:3b:af:fe:da:ee:13:4f:5d:5e:a5:9f:
                    b3:ee:fc:3f:40:3c:72:b0:63:73:fd:b2:b3:54:3d:
                    8f:c8:23:91:79:26:63:12:80:b5:24:1e:f8:57:aa:
                    18:27:eb:da:d0:a5:65:81:46:ca:81:e3:ba:f9:16:
                    e5:9a:dc:12:31:ac:9d:84:1b:da:60:0f:b5:5d:76:
                    a2:f3:66:41:a6:54:d9:de:99:76:70:1e:44:bf:a2:
                    b9:9e:95:21:f6:00:58:1e:b9:49:fb:01:5a:35:8a:
                    bf:0c:8e:24:7e:a0:5a:d8:69:b2:65:d6:08:a5:7c:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C8:F9:8D:CC:69:8D:3C:1A:33:7E:3C:E9:F2:8E:62:76:5A:48:D6
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS207142.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8090::/44

    Signature Algorithm: sha256WithRSAEncryption
         65:2f:24:03:95:c1:23:08:3f:a2:77:44:35:d5:e8:e9:3e:02:
         ad:5f:41:8b:1c:7b:64:1e:59:08:64:f1:2f:9b:5d:e5:47:cf:
         9e:26:08:25:83:e6:bd:54:ce:af:fc:76:b1:9f:02:4c:4c:66:
         ad:c6:10:78:7c:d2:69:e5:d2:a3:c1:9c:23:da:b2:d4:8b:be:
         d0:18:34:f3:56:c2:4c:bd:4f:a8:dc:73:7a:7b:d2:97:e5:7e:
         74:80:b1:ba:ef:51:73:a7:63:84:4f:8b:f0:fd:95:75:bb:ea:
         17:65:a8:10:15:e1:7a:6c:0d:99:fe:2d:54:9e:b0:3b:ca:52:
         85:4c:97:8f:a0:d1:98:9d:d9:a0:3f:4c:02:6d:71:47:3e:ce:
         96:d0:1e:d2:9f:04:1d:3d:3b:a0:05:ff:fb:5e:30:84:5e:9d:
         41:a8:0f:60:40:32:b5:75:a2:9b:bb:4b:48:a3:31:ea:fa:47:
         df:07:8d:c9:25:95:6d:fd:dd:81:f1:6f:16:10:97:c8:31:c7:
         e5:6e:05:9e:e9:06:df:e2:4b:71:be:61:b3:10:2f:25:15:65:
         48:b3:d3:d2:9b:c8:c4:9e:73:9f:b7:e6:12:d7:17:72:d3:d1:
         1e:88:d0:12:46:cd:29:4b:68:fa:92:d2:c0:55:68:78:4e:38:
         61:a5:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----