Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS207320.roa
File:                     AS207320.roa (raw, json)
Hash identifier:          NWMmASyqUwqgjvbuQZQkuIl/81In89sy1AIp2Bm3ki4=
Subject key identifier:   1E:EA:39:DD:27:2B:4C:5C:E7:C1:25:88:69:98:BE:CD:25:42:98:A2
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       476FCA288162C0DB6F04D40CE47A82DCE2978ACC
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS207320.roa
Signing time:             Sat 08 Apr 2023 09:22:26 +0000
ROA not before:           Sat 08 Apr 2023 09:17:26 +0000
ROA not after:            Sat 06 Apr 2024 09:22:26 +0000
asID:                     207320
IP address blocks:        2a12:dd47:82e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6f:ca:28:81:62:c0:db:6f:04:d4:0c:e4:7a:82:dc:e2:97:8a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:26 2023 GMT
            Not After : Apr  6 09:22:26 2024 GMT
        Subject: CN=1EEA39DD272B4C5CE7C125886998BECD254298A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:94:f0:4b:04:ca:7e:cf:a2:1d:aa:62:aa:
                    85:36:63:0e:5f:d9:f3:b9:23:b4:f0:4a:97:11:fa:
                    b8:f1:45:a3:c3:6a:c2:35:82:42:c9:64:fe:5a:2c:
                    3b:27:09:20:7c:6d:c1:f5:2c:ac:66:66:47:34:33:
                    e5:46:03:15:19:61:bf:5a:b2:94:39:9d:19:c1:dc:
                    79:11:d1:44:3f:e1:27:58:85:57:a2:e2:46:1b:f5:
                    36:11:cc:89:40:64:1f:3c:c3:f1:7b:b4:ae:7b:11:
                    d5:9b:2a:13:3d:d9:2c:a3:bc:69:3f:0f:f8:c9:d4:
                    62:f8:fb:c2:78:db:96:a4:45:4e:2a:db:f3:4e:97:
                    d6:53:d1:8f:ca:fd:fd:42:bb:09:f1:4c:d6:e5:f2:
                    db:ed:35:b3:aa:84:e7:80:7e:ca:5f:1f:45:22:70:
                    67:8e:e3:09:9d:ec:b2:05:75:ce:09:d1:aa:11:42:
                    50:85:7a:2d:94:c8:80:d7:6f:84:b3:75:35:1f:3e:
                    25:79:92:dc:02:44:60:0b:ef:e9:3a:80:80:d8:c5:
                    49:b7:30:e7:e1:18:de:51:f2:71:67:4c:6e:c8:de:
                    94:99:9c:d1:ac:c4:26:9a:02:0a:56:48:b1:da:18:
                    c9:6a:10:d0:6c:52:7d:7b:67:35:9f:e6:06:8c:92:
                    54:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EA:39:DD:27:2B:4C:5C:E7:C1:25:88:69:98:BE:CD:25:42:98:A2
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS207320.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:47:2e:18:93:d1:d1:08:b6:df:ba:8f:78:0e:d5:3e:4d:26:
         17:19:ef:ec:f4:46:5f:68:bb:f8:9c:cf:ce:79:88:93:0a:ce:
         e7:16:91:b2:62:e9:a7:45:d2:d8:26:95:3c:52:23:3a:5f:b0:
         e4:9c:e1:1d:9f:28:fe:fe:31:77:d2:54:c8:e2:fa:ca:60:03:
         73:b6:70:b0:a7:c5:72:67:ac:f1:c6:41:72:ef:08:a7:aa:c0:
         b4:44:7e:8c:13:2c:78:b8:78:ec:52:a7:41:14:9e:0b:fe:67:
         36:9c:4b:ea:94:dc:16:9b:f6:d5:eb:15:1c:45:64:55:d4:22:
         52:57:3d:1f:62:5d:30:b9:e6:93:d3:a3:6e:5c:6c:01:ef:46:
         a1:52:fa:d4:59:1d:1e:f6:e5:50:16:a4:ed:16:21:3e:cc:3b:
         c6:56:d5:fc:06:4e:c7:71:30:81:60:79:12:41:32:84:a6:fa:
         55:3f:6f:5d:ce:dc:db:46:a8:6c:05:e7:4f:6f:56:c3:53:30:
         68:1a:28:0e:0d:a4:9b:06:23:cb:80:be:19:b1:27:b0:00:cc:
         06:09:19:9d:82:e9:38:58:c8:eb:24:19:a8:6b:18:c0:2e:73:
         c3:21:e9:d4:43:ba:f2:58:12:71:8a:d9:d4:50:c5:e7:d4:b1:
         a5:23:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----