Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS207598.roa
File:                     AS207598.roa (raw, json)
Hash identifier:          ypFrp8dUDsrfJBTBssYnY5zvNW7qVyDblIU/giCFzgc=
Subject key identifier:   B7:0C:1C:BE:C8:A5:BD:40:E4:55:D0:BD:74:62:49:3C:2A:2A:BA:A1
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       528C2B66BF1E36E95D3B7BC9E5A16E359117E60D
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS207598.roa
Signing time:             Sat 08 Apr 2023 09:22:13 +0000
ROA not before:           Sat 08 Apr 2023 09:17:13 +0000
ROA not after:            Sat 06 Apr 2024 09:22:13 +0000
asID:                     207598
IP address blocks:        2a12:dd47:8042::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8c:2b:66:bf:1e:36:e9:5d:3b:7b:c9:e5:a1:6e:35:91:17:e6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:13 2023 GMT
            Not After : Apr  6 09:22:13 2024 GMT
        Subject: CN=B70C1CBEC8A5BD40E455D0BD7462493C2A2ABAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:93:aa:29:53:8c:db:17:c7:b0:15:77:7d:
                    7d:3d:69:a1:ba:e9:65:b7:52:94:21:74:92:be:30:
                    45:32:bd:43:7e:55:e5:47:fa:5e:6d:3e:88:b9:04:
                    26:de:32:1a:a0:e7:a3:fa:62:eb:60:a6:f7:ad:88:
                    81:f0:b2:80:97:b0:63:85:c3:1d:de:3a:70:9b:41:
                    a7:79:65:6c:17:3c:1f:df:d5:33:46:d7:02:c0:16:
                    84:52:5d:57:30:4e:a4:6c:f3:bf:5a:46:92:01:45:
                    ab:a1:e1:7e:00:8f:5d:96:51:22:d9:25:54:d2:58:
                    e6:2d:66:52:33:e7:d0:d7:98:e1:7b:84:b1:5e:e8:
                    75:b8:4a:73:5f:d9:33:00:af:d5:f1:b2:cd:d7:77:
                    9e:31:5f:57:21:93:d8:bd:f7:5a:25:a2:b1:f5:6a:
                    ad:df:b9:45:11:9a:c4:b0:19:d3:dd:e0:85:02:e4:
                    7f:b4:4f:be:9e:88:2f:59:03:e1:16:6f:02:09:37:
                    4a:3e:05:bd:51:0d:6a:4d:8d:eb:50:d0:26:e3:13:
                    f5:e3:20:0b:12:85:07:f3:6d:10:c2:f7:c8:a4:bb:
                    f1:b5:26:f7:0e:ca:7e:4e:6b:8c:c5:04:34:58:1f:
                    ef:0c:d7:4c:85:4e:d0:18:b5:e1:0c:5c:b7:14:5f:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0C:1C:BE:C8:A5:BD:40:E4:55:D0:BD:74:62:49:3C:2A:2A:BA:A1
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS207598.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8042::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:48:48:74:46:1f:2d:3f:88:be:fc:d6:0f:bc:37:e3:89:ed:
         61:c7:72:2e:12:ae:1a:99:9f:7e:a8:e9:bf:38:b0:02:7f:b7:
         1e:45:4b:65:88:b1:89:6d:35:a6:df:48:37:ac:bf:94:0b:25:
         d6:91:af:2a:d0:14:33:3a:3c:0f:06:a0:b2:ba:02:5a:59:56:
         cc:95:fc:92:99:e9:91:6b:7d:02:14:ae:84:88:de:66:40:c9:
         0d:d4:3b:66:5e:a4:80:b1:b5:0c:ca:ec:43:ed:5b:b8:29:93:
         a4:8e:7b:b4:2d:79:5b:e0:11:37:d7:7f:bf:32:14:cc:a4:cc:
         64:ae:85:43:14:74:ff:4f:c6:26:6f:a2:10:d0:4a:93:68:46:
         6f:d7:6d:94:1c:08:57:80:b1:39:dd:61:30:e9:5c:ae:28:39:
         c8:24:24:96:ed:01:b7:cf:ee:b3:52:4b:fd:25:c0:63:2a:35:
         e2:39:67:a8:b4:23:83:1b:94:8b:38:ac:d5:89:4a:50:1a:1a:
         b5:63:16:48:ee:12:2c:b8:41:94:d9:51:3f:5a:a3:c6:31:c3:
         89:29:a7:d0:b5:13:87:ef:13:cb:51:54:43:cd:6a:20:10:51:
         b0:28:11:4b:e6:aa:89:f1:bc:05:e2:b4:a6:4b:09:65:7a:21:
         a9:fb:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----