Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS207731.roa
File:                     AS207731.roa (raw, json)
Hash identifier:          0Br5YprCmNkrEh/meSkxCh6u9LG09TVFTMMnyyhbNcw=
Subject key identifier:   7E:DE:A4:D0:50:3F:01:4F:A2:44:06:B6:44:B8:25:97:8C:D9:28:63
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       303A546F137F634A9691A5B0FC069F2549E4D499
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS207731.roa
Signing time:             Sat 08 Apr 2023 09:22:12 +0000
ROA not before:           Sat 08 Apr 2023 09:17:12 +0000
ROA not after:            Sat 06 Apr 2024 09:22:12 +0000
asID:                     207731
IP address blocks:        2a12:dd47:816c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3a:54:6f:13:7f:63:4a:96:91:a5:b0:fc:06:9f:25:49:e4:d4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:12 2023 GMT
            Not After : Apr  6 09:22:12 2024 GMT
        Subject: CN=7EDEA4D0503F014FA24406B644B825978CD92863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:e8:f8:33:a2:12:d8:b4:da:3c:11:8e:84:
                    d9:58:04:fe:1f:1b:6c:8e:0c:fc:08:4d:3d:a4:61:
                    aa:a0:a1:cc:e1:0d:8f:87:b7:86:d4:ce:b5:eb:d1:
                    99:33:25:52:cf:26:6e:07:53:5e:71:c5:4c:5f:b6:
                    f8:e6:87:57:f9:e0:78:b5:4a:7c:eb:b7:b3:12:88:
                    4d:ed:dc:ec:d5:b4:e5:25:c0:ab:37:4a:eb:53:4c:
                    26:5e:6d:ed:0d:da:fe:cd:0f:55:1b:41:46:3c:f6:
                    16:47:d3:13:ee:82:9d:92:ec:5a:b5:b1:f2:f9:f1:
                    61:f6:c9:fa:ec:70:0c:66:8f:3b:0c:12:e3:5c:8b:
                    c9:7a:5b:ef:f5:ef:39:29:a2:60:a5:59:c9:1c:f5:
                    28:b6:b2:32:13:91:18:bd:01:1c:83:07:ba:8a:05:
                    f7:1b:d9:2d:77:c7:fe:26:b7:a8:d9:86:a1:5d:c8:
                    7b:21:03:60:fc:cf:b6:91:84:7e:94:70:c5:26:86:
                    08:ce:c2:43:36:d7:15:d2:c3:09:34:8d:25:d4:89:
                    fd:8b:51:79:f9:e2:ee:ba:d7:47:3c:11:ab:45:d6:
                    73:48:9e:54:4e:b7:03:b6:de:f2:a6:47:98:c4:14:
                    77:db:6e:4f:7b:c8:ab:71:1b:d9:a4:9b:bb:c2:d9:
                    be:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DE:A4:D0:50:3F:01:4F:A2:44:06:B6:44:B8:25:97:8C:D9:28:63
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS207731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:8b:2b:7c:dc:9d:0c:13:3f:1b:2b:a1:72:df:3c:ee:6e:
         af:46:fc:e9:24:89:9c:37:4b:14:8e:c1:25:2b:63:b1:80:71:
         7c:c3:cf:77:52:b7:d0:ce:1b:91:81:2a:5f:73:84:d8:52:72:
         9f:0f:29:de:e3:b3:70:3c:a5:d7:22:ad:66:87:d2:b2:80:27:
         b8:23:a2:64:3a:ba:29:46:17:ca:92:70:3d:cd:85:b6:3d:4d:
         26:eb:d9:2b:93:36:9f:06:94:d1:dc:a4:6e:dc:33:74:f4:d8:
         45:14:96:7b:28:f7:ab:ac:ee:e2:dd:e5:d9:b3:91:98:93:13:
         9b:de:52:71:76:2f:64:6d:9d:8a:20:a2:9b:2c:d6:04:f1:68:
         9a:c4:fd:fa:5a:06:f4:af:2c:86:7f:b9:e7:52:b9:b8:28:12:
         6c:15:1e:3c:ba:bf:bc:37:87:d1:82:82:e6:3d:b6:a2:89:62:
         1b:22:0d:c1:fe:21:06:96:2c:ff:bf:d7:38:b2:c4:4d:b9:11:
         db:0b:83:fe:03:29:e8:d6:0f:68:a9:a4:8b:06:a7:37:48:2e:
         ef:1f:18:5f:ca:63:23:29:bb:73:b2:b6:c6:1a:fe:1d:82:9f:
         89:5f:09:93:ed:3a:fe:56:e6:8d:78:fa:1a:0e:c1:21:4e:1d:
         9c:3b:39:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----