Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS207941.roa
File:                     AS207941.roa (raw, json)
Hash identifier:          rVcgtLSNjOji/6SUh6Ebd60mu7a7VfNknFsBPjlr8WY=
Subject key identifier:   0F:DB:E7:8D:A3:95:24:A5:AD:AA:DB:2D:57:E1:DB:D3:D8:BB:B1:06
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       011CE425F631452F292829FCB3ABD41FEEF5C501
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS207941.roa
Signing time:             Sat 08 Apr 2023 09:22:14 +0000
ROA not before:           Sat 08 Apr 2023 09:17:14 +0000
ROA not after:            Sat 06 Apr 2024 09:22:14 +0000
asID:                     207941
IP address blocks:        2a12:dd47:8005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1c:e4:25:f6:31:45:2f:29:28:29:fc:b3:ab:d4:1f:ee:f5:c5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:14 2023 GMT
            Not After : Apr  6 09:22:14 2024 GMT
        Subject: CN=0FDBE78DA39524A5ADAADB2D57E1DBD3D8BBB106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:4d:85:f6:92:6f:4b:be:86:02:d8:ed:0b:
                    51:55:30:62:80:2b:35:71:46:09:8f:9b:90:fa:7d:
                    77:0b:d2:4b:2f:e7:c2:cc:c4:5d:eb:3b:21:e2:b7:
                    dd:31:17:9f:88:1a:f1:8d:89:ce:9f:ab:ef:e1:93:
                    2d:df:5f:81:53:b5:b8:85:9a:b0:77:b4:6e:56:41:
                    7f:4c:f3:81:66:e0:25:9c:15:39:5e:15:89:69:92:
                    4d:25:72:3a:eb:89:bf:b1:97:a1:95:64:be:55:e6:
                    7e:41:58:80:80:d1:ba:4a:17:48:89:ee:15:b4:70:
                    5f:13:b1:00:68:6c:ad:51:85:23:de:e4:ca:40:12:
                    48:1a:81:cc:6f:25:34:57:7e:d4:03:f7:5d:fc:0f:
                    10:0a:07:04:9d:0c:25:ed:76:80:05:0a:05:28:3a:
                    5e:23:f6:e3:9d:eb:45:4d:bd:b2:42:0d:3c:7a:dd:
                    d3:39:bf:b9:b9:d2:cc:94:5f:30:92:80:65:f4:3a:
                    98:60:9b:23:cb:f3:ec:05:1a:da:67:79:88:3a:8f:
                    92:02:7c:17:77:62:76:29:b4:d4:66:dc:b9:75:55:
                    15:ac:b0:70:3b:20:50:64:36:8f:64:e9:0e:2e:05:
                    0a:ce:2d:24:1e:4c:ca:d0:4f:6e:12:e8:5a:9b:9d:
                    d8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DB:E7:8D:A3:95:24:A5:AD:AA:DB:2D:57:E1:DB:D3:D8:BB:B1:06
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS207941.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:d8:99:0b:33:90:1f:71:a5:0b:5f:84:c7:04:14:1b:7f:
         30:ee:f8:c1:0f:5d:37:77:1e:61:88:54:9d:9f:f2:6c:dd:9c:
         3f:8c:40:31:56:b6:8e:fa:3a:45:13:78:8b:57:3e:1a:a1:3f:
         a6:7d:9d:fe:61:a3:24:55:6d:c0:25:e1:ab:d9:12:9d:3e:97:
         67:a7:92:71:04:dc:68:e0:35:6d:e8:b8:14:af:a4:e2:4e:9e:
         ab:cb:52:c9:34:e8:1b:c6:fb:dc:b0:27:39:58:d6:bf:7a:44:
         67:1a:a8:e9:f0:af:fe:aa:8e:80:31:72:01:6e:8a:a4:e5:9d:
         d1:69:f1:69:7c:d3:c3:d2:2f:15:84:1f:a2:56:ed:d6:66:b2:
         05:55:6e:03:f2:44:50:98:c5:ee:17:43:1d:25:20:e4:58:6b:
         c2:e2:27:ee:7e:2a:35:29:45:f1:29:16:9e:58:23:78:a7:a2:
         49:52:36:fd:f0:1a:ce:e4:95:5d:98:1b:6d:97:47:41:0b:a6:
         4c:5b:bd:65:75:7b:44:09:b5:e1:c7:cd:75:69:3b:f1:15:a8:
         cc:79:e0:86:5b:f8:32:fe:bf:51:a1:1f:15:05:04:f3:71:a5:
         f5:c2:d4:fa:8d:e9:b3:ee:33:53:e0:b4:8d:75:be:35:da:3f:
         f0:ee:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----