Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS208029.roa
File:                     AS208029.roa (raw, json)
Hash identifier:          7ttkTXf2Z8g/N1Julcwg/oBlO7unfnWCm0AN9wIaGVs=
Subject key identifier:   41:14:4C:FA:8D:C9:74:16:16:8A:4B:69:67:F3:83:A6:88:E9:AC:89
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1ABBF2794691F672C6923CCC9D6AEBCC47535539
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS208029.roa
Signing time:             Sat 08 Apr 2023 09:22:23 +0000
ROA not before:           Sat 08 Apr 2023 09:17:23 +0000
ROA not after:            Sat 06 Apr 2024 09:22:23 +0000
asID:                     208029
IP address blocks:        2a12:dd47:8041::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bb:f2:79:46:91:f6:72:c6:92:3c:cc:9d:6a:eb:cc:47:53:55:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:23 2023 GMT
            Not After : Apr  6 09:22:23 2024 GMT
        Subject: CN=41144CFA8DC97416168A4B6967F383A688E9AC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5f:eb:1c:5e:74:a3:da:b4:ec:f5:53:4f:f3:
                    4e:91:f4:03:63:36:a5:04:65:b8:f0:3f:5c:6b:af:
                    14:db:78:cd:f7:59:38:8a:55:a0:f0:49:20:ac:cc:
                    e8:59:8a:2c:e0:76:94:a8:78:07:5e:ce:66:29:17:
                    7c:9f:ae:04:1d:25:e0:35:97:47:0e:b5:ed:07:e4:
                    7e:3a:25:68:b7:df:ce:e6:52:e4:3d:8f:98:33:40:
                    15:e3:ad:0c:1b:5f:a4:96:65:41:21:89:22:6f:c2:
                    0d:45:dd:9b:b6:e5:47:88:20:71:2c:9d:3e:90:6a:
                    7e:15:34:b0:41:0a:4f:5e:3b:8f:bf:ce:34:9c:3c:
                    5b:df:1a:39:a5:64:1f:a0:1e:84:93:3b:79:98:c8:
                    37:86:41:43:6d:86:ce:36:6f:55:8a:b1:bc:90:e9:
                    e2:f3:18:45:c1:9b:a5:c1:63:68:5b:df:46:c7:00:
                    3b:8b:27:30:0f:1d:14:8b:0a:4b:63:82:65:1e:d4:
                    32:fb:29:55:bc:90:ef:95:f7:42:25:52:9f:bc:2b:
                    f1:d9:d0:30:bc:f6:64:62:02:23:f7:12:cd:05:98:
                    94:d4:79:5c:73:3e:49:02:c5:50:5c:76:65:7f:b2:
                    0f:a0:3d:05:f9:b1:c6:e0:40:9d:36:70:61:51:15:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:14:4C:FA:8D:C9:74:16:16:8A:4B:69:67:F3:83:A6:88:E9:AC:89
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS208029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8041::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:15:8c:5a:e2:da:1d:22:8e:f8:3e:c9:fa:cc:08:1f:1c:04:
         4f:a4:e4:34:69:e8:30:df:09:9e:93:60:59:0d:78:2b:1c:55:
         08:4e:27:12:b2:20:2d:90:d5:dd:fc:05:89:f3:68:d6:c5:72:
         6e:97:e8:9a:4c:02:44:79:38:a5:8e:76:5f:2c:78:c7:b7:1c:
         99:0d:c2:81:95:eb:50:5f:5c:53:11:03:fd:aa:fc:7b:62:39:
         19:5a:c9:de:58:02:df:e3:e1:2a:0a:f1:ac:6a:c1:8a:a5:d7:
         90:f8:be:01:7d:8b:ce:e7:29:53:2e:9d:4e:d6:c5:f4:e9:be:
         90:7f:20:27:1f:79:c5:bc:89:23:45:54:92:a8:49:b2:f5:ef:
         c5:c6:7f:c1:aa:ca:53:9b:29:67:8f:f0:56:1d:3c:e8:51:dd:
         92:2c:92:0b:30:2b:b8:7b:41:ef:9e:de:c0:d5:ac:9e:22:5d:
         c8:4a:32:c3:89:2e:17:c2:81:b2:a1:c3:3f:de:a4:c2:49:4e:
         7f:ca:71:3a:9d:8f:81:6c:7b:99:02:d0:eb:e4:71:b6:6d:a9:
         ab:4b:43:4e:6c:4a:6c:aa:87:94:7a:0c:45:c1:d5:20:81:48:
         ea:43:93:37:28:62:31:17:2f:39:53:ae:70:f8:12:0a:5b:26:
         1f:b7:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----