Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS208690.roa
File:                     AS208690.roa (raw, json)
Hash identifier:          hBASnWRqgijGepb7e8xUZeIQeJ8gmTa/PGYKhHQke5g=
Subject key identifier:   2D:35:4F:5E:79:A1:D9:07:36:BB:40:FA:0C:BD:DB:33:32:02:6A:04
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2782E3F5657E9C2702633AC59C2938525E646262
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS208690.roa
Signing time:             Sat 08 Apr 2023 09:22:15 +0000
ROA not before:           Sat 08 Apr 2023 09:17:15 +0000
ROA not after:            Sat 06 Apr 2024 09:22:15 +0000
asID:                     208690
IP address blocks:        2a12:dd47:fa00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:82:e3:f5:65:7e:9c:27:02:63:3a:c5:9c:29:38:52:5e:64:62:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:15 2023 GMT
            Not After : Apr  6 09:22:15 2024 GMT
        Subject: CN=2D354F5E79A1D90736BB40FA0CBDDB3332026A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:0c:70:c4:f6:e1:15:c5:95:10:f8:82:7f:
                    9b:d1:03:69:a3:32:b7:91:69:3c:5c:71:ba:5d:a4:
                    a9:8c:5d:a6:9a:ca:b4:ca:82:bf:81:74:9f:a9:21:
                    c8:1f:95:bc:5b:17:c7:a0:8c:0a:2e:7c:c7:16:96:
                    a6:c6:2a:aa:0a:17:a2:ea:a9:b7:44:56:9b:38:b0:
                    c6:0c:73:f4:cc:bc:58:31:1c:ac:d6:26:78:a6:62:
                    d8:09:5f:dc:7c:66:81:30:30:5b:a6:e9:bb:5d:04:
                    88:45:fd:66:de:9b:c4:93:6e:7c:16:ad:38:65:81:
                    8e:f4:a7:83:c4:c5:06:07:87:b7:46:f3:72:28:35:
                    0f:e1:82:51:74:f9:b4:f3:41:01:6e:29:23:ed:bd:
                    29:a8:22:d8:37:47:9c:79:7c:dd:08:61:56:8e:28:
                    bc:ed:40:a6:4c:9e:bb:bb:8d:63:66:4e:ac:2f:12:
                    a5:63:4e:34:cf:63:a7:e1:5f:90:36:dc:f8:38:e4:
                    bc:21:0c:01:6e:4f:d2:a2:07:d9:72:da:2c:e4:db:
                    31:d8:b3:24:2e:32:9c:04:cd:d8:f3:1b:13:98:cb:
                    69:97:b4:fd:b3:94:7a:72:c7:9d:1a:52:82:fc:13:
                    02:d4:c2:68:22:e3:55:0a:73:03:3c:d7:73:16:c1:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:35:4F:5E:79:A1:D9:07:36:BB:40:FA:0C:BD:DB:33:32:02:6A:04
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS208690.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:01:3b:81:26:53:03:55:26:e6:10:d9:bb:c4:4b:aa:f2:8d:
         37:9d:80:64:1f:c3:6c:f5:4a:82:63:8c:64:0c:26:ab:38:b2:
         16:c5:02:09:a8:47:30:b8:7d:34:4a:32:1c:c1:56:82:db:e1:
         69:a8:63:94:02:61:97:0c:f1:d8:31:ce:32:f1:d8:d5:10:dc:
         28:4b:78:c1:2c:82:32:35:f4:75:1c:70:bb:91:e8:54:a0:90:
         8e:e1:5c:cc:dd:2b:32:e7:f6:13:d6:df:f9:5b:48:4e:6c:18:
         99:30:27:82:0e:55:f3:b0:20:7c:5a:5c:e3:5f:34:1a:80:b0:
         6e:f7:11:2e:55:92:ef:a8:c7:6c:f6:2d:57:70:68:fd:00:d2:
         13:e8:2a:3f:af:19:f1:19:e8:13:01:d3:d9:d8:02:e8:91:bc:
         1b:43:69:e8:49:a0:55:dc:e1:6f:eb:1e:eb:21:34:2e:b6:33:
         15:44:7f:d9:bc:7b:29:3f:aa:2f:cb:1d:b1:29:00:20:8b:3e:
         94:67:14:55:07:1c:9f:51:95:01:3c:8a:ae:85:b0:8a:eb:c5:
         a0:35:3a:9b:0e:56:c0:02:73:b5:cc:05:c9:b2:1a:d3:23:4b:
         5b:a3:7b:65:be:ed:85:40:fc:a7:f0:df:18:12:2f:95:d9:6e:
         29:66:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----