Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS209391.roa
File:                     AS209391.roa (raw, json)
Hash identifier:          ngI+BqLf7iPxKzzqj+8c0YrGvauVk40Tjvq49IqipNs=
Subject key identifier:   7C:33:03:9A:7D:0D:15:D4:AD:DA:5F:49:F7:BB:A5:7A:E6:05:BA:4C
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1705C822606B1B2F31590E99FA5C72D69849D46D
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS209391.roa
Signing time:             Sat 08 Apr 2023 09:22:10 +0000
ROA not before:           Sat 08 Apr 2023 09:17:10 +0000
ROA not after:            Sat 06 Apr 2024 09:22:10 +0000
asID:                     209391
IP address blocks:        2a12:dd47:8e40::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:05:c8:22:60:6b:1b:2f:31:59:0e:99:fa:5c:72:d6:98:49:d4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:10 2023 GMT
            Not After : Apr  6 09:22:10 2024 GMT
        Subject: CN=7C33039A7D0D15D4ADDA5F49F7BBA57AE605BA4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:ff:56:77:e7:f6:8b:da:c5:49:10:77:84:
                    a2:10:0d:85:71:92:f4:9a:10:6a:f4:b8:6d:07:2d:
                    01:b7:0d:0d:65:35:36:20:89:cd:07:9b:1f:58:6e:
                    43:a0:18:f3:ca:fd:c7:94:db:71:08:e9:de:b7:d1:
                    ad:20:7a:16:70:41:b2:a8:4a:4b:a0:83:bb:18:45:
                    a1:87:b7:14:a6:3b:7f:31:7c:94:ad:da:32:f4:b3:
                    7c:0e:71:e9:fe:d6:5a:2f:17:72:bc:d1:0c:7a:4b:
                    f4:65:62:bc:27:8c:91:15:0d:fc:ce:fc:7a:6d:09:
                    04:4b:f5:88:36:ab:f1:c3:a3:8b:da:d6:00:ae:af:
                    c6:b1:f5:39:db:46:8b:6e:24:8f:ca:b3:0d:b8:3d:
                    75:db:a4:45:7b:b4:41:b9:ad:ed:79:51:bd:39:03:
                    a0:ae:6e:b6:01:78:21:3a:e9:05:71:24:ee:10:e2:
                    38:86:05:c2:d7:47:b0:de:c5:51:dc:de:96:98:2e:
                    c5:f0:41:68:0a:44:27:bc:b6:82:9a:d4:d4:d2:8a:
                    22:fa:23:2b:2d:37:7c:ac:73:45:cf:14:38:b3:cc:
                    b5:1d:db:aa:bc:6c:fa:bf:c7:61:3c:c4:b5:08:95:
                    89:b2:f0:8c:26:d4:b5:60:ee:4a:90:f7:11:97:50:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:33:03:9A:7D:0D:15:D4:AD:DA:5F:49:F7:BB:A5:7A:E6:05:BA:4C
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS209391.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e40::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:7a:6e:c7:d7:52:d7:23:d7:5b:ab:b8:7b:59:a1:29:a2:95:
         76:96:1c:83:f3:ec:56:e8:60:81:aa:9f:9c:c1:25:a6:5e:4c:
         d1:d3:54:2f:e2:97:85:66:5a:8f:0c:13:2c:d0:3e:0f:88:cc:
         ea:8f:4b:14:ab:41:41:91:2d:7c:77:7e:4e:bf:92:7a:5e:9b:
         fd:9d:07:18:09:97:e9:e3:51:c8:6a:57:ee:3f:c5:69:05:80:
         90:b0:d2:e5:84:f8:8c:19:a7:89:20:45:f5:ca:3e:a0:8b:bf:
         83:c9:ec:1a:1f:a1:77:ee:0e:90:10:d2:1b:6e:cd:ac:24:88:
         80:59:a0:33:1f:d2:35:78:62:d7:6f:93:e8:79:2a:e4:a9:f5:
         b6:0d:af:98:aa:90:53:7f:b5:65:b5:a7:93:63:8b:53:22:e8:
         83:42:f4:45:54:8e:d4:a2:23:61:4e:2a:f6:4e:6f:ac:a0:c2:
         9b:c9:e7:a5:15:87:6c:11:f5:54:b8:8a:a9:da:d9:d0:2d:b1:
         c3:a3:87:75:26:dc:87:f6:95:ff:54:6a:1e:e6:e0:5a:ed:dd:
         09:df:27:8a:a4:bf:ac:18:6f:34:46:91:20:bf:5a:4e:ea:b0:
         5b:3a:c2:d2:a1:df:90:7a:e9:5e:d4:51:46:94:5e:d3:7f:8f:
         16:bf:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----