Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS209652.roa
File:                     AS209652.roa (raw, json)
Hash identifier:          f6d3f9vJhxmZ6elcrBbCbMOXkQSRnl0IuNCqCsKdR6s=
Subject key identifier:   5C:E2:99:00:18:6F:00:A1:4F:0D:C1:F0:2A:93:BA:3C:35:94:7B:C0
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       4F45D85F253DC98CB16E1137091010066930F388
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS209652.roa
Signing time:             Sat 08 Apr 2023 09:22:17 +0000
ROA not before:           Sat 08 Apr 2023 09:17:17 +0000
ROA not after:            Sat 06 Apr 2024 09:22:17 +0000
asID:                     209652
IP address blocks:        2a12:dd47:83c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:45:d8:5f:25:3d:c9:8c:b1:6e:11:37:09:10:10:06:69:30:f3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:17 2023 GMT
            Not After : Apr  6 09:22:17 2024 GMT
        Subject: CN=5CE29900186F00A14F0DC1F02A93BA3C35947BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:1c:89:ff:8d:7a:e5:89:1b:3d:33:f6:8e:
                    e4:a4:8a:6a:81:45:3b:eb:82:eb:ae:93:83:bd:6d:
                    c3:90:18:99:da:d4:d2:27:72:da:bf:93:02:5c:a7:
                    49:cb:58:0d:6d:e6:72:94:fb:86:43:4a:58:40:74:
                    1a:6f:a1:9c:b0:d4:c9:16:17:62:47:f5:3c:a7:54:
                    3d:f9:06:00:b5:ca:30:8c:3c:aa:f3:9e:eb:2c:72:
                    18:42:66:2d:40:3e:70:78:9f:56:94:da:ee:24:07:
                    d3:c8:24:e6:e7:70:e0:c7:92:ce:b3:47:2a:2d:d6:
                    d0:8f:03:b8:33:4c:29:7f:50:0e:8b:c0:d3:13:5c:
                    bb:0c:22:03:ba:2c:6d:86:94:85:49:c2:49:bc:73:
                    b7:67:39:e3:2b:47:4f:9a:3f:a3:90:b2:04:d8:b0:
                    ba:82:ce:9b:88:db:05:b5:4c:6e:f8:6d:b0:2c:8c:
                    51:61:0c:ba:d9:ba:ac:0c:63:85:69:4b:60:40:74:
                    c2:7f:51:ad:09:ff:87:c4:0f:8a:a1:5d:8d:de:03:
                    bf:bc:68:a4:f4:9d:e3:15:61:94:43:2b:2e:34:31:
                    d9:77:27:3e:fb:c4:d6:a2:b8:6d:ba:89:50:0c:ba:
                    4f:10:94:76:36:14:51:8a:12:18:43:4e:31:d6:a3:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E2:99:00:18:6F:00:A1:4F:0D:C1:F0:2A:93:BA:3C:35:94:7B:C0
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS209652.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:ae:f4:08:c2:7f:98:75:b3:69:9f:d5:ec:04:0d:46:51:f0:
         e1:7d:5b:d5:71:c0:e6:80:2b:af:4e:98:6e:ca:b3:f2:64:d9:
         5b:00:6c:8b:48:53:6d:d5:fb:10:7a:75:2d:5f:67:b9:63:a0:
         f2:13:3f:b2:12:11:a9:d6:35:ba:2e:ac:43:24:4c:3c:63:f9:
         d6:4f:13:b3:ec:51:85:64:cb:e7:46:56:bc:dc:3b:f3:b5:30:
         1d:9d:ed:c8:57:17:1d:b3:b7:e0:75:0d:cd:fc:7b:0c:62:67:
         10:e6:a6:53:07:ab:a4:c5:84:c8:9d:ec:86:9c:ed:0e:25:af:
         92:bb:66:ae:6f:9d:32:98:17:ce:bb:b8:02:5f:94:dc:33:b0:
         5b:32:e8:12:6c:f6:6b:30:5d:ed:53:9e:ce:fc:96:42:d6:7e:
         39:9e:6a:24:b0:a1:2f:16:b5:84:bf:9c:33:37:b0:f3:3e:55:
         66:53:cd:08:b5:f6:5a:88:f3:59:f2:52:28:8a:0d:6b:c8:79:
         b2:55:94:2e:b2:77:0a:29:90:2f:23:8f:e3:ce:a5:f2:42:ff:
         e7:64:df:57:e7:29:d3:97:5b:c6:81:23:17:a5:4b:e8:8e:46:
         3c:76:5b:7f:ce:bb:4f:d9:c0:52:e6:4c:f3:6b:d4:12:ae:0f:
         d4:fa:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----