Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS210152.roa
File:                     AS210152.roa (raw, json)
Hash identifier:          kGsYzsBJUQ9f1slYHRozL+2wl+ruPj9WePlNfzmCYwI=
Subject key identifier:   B0:83:6F:0F:FE:69:AE:13:00:48:75:89:D9:F6:2F:AF:12:D8:F0:C5
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       041023705D004FF1731B821412134996571E594A
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS210152.roa
Signing time:             Sat 08 Apr 2023 09:22:18 +0000
ROA not before:           Sat 08 Apr 2023 09:17:18 +0000
ROA not after:            Sat 06 Apr 2024 09:22:18 +0000
asID:                     210152
IP address blocks:        2a12:dd47:8020::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:10:23:70:5d:00:4f:f1:73:1b:82:14:12:13:49:96:57:1e:59:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:18 2023 GMT
            Not After : Apr  6 09:22:18 2024 GMT
        Subject: CN=B0836F0FFE69AE1300487589D9F62FAF12D8F0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:47:3d:31:78:70:c5:a4:18:ca:df:d4:0d:
                    a7:ab:5e:47:ec:2b:17:18:d5:2f:44:7d:1e:95:e4:
                    0c:66:b6:92:b1:8d:74:33:58:d0:d3:14:38:69:86:
                    1d:71:9d:8a:9c:75:87:5e:d0:dc:86:69:6c:6f:ff:
                    c4:0b:6d:f4:24:b3:f6:7f:13:1a:0a:d1:58:49:c4:
                    36:49:40:e6:9c:6e:e3:28:56:f9:1a:eb:fe:df:49:
                    ff:b6:60:01:6d:65:b4:14:fa:74:d5:6c:35:8d:ff:
                    3b:df:8d:49:01:b0:dd:a1:7d:4f:3c:50:0d:aa:67:
                    52:6c:cb:2e:d1:2e:14:48:b6:a0:3c:8f:2d:bb:5e:
                    d9:d3:0b:b9:2e:72:bb:13:ed:0a:6c:1b:a3:5e:43:
                    86:a1:68:1b:e7:87:a2:06:17:20:27:9d:d7:0a:49:
                    99:46:9b:6e:c5:8d:ac:10:c9:ee:c8:f5:4e:02:4f:
                    64:1c:74:7d:2a:5d:66:e3:9c:0a:9d:5b:f8:85:7a:
                    d6:a7:03:d7:3b:fa:11:ef:c1:e9:24:82:5c:69:f0:
                    f8:54:01:86:a4:40:da:3b:e5:4a:c1:47:70:5b:78:
                    28:56:72:78:ce:c6:e5:8f:45:fc:17:f7:2a:9a:96:
                    73:ab:c8:a4:49:e9:66:0d:4f:0b:c2:2c:6b:b9:05:
                    9b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:83:6F:0F:FE:69:AE:13:00:48:75:89:D9:F6:2F:AF:12:D8:F0:C5
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS210152.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8020::/45

    Signature Algorithm: sha256WithRSAEncryption
         1e:d9:79:1b:47:55:ca:59:04:f6:8a:c0:08:28:c0:af:69:f8:
         4e:c4:35:eb:68:38:80:33:9c:b8:14:74:93:af:19:53:43:d3:
         22:42:65:41:e3:dc:6a:36:77:62:5a:e9:e4:a1:97:cf:1a:4e:
         b0:63:56:93:01:ff:5f:69:35:6c:86:6a:d5:a8:c1:a1:6b:dd:
         36:f0:c8:e8:c5:cb:6d:76:fe:16:95:18:26:2b:5f:3f:cc:93:
         47:30:13:b2:5d:6a:84:87:35:54:54:8e:07:06:c9:50:aa:2d:
         1a:a6:b0:62:a5:d6:08:2e:59:e5:6d:e5:4d:b0:ab:c9:05:0f:
         35:29:71:b6:b7:d4:93:2a:0f:d3:c7:63:72:d1:63:1c:dd:58:
         5f:e7:c4:17:6c:f4:a9:5c:6f:f8:f6:b9:ad:7d:76:79:34:38:
         08:1e:dd:9c:8d:11:d2:75:b0:7e:a9:fd:29:f0:da:9f:91:bb:
         00:30:5f:28:05:42:82:c8:a5:e7:6c:69:e8:e9:fa:ce:05:16:
         1c:b2:c0:2e:db:ce:34:14:56:1f:b3:01:f1:d0:95:bb:ba:c6:
         e4:94:4e:bf:12:fd:bb:6a:31:65:e1:a0:28:18:51:46:bb:26:
         fb:be:1a:5d:5d:46:48:f3:b5:e8:2b:a9:c4:1d:01:64:1e:11:
         15:29:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----