Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS210445.roa
File:                     AS210445.roa (raw, json)
Hash identifier:          3KXvPO5QLoREOW3nHQVTtrkdERogSFwlTWt4wPdBbms=
Subject key identifier:   F8:CB:D4:FF:4B:AB:7A:FF:06:A7:FB:49:FE:49:DA:64:75:F6:C1:65
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3FDEB70232B806383E6D600265E2D0DD30014040
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS210445.roa
Signing time:             Sat 08 Apr 2023 09:22:09 +0000
ROA not before:           Sat 08 Apr 2023 09:17:09 +0000
ROA not after:            Sat 06 Apr 2024 09:22:09 +0000
asID:                     210445
IP address blocks:        2a12:dd47:804d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:de:b7:02:32:b8:06:38:3e:6d:60:02:65:e2:d0:dd:30:01:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:09 2023 GMT
            Not After : Apr  6 09:22:09 2024 GMT
        Subject: CN=F8CBD4FF4BAB7AFF06A7FB49FE49DA6475F6C165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:59:a3:0d:a6:5b:fc:3e:cf:26:2d:69:28:
                    f9:d4:0c:57:8b:73:37:37:d1:84:ab:82:8a:76:1e:
                    af:3b:56:b9:dd:8d:8f:27:55:b3:ca:1e:89:08:12:
                    ca:14:be:f9:e5:49:a4:49:49:45:ea:1e:47:e4:2f:
                    73:5f:45:cf:22:b7:a0:9c:98:6e:c5:29:30:f8:fb:
                    3e:31:a4:e3:b5:61:59:fb:39:19:d2:4f:bc:e7:b9:
                    f5:ab:02:fe:08:3f:3e:54:af:2e:9b:0d:b8:89:04:
                    ff:d2:90:a8:ab:0d:30:03:ed:d1:64:48:28:43:01:
                    2b:53:3e:4b:7e:ec:b4:73:cd:1d:43:50:ce:af:22:
                    5d:6d:90:5c:b7:ca:23:6d:90:80:3b:65:0b:ee:c4:
                    6e:3f:12:48:f5:d9:98:69:ad:34:b6:18:b1:39:48:
                    c4:39:d1:6e:22:7e:cb:ba:dc:90:52:e6:df:d3:4c:
                    f5:67:00:f0:1d:83:4e:20:d3:f8:7e:1c:72:0d:2b:
                    69:f1:63:ad:64:12:6d:4b:2f:0c:0b:5a:94:30:73:
                    55:c5:aa:0b:0d:eb:84:5d:64:ef:60:5d:1d:e0:4f:
                    49:70:7b:be:e2:77:84:da:a5:e1:70:51:c3:55:46:
                    86:f6:18:b2:a6:65:c8:14:be:a5:51:5f:f9:cb:62:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CB:D4:FF:4B:AB:7A:FF:06:A7:FB:49:FE:49:DA:64:75:F6:C1:65
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS210445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804d::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:a9:c6:fd:49:29:72:3d:38:4d:99:0e:ee:57:97:ee:56:cd:
         f4:3a:e7:e6:a9:a7:f9:5f:b7:b5:25:96:50:47:c6:51:1a:32:
         3c:be:a9:f9:1a:40:aa:75:e1:23:cd:34:d4:60:d9:e2:4a:9b:
         18:a9:5e:9c:87:30:46:c8:ff:62:f1:ea:32:47:8d:0c:ff:9e:
         77:4f:11:b8:d2:db:da:f1:bc:5c:7d:72:70:0a:6d:5e:b1:dd:
         19:9e:0b:d3:31:c1:46:9c:e8:3b:55:4c:a3:c9:4a:23:bc:22:
         fb:e6:91:21:34:1c:86:81:f1:ca:0a:3a:76:a1:27:10:ad:e0:
         ff:1f:ee:24:54:b0:3c:a9:dc:52:d7:02:1b:7c:79:a7:f2:95:
         08:72:c6:79:90:03:04:0a:e7:33:a4:b6:bb:23:ee:56:9e:92:
         0c:79:1c:93:41:71:eb:99:55:67:62:e6:28:75:d2:b7:1c:6d:
         d2:cd:c2:9f:28:07:e2:e0:79:2f:17:3b:6c:6e:62:c8:57:8b:
         c1:a4:e4:5c:45:40:fc:09:5c:db:07:9c:02:cb:23:79:35:06:
         20:53:01:68:22:9c:f0:80:b3:45:e8:7c:19:d0:79:1b:3b:24:
         b9:20:25:8f:d2:17:6c:b1:09:02:8d:8b:f2:9b:cd:e3:f6:26:
         84:c0:25:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----