Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS210537.roa
File:                     AS210537.roa (raw, json)
Hash identifier:          UiMrza6lEGxXUGhs22tZKgm4snf1eolJ8G8lydU7RI0=
Subject key identifier:   06:A7:CA:E9:DF:71:0D:34:55:C4:9A:A3:62:E5:5C:D7:DC:14:3B:19
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       178CCE3BDE2CCB7D1B346C37007B1D008B000D72
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS210537.roa
Signing time:             Sat 08 Apr 2023 09:22:20 +0000
ROA not before:           Sat 08 Apr 2023 09:17:20 +0000
ROA not after:            Sat 06 Apr 2024 09:22:20 +0000
asID:                     210537
IP address blocks:        2a12:dd47:8070::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8c:ce:3b:de:2c:cb:7d:1b:34:6c:37:00:7b:1d:00:8b:00:0d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:20 2023 GMT
            Not After : Apr  6 09:22:20 2024 GMT
        Subject: CN=06A7CAE9DF710D3455C49AA362E55CD7DC143B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b0:78:97:c9:2e:74:4d:4e:80:c8:b9:65:87:
                    a2:e3:18:a9:93:34:f4:36:61:55:c3:9d:bd:00:b2:
                    ac:c2:97:68:fc:3b:70:51:86:18:80:9d:32:c5:57:
                    db:fc:26:e1:4e:e2:e4:69:81:c4:43:e5:ab:5d:bb:
                    43:4b:40:dc:1a:04:5f:d6:02:ed:07:24:09:d7:9b:
                    4d:ce:55:60:bf:1e:5b:5c:1b:d1:a3:91:7c:46:62:
                    45:3c:96:fd:76:09:92:6c:c3:bf:70:25:da:a9:17:
                    43:71:46:dd:e4:d3:13:18:d3:13:ff:d3:ac:9f:29:
                    a0:37:0e:58:d5:41:e9:09:7d:c3:c2:38:54:b6:c1:
                    c0:43:0b:c8:59:11:48:4a:fd:27:49:5c:9c:af:94:
                    61:b8:d2:5d:27:29:85:15:7d:73:8b:b7:0f:fa:d0:
                    3d:85:81:9d:19:7e:f9:5b:ef:f7:d7:e2:82:df:bf:
                    b1:2b:81:ca:8f:e6:3b:75:23:c9:86:1e:6b:6f:0b:
                    03:e8:fd:1d:8c:1f:e1:86:e3:98:07:08:1c:85:e5:
                    08:2a:2f:8b:9c:e0:4a:1a:29:cd:8b:23:c6:07:81:
                    9d:15:41:95:20:fa:81:30:4c:21:b6:75:db:1f:da:
                    13:3f:e2:f6:b8:51:36:9f:31:a8:7e:77:4e:03:c1:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A7:CA:E9:DF:71:0D:34:55:C4:9A:A3:62:E5:5C:D7:DC:14:3B:19
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS210537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8070::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:71:e0:72:62:47:78:0f:5f:b5:2a:34:28:4d:47:25:88:92:
         12:ac:81:be:40:17:54:8f:92:1c:09:f0:0c:34:d8:68:f8:92:
         4f:39:bf:e2:8c:95:f0:53:3e:65:ad:2d:73:0c:b5:92:13:0e:
         8b:ac:73:8a:ac:c0:59:41:4e:04:e9:53:55:6a:25:fe:9e:a3:
         5a:2f:19:f2:58:31:11:ec:d4:a1:a1:b5:af:da:9e:ef:2c:81:
         00:0e:f1:2d:c7:4a:95:a9:25:97:e5:76:4e:c5:6f:8d:4b:71:
         03:e9:d3:ba:1a:a7:57:34:8c:94:25:2d:72:e8:cf:c9:94:a8:
         64:4a:e3:66:95:80:dd:38:37:df:74:f0:2d:7d:6b:b0:75:3f:
         89:80:de:d1:63:5f:6e:90:9a:d1:99:fb:56:cb:07:70:05:14:
         86:be:be:29:fc:c2:db:dc:04:c3:1e:e8:19:ac:a7:6a:58:00:
         ab:25:06:52:5a:ac:f0:9f:8f:1a:2f:98:1a:88:95:f7:81:ac:
         95:07:37:ff:70:51:dc:e6:6e:0a:b4:5f:3b:e6:6e:b1:b1:22:
         8f:ff:f3:52:2d:fe:36:ed:03:d3:18:ba:30:bf:61:97:70:02:
         2e:40:f4:62:32:20:1d:df:6e:87:95:2c:d1:3b:1d:12:eb:a2:
         b8:3d:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----