Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS210562.roa
File:                     AS210562.roa (raw, json)
Hash identifier:          o8quRnQ+s5ILCIL05mKIOrDskyZCKOjUooN4TmZQM7Y=
Subject key identifier:   91:B5:AD:5F:52:BB:37:E4:F4:5D:CD:49:FA:5A:89:DD:85:C0:CD:C5
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       203EA7425CE217BB4C0D20959A25C7E0624DF90B
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS210562.roa
Signing time:             Sat 08 Apr 2023 09:22:20 +0000
ROA not before:           Sat 08 Apr 2023 09:17:20 +0000
ROA not after:            Sat 06 Apr 2024 09:22:20 +0000
asID:                     210562
IP address blocks:        2a12:dd47:df30::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3e:a7:42:5c:e2:17:bb:4c:0d:20:95:9a:25:c7:e0:62:4d:f9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:20 2023 GMT
            Not After : Apr  6 09:22:20 2024 GMT
        Subject: CN=91B5AD5F52BB37E4F45DCD49FA5A89DD85C0CDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:51:f2:23:ef:00:24:9c:6b:38:85:9a:87:
                    a5:d1:f1:69:ad:7c:0b:ed:00:5c:cc:44:91:22:44:
                    06:d8:8d:ce:bb:fe:9b:f1:1c:05:59:8a:19:b1:05:
                    d7:37:e6:c9:8f:7c:33:62:a6:29:89:32:30:c2:20:
                    5f:6a:e7:61:21:c7:5c:55:a2:f2:bd:de:c4:35:d4:
                    a0:f7:12:7f:b7:78:a4:cf:8e:68:6c:7a:ce:fd:73:
                    2a:fa:99:07:1b:84:9c:8e:e3:00:e5:a4:5b:94:8f:
                    8c:a5:e4:af:65:7f:88:08:00:d0:fd:5e:2b:fc:4c:
                    7a:52:96:50:2d:df:5d:65:89:31:12:be:76:36:c9:
                    64:04:00:31:84:30:c9:e4:46:bd:b2:04:4d:65:83:
                    fd:13:40:6d:72:95:2f:ff:5b:cb:7c:e0:ae:62:7b:
                    85:a8:44:c3:fd:d9:bd:82:6b:61:dd:14:bd:3c:77:
                    4a:7a:67:e9:ed:55:0d:14:b9:0b:e6:8e:f1:73:f5:
                    59:a3:24:a1:e5:e2:68:f9:0b:7e:48:3c:90:bb:15:
                    9a:aa:6f:00:13:f8:04:fd:9b:84:60:34:b2:b7:ae:
                    4a:9b:77:6d:7c:43:2f:c9:d7:39:df:13:4c:65:e1:
                    fb:ca:e4:e3:bc:41:9e:a8:fd:7e:06:8b:4c:5a:d8:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B5:AD:5F:52:BB:37:E4:F4:5D:CD:49:FA:5A:89:DD:85:C0:CD:C5
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS210562.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:df30::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:cc:c3:59:e5:e5:1c:c9:be:37:14:05:1a:09:98:da:42:6a:
         1d:de:74:44:78:7d:67:1c:78:fa:c3:30:1d:59:18:a4:33:5d:
         50:75:92:48:40:82:30:e9:c1:b6:7c:84:3e:a3:56:4b:7d:5e:
         68:33:f2:c6:6f:e1:26:d3:a7:63:e0:fc:25:f6:7d:59:28:59:
         41:07:0b:c5:15:82:51:68:b6:a3:55:36:e9:df:52:ec:a0:80:
         43:65:2c:54:b5:8d:22:69:24:a1:58:76:45:6b:67:ca:10:41:
         9c:35:5e:69:3e:15:e8:e1:3e:96:1d:db:21:99:62:4b:89:80:
         e2:40:11:44:95:b4:27:8d:96:38:dd:bb:cb:9d:4a:0b:2a:c1:
         61:7d:60:ad:0f:b6:72:9b:27:e2:b0:bc:e2:ad:fa:98:09:20:
         fd:4d:74:c2:74:d4:61:51:32:24:82:84:6f:c8:6c:60:62:49:
         63:f7:cc:39:df:6d:86:69:a6:91:f1:a3:dc:18:fe:c1:1b:ce:
         5c:9a:dc:46:75:98:e2:75:72:1d:9b:6f:d8:80:22:7e:09:67:
         cf:cc:7d:41:0c:49:0b:92:04:cf:4c:a2:a0:d8:50:06:4b:11:
         72:47:d7:09:9e:40:6b:5d:0a:e0:be:ee:04:15:f2:27:b8:00:
         02:89:7d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----