Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS210912.roa
File:                     AS210912.roa (raw, json)
Hash identifier:          6JKnbO48XxgzsDVNESvMv6JoCUfWrsbX8ueUCQ1GHNc=
Subject key identifier:   71:53:D7:AC:6F:78:FE:11:7A:37:4C:32:6A:33:DB:A6:18:83:2E:EB
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1310CF3E4C5C870A231C69D8DBF69EB01B899A4F
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS210912.roa
Signing time:             Sat 08 Apr 2023 09:22:23 +0000
ROA not before:           Sat 08 Apr 2023 09:17:23 +0000
ROA not after:            Sat 06 Apr 2024 09:22:23 +0000
asID:                     210912
IP address blocks:        2a12:dd47:8e60::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:10:cf:3e:4c:5c:87:0a:23:1c:69:d8:db:f6:9e:b0:1b:89:9a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:23 2023 GMT
            Not After : Apr  6 09:22:23 2024 GMT
        Subject: CN=7153D7AC6F78FE117A374C326A33DBA618832EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:25:a4:ab:4e:b5:14:86:69:63:14:b4:a5:
                    aa:10:36:3f:86:bf:50:3b:9a:30:5c:df:c1:d7:cf:
                    cd:ef:55:7f:a3:ab:ba:2e:48:b7:1f:19:83:33:a3:
                    63:02:4d:40:67:f6:07:f4:b7:f0:3f:74:e7:9d:f7:
                    43:ec:df:e7:42:80:d2:fe:c3:68:aa:42:ed:51:40:
                    54:61:95:68:31:d8:8c:da:76:df:3c:37:b7:56:a2:
                    e5:f6:3c:1e:83:f6:69:d7:85:33:77:8a:cf:cd:39:
                    4f:42:fa:e6:f6:0b:8a:dc:c7:01:27:34:37:16:de:
                    7d:38:c0:31:e4:aa:d9:be:9e:86:91:bd:15:f3:99:
                    3a:97:39:88:1f:cd:8f:b1:fb:3e:83:97:a4:9a:1e:
                    a6:8c:98:f5:95:f0:15:a4:77:05:55:cc:5f:08:a8:
                    ff:84:43:ea:08:91:1e:3f:e9:19:74:9a:51:13:ba:
                    2d:a9:3d:71:57:58:a2:dc:15:9e:a5:ae:4d:0f:01:
                    a6:ea:55:94:a8:b0:5c:30:8b:3c:b0:f3:12:8b:8f:
                    80:81:ff:f5:a9:26:f2:87:3e:d4:03:14:a1:fa:2d:
                    e6:5a:81:3a:6e:06:9c:da:43:53:f6:43:9a:50:43:
                    01:f0:db:f5:03:b6:b6:70:ff:eb:00:76:82:f3:7b:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:53:D7:AC:6F:78:FE:11:7A:37:4C:32:6A:33:DB:A6:18:83:2E:EB
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS210912.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e60::/44

    Signature Algorithm: sha256WithRSAEncryption
         47:d7:3c:a7:f4:bb:ed:64:9f:25:33:72:7e:fd:6a:94:e6:44:
         8a:a3:96:9c:9f:c4:4d:ad:b4:9e:eb:b4:bc:03:24:8a:48:e1:
         eb:1c:32:6e:61:c5:9f:b4:0e:8d:0a:74:1f:6b:ae:8a:73:df:
         ad:dd:00:fe:16:79:d0:77:32:67:d9:36:23:ee:46:11:0a:ef:
         0c:37:f8:fe:85:b9:7d:a0:24:14:c9:a0:bc:bd:f4:7c:b3:08:
         0e:dc:03:41:d7:af:bf:07:3d:39:ec:86:c4:3e:2b:c8:f8:21:
         de:37:22:a2:da:f3:ee:9f:d6:b2:42:0f:6e:b2:de:b5:08:35:
         3d:30:65:ca:8a:a4:fc:87:b8:03:cc:8f:05:d9:25:97:71:08:
         c1:da:9d:25:76:16:a9:0f:85:df:47:1b:64:52:78:3e:c4:31:
         2f:94:90:29:2b:0d:26:b2:c3:1a:28:41:e8:dc:b2:2c:d8:cd:
         f7:1d:dd:f1:35:fa:b9:eb:b7:44:a7:28:7f:13:14:75:40:f8:
         8a:75:ed:09:97:7c:8f:b5:69:1e:af:74:46:b9:c8:4a:33:81:
         da:4d:14:3f:da:a8:c7:63:78:1b:fe:24:3c:09:e3:d2:4d:77:
         3d:20:c0:66:57:82:57:22:72:84:3a:56:28:ff:b1:1d:54:fa:
         26:17:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----