Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS211233.roa
File:                     AS211233.roa (raw, json)
Hash identifier:          Pb2LHwpovyn8X7i9Y2OyNhfg7WR0OsS6koK2zKmTvEg=
Subject key identifier:   DF:EB:BD:FB:F0:FD:8A:1B:47:AA:5A:01:98:70:17:8D:30:36:96:D3
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       5DFAA4CF89FC41FB6680C7D33E45A35EF2312C55
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS211233.roa
Signing time:             Sat 08 Apr 2023 09:22:17 +0000
ROA not before:           Sat 08 Apr 2023 09:17:17 +0000
ROA not after:            Sat 06 Apr 2024 09:22:17 +0000
asID:                     211233
IP address blocks:        2a12:dd47:8050::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fa:a4:cf:89:fc:41:fb:66:80:c7:d3:3e:45:a3:5e:f2:31:2c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:17 2023 GMT
            Not After : Apr  6 09:22:17 2024 GMT
        Subject: CN=DFEBBDFBF0FD8A1B47AA5A019870178D303696D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:a9:85:4b:12:25:0f:08:ad:7a:a4:b7:bf:
                    2e:59:bb:21:f6:7e:5a:35:72:f1:e3:7b:aa:94:d1:
                    1f:ac:d7:ea:ad:85:1b:58:a6:96:88:e8:cd:81:1e:
                    37:cb:72:df:dd:fa:c7:90:a7:2d:9b:d7:37:d1:75:
                    c7:0b:19:a2:3b:39:2f:78:19:08:4b:99:e4:83:dd:
                    6c:e0:07:b7:a2:dc:db:da:cd:16:27:f3:c5:fc:60:
                    7e:41:78:59:c6:5e:bc:ab:b9:e5:cc:12:71:e0:a0:
                    5d:40:ec:fb:a6:7e:0f:2b:2c:15:b4:7b:d4:c2:bc:
                    e5:02:52:d9:83:1c:65:ee:90:be:4c:31:53:ad:ce:
                    82:9a:2e:77:31:5f:48:61:cc:f7:0b:c1:63:52:3a:
                    d0:cb:aa:73:2f:27:e8:4f:c0:c4:56:5b:61:c8:db:
                    0c:59:46:13:36:4c:65:18:1b:98:b3:7f:3d:3a:b7:
                    ad:58:c1:22:36:29:75:d7:e3:34:b9:52:18:3d:a3:
                    01:54:4f:69:10:64:a1:a9:07:10:0f:80:f2:05:69:
                    3c:1a:19:77:8c:c5:07:91:97:8e:0a:16:6e:46:4f:
                    f6:b9:9b:ae:40:1e:e2:74:f1:54:32:d9:f2:d8:9a:
                    4a:4b:4e:35:50:a3:eb:39:63:4e:79:22:be:29:81:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EB:BD:FB:F0:FD:8A:1B:47:AA:5A:01:98:70:17:8D:30:36:96:D3
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS211233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8050::/44

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:cf:39:e3:2e:ed:7d:03:c0:a8:40:b3:57:06:2c:a9:44:
         21:be:31:ab:fc:71:f9:bf:8e:05:02:88:ce:fa:09:a7:c2:53:
         be:93:fa:b2:67:08:28:d0:7b:92:79:a3:43:9e:d0:11:10:af:
         9b:5a:ee:62:7f:f3:20:f7:9c:30:0b:de:50:4a:58:12:fd:9d:
         77:4f:06:49:3e:99:7b:e8:e8:11:af:e6:b9:61:0f:57:49:23:
         69:c4:89:19:71:e1:ab:8e:33:75:30:dc:b4:04:5c:a2:00:ba:
         2a:51:a7:88:90:a3:62:6c:47:23:fa:5b:d9:a3:55:fd:cf:a0:
         e8:a2:d1:8c:10:09:fe:9a:31:0b:2e:7d:c5:fc:5c:72:65:5e:
         48:41:f0:b1:c5:b9:4c:f2:28:79:dd:6b:f7:1f:c7:5b:d8:e3:
         0d:d1:1e:f3:27:03:3a:a8:1d:84:2c:c7:11:58:ed:85:88:65:
         9b:0b:01:61:74:ca:64:06:3a:05:8f:be:99:b3:36:34:55:9f:
         d4:5c:a5:6d:77:55:76:17:a4:65:48:f1:d0:4a:ba:60:0a:7b:
         a3:f4:01:21:02:ea:7d:76:b7:19:04:42:9e:49:e3:85:b3:22:
         8c:43:5b:16:13:fe:3d:c9:34:28:fa:51:81:d1:b5:93:11:7f:
         2a:64:0a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----