Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS211358.roa
File:                     AS211358.roa (raw, json)
Hash identifier:          0Pq4N4J8GGOWXPsWUtnD3JpHQ+VOGgPBg1Psowx04EQ=
Subject key identifier:   25:2A:C9:DD:58:C4:37:D8:14:F0:2B:85:0A:0D:98:75:AC:93:25:81
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       593E4E8C3C0B77CE61BED52953BADDC437DD544B
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS211358.roa
Signing time:             Sat 08 Apr 2023 09:22:28 +0000
ROA not before:           Sat 08 Apr 2023 09:17:28 +0000
ROA not after:            Sat 06 Apr 2024 09:22:28 +0000
asID:                     211358
IP address blocks:        2a12:dd47:816a::/47 maxlen: 47
                          2a12:dd47:8e30::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3e:4e:8c:3c:0b:77:ce:61:be:d5:29:53:ba:dd:c4:37:dd:54:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:28 2023 GMT
            Not After : Apr  6 09:22:28 2024 GMT
        Subject: CN=252AC9DD58C437D814F02B850A0D9875AC932581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:1b:d3:25:9f:82:40:8f:67:24:5c:d2:e5:
                    aa:b2:4f:a1:be:c6:df:df:2f:e2:8c:3d:83:80:aa:
                    0a:b3:67:37:e0:ff:6c:d0:eb:ff:69:09:82:a1:14:
                    5a:87:94:87:be:97:bf:db:6e:3d:75:3c:ed:d4:ee:
                    ad:e4:3d:87:0d:d1:95:e8:de:ec:09:77:4a:7b:99:
                    27:e9:1a:9c:c0:d4:65:05:85:20:68:92:64:bb:f1:
                    c7:2f:bd:43:62:fa:3c:69:75:fe:c0:94:23:88:d9:
                    76:26:39:9e:20:77:57:a3:a9:98:d8:7f:b7:1a:09:
                    87:71:d7:9f:13:65:98:48:2a:ce:4e:fd:97:a5:d4:
                    0f:fb:9b:74:b1:d0:fb:19:ab:98:d3:56:df:eb:5c:
                    c1:db:28:01:1d:7c:f8:97:dc:43:3b:5a:29:ee:9b:
                    0c:b5:51:e7:a2:b4:3f:58:d6:fc:76:75:71:a8:f9:
                    81:9b:cd:c7:b8:90:d7:f7:cb:7b:9e:08:ff:59:f0:
                    ea:05:fb:d4:bf:35:d0:80:cc:f6:ae:fe:71:b6:e4:
                    20:c1:a1:e4:75:19:6d:e0:7d:c0:65:73:f0:06:f6:
                    86:38:52:2b:dd:45:18:1c:85:43:8f:5b:79:e1:ba:
                    b2:77:88:71:be:87:75:34:ea:4a:2c:a0:57:4d:3e:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2A:C9:DD:58:C4:37:D8:14:F0:2B:85:0A:0D:98:75:AC:93:25:81
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS211358.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816a::/47
                  2a12:dd47:8e30::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:97:cd:88:3a:08:49:13:03:cb:09:8b:6c:bb:93:50:bc:
         fc:56:5f:94:90:f8:15:36:d8:cd:da:0f:da:19:24:1a:77:10:
         dc:a1:30:60:3e:27:9e:8b:a5:cf:4b:b8:15:d4:c5:ce:23:71:
         0e:e3:12:4b:ec:f1:d3:f8:d8:87:36:cb:c4:70:b2:4f:2d:3b:
         66:6d:36:7e:01:e8:89:53:bb:32:63:77:a0:6c:1c:80:2f:bf:
         89:e5:c8:25:27:aa:fb:80:c1:23:45:1a:06:ec:0d:a0:8c:a2:
         b8:82:79:74:65:75:b3:f0:7f:1a:97:a7:fd:39:e8:74:38:8f:
         7b:ab:8c:10:3d:0f:01:ef:b5:b9:2b:07:6e:8d:e7:a7:bd:e2:
         aa:56:ca:ee:aa:ce:c5:27:fe:98:2f:4a:26:6b:04:48:b9:ba:
         43:aa:93:88:38:3e:4b:74:bb:85:4e:ae:c4:95:8c:70:96:f1:
         aa:c5:7e:5e:94:28:88:3e:7b:1a:29:1b:86:8d:52:ce:ba:06:
         18:dc:d5:dd:62:af:40:b5:92:d4:68:ea:b0:0d:f1:80:08:98:
         da:0c:88:c4:8c:c6:51:07:ee:8e:68:80:6d:2e:ff:37:b0:86:
         8c:cf:fc:fa:7d:c5:b4:9d:ea:28:62:3b:21:8a:f4:0d:e1:4d:
         31:98:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----