Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS211411.roa
File:                     AS211411.roa (raw, json)
Hash identifier:          6eh603qsaAt4UlxaJIk9UcckdbgQKceLRtu67Z/zrKs=
Subject key identifier:   98:B3:B2:37:48:87:B0:84:47:3D:49:E4:8E:F5:24:2E:39:92:86:4E
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6924A587547E578D3772C5E4975D22DC13BD867D
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS211411.roa
Signing time:             Sat 08 Apr 2023 09:22:16 +0000
ROA not before:           Sat 08 Apr 2023 09:17:16 +0000
ROA not after:            Sat 06 Apr 2024 09:22:16 +0000
asID:                     211411
IP address blocks:        2a12:dd47:8060::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:24:a5:87:54:7e:57:8d:37:72:c5:e4:97:5d:22:dc:13:bd:86:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:16 2023 GMT
            Not After : Apr  6 09:22:16 2024 GMT
        Subject: CN=98B3B2374887B084473D49E48EF5242E3992864E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:63:b3:da:14:7a:49:ba:bd:06:2b:f9:5c:
                    5c:43:75:0f:bf:91:b0:f1:6b:77:88:1e:2c:08:da:
                    6a:3d:f6:73:cb:e1:2c:64:f0:11:24:ad:b5:36:1b:
                    aa:99:45:47:32:f2:e0:98:f4:12:42:d4:36:0f:d9:
                    6b:a4:9a:ee:c4:0a:f8:fd:7b:ac:54:ba:e8:37:8e:
                    81:7c:97:fb:dd:c6:5e:6d:c5:54:40:b9:40:1c:19:
                    44:6c:1a:15:34:51:f3:18:2e:19:a6:ee:8d:12:58:
                    0d:7f:f3:f4:29:7c:61:7d:75:2a:80:4a:51:1f:7b:
                    6a:d7:e3:c3:7d:71:32:a5:4a:34:77:f5:4c:b6:5a:
                    1b:7c:03:34:72:8c:ba:2b:2c:32:c1:29:ef:94:c9:
                    17:2c:be:8a:66:8c:b0:a5:e9:3f:26:46:af:61:fe:
                    13:7c:8a:8a:3b:04:a0:cd:0d:a7:0e:b6:b1:85:33:
                    fa:7e:08:98:85:d8:4f:25:60:f0:ac:06:65:64:37:
                    a3:a0:bb:94:24:c0:22:17:0f:0d:ae:c8:28:d4:b8:
                    4a:0a:2f:2e:f6:6b:e0:d3:f4:00:15:92:eb:f8:27:
                    10:ce:15:6c:a8:bd:fb:7d:87:4c:ff:87:e8:f3:42:
                    68:2c:e0:6d:37:80:72:f4:d8:9c:11:a5:f8:14:71:
                    68:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B3:B2:37:48:87:B0:84:47:3D:49:E4:8E:F5:24:2E:39:92:86:4E
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS211411.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8060::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:9b:d9:f5:c1:51:2a:60:a6:8f:2e:13:a3:12:eb:bb:ed:e3:
         68:86:f3:39:fa:88:0e:69:1a:da:48:3a:4c:3a:bb:46:aa:c8:
         e3:ba:1a:bc:44:26:a8:5a:a6:40:8a:0a:b6:75:dc:3f:83:37:
         d7:fa:62:3f:62:e7:6f:bf:c5:7d:62:c8:1e:8b:e3:34:ec:ef:
         33:7b:87:49:c9:19:7e:bd:44:9f:09:0d:e3:5d:a0:9c:50:d4:
         84:af:d2:0d:34:5f:dc:00:78:e5:8f:89:bb:ac:75:37:c5:9a:
         98:70:49:4e:a0:79:0d:47:86:4b:76:07:32:46:16:3a:33:e3:
         42:4c:e5:7a:d0:ce:c5:87:bf:ce:1b:33:aa:c1:03:3a:7c:d2:
         89:2e:ab:cc:f3:b1:ea:36:66:dd:d4:aa:d2:69:5e:82:d7:80:
         23:33:02:25:f7:82:94:32:c9:ed:b0:5e:59:46:5f:ff:92:f6:
         70:7e:df:cd:b5:bb:49:f6:0e:39:4a:99:de:93:09:0d:9e:2d:
         5a:d1:5b:b0:16:fd:c9:42:d2:85:3e:3a:19:03:3b:ee:cf:3d:
         4b:1b:42:79:8d:7f:92:9a:bf:6d:df:59:0d:e4:3d:d1:71:8d:
         85:69:3f:99:6a:75:f5:77:71:e7:44:58:11:9c:d3:6d:91:60:
         fe:42:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----