Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS211431.roa
File:                     AS211431.roa (raw, json)
Hash identifier:          qeITN3W5/y3e+jRBcmza8zYU6LK13MH0ET06eCh4+UU=
Subject key identifier:   A6:80:26:5F:AA:D1:67:3D:89:5A:11:B1:40:06:85:EC:35:EE:A3:9F
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6E8CBC1C2CB84BCD613711EA2377AA8D4E1E7EC1
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS211431.roa
Signing time:             Sat 08 Apr 2023 09:22:19 +0000
ROA not before:           Sat 08 Apr 2023 09:17:19 +0000
ROA not after:            Sat 06 Apr 2024 09:22:19 +0000
asID:                     211431
IP address blocks:        2a12:dd47:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8c:bc:1c:2c:b8:4b:cd:61:37:11:ea:23:77:aa:8d:4e:1e:7e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:19 2023 GMT
            Not After : Apr  6 09:22:19 2024 GMT
        Subject: CN=A680265FAAD1673D895A11B1400685EC35EEA39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:58:93:5e:5a:71:3b:dd:7b:22:cf:c7:39:5e:
                    26:cd:80:47:cf:dd:69:12:08:08:a8:d9:09:cc:a1:
                    19:5e:a0:35:1c:77:c5:6f:9b:a4:71:3d:7f:42:a5:
                    b9:1c:c1:97:a2:d4:f5:d9:04:bc:38:a3:4a:6d:f4:
                    03:36:e2:63:af:f8:5e:f4:03:7b:42:58:ce:9e:f8:
                    10:6b:d3:df:5f:cd:4e:90:34:78:4f:5a:90:f3:ee:
                    b1:d3:6d:d6:65:33:5a:73:d9:d1:ff:d2:4c:cc:38:
                    50:ff:79:8a:44:7f:6e:5b:58:c3:79:db:2d:31:a3:
                    25:7f:56:a5:8b:97:4b:5f:e8:10:5c:d1:32:ee:cf:
                    bd:a4:99:0e:39:4f:32:b7:59:b2:ff:e6:90:78:c4:
                    47:78:47:4f:72:ae:65:09:99:75:75:98:b0:75:2e:
                    e9:ae:91:19:57:7d:48:6b:ee:91:b9:3d:3c:06:22:
                    e3:2e:c4:14:92:75:03:ff:53:6e:40:3b:cf:f8:3e:
                    5b:a5:48:06:5c:e2:ec:99:45:1e:5d:0d:e3:87:f8:
                    96:96:ce:8c:ce:06:77:1a:4b:66:aa:26:92:f2:45:
                    17:55:7b:9a:d5:bd:1c:f3:aa:5b:53:2b:da:bf:7a:
                    d1:68:62:f6:3b:89:9e:81:1e:76:c0:97:35:8b:9f:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:80:26:5F:AA:D1:67:3D:89:5A:11:B1:40:06:85:EC:35:EE:A3:9F
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS211431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:2c:84:39:c5:0d:91:73:66:a1:8f:81:30:c4:6b:49:62:0a:
         0d:f0:43:9f:db:ea:1d:70:e8:d2:82:70:49:ec:fc:b7:6c:1d:
         ee:c8:61:5d:a6:70:aa:5b:b6:85:4a:e6:a6:46:fe:95:dc:da:
         23:79:39:15:5d:a0:e7:8d:8c:c5:84:2a:af:57:2d:68:cd:32:
         65:ac:5c:25:86:85:81:2a:54:af:28:dc:e1:60:e2:95:e4:9e:
         27:88:a5:3b:20:45:95:d6:12:a0:74:dc:46:4c:b9:da:5d:2e:
         4a:09:d4:62:4c:38:2d:ad:11:f9:fd:7b:00:31:c9:b2:10:09:
         39:b8:51:f4:4c:da:7f:ab:69:e0:4d:27:72:34:6b:d7:07:0e:
         6f:3b:00:dc:13:d3:2e:04:1c:6c:72:be:76:04:77:6c:8b:e8:
         af:7f:79:f4:14:1b:4a:0a:b0:ed:a0:cf:86:69:b4:b9:29:87:
         1f:80:99:c1:29:24:a7:60:36:32:e7:67:d1:19:4f:0b:07:f2:
         cf:47:6f:e2:45:2d:24:ed:13:7f:14:e5:50:5e:85:e2:2c:5f:
         41:3b:ed:65:28:19:09:37:ef:e4:6c:3a:f9:7d:ff:d5:0b:78:
         46:74:63:fa:ae:5b:2f:fd:ad:80:0f:91:06:fa:fe:8a:d9:2c:
         18:4e:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----