Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS211604.roa
File:                     AS211604.roa (raw, json)
Hash identifier:          mURPWURuSgJacHFwF9jtUqqKxtsUzqyTSs5D9dMGuH0=
Subject key identifier:   DD:FD:48:73:8C:91:0A:EE:F5:66:A7:9D:EC:F5:A3:BA:0A:E3:60:4A
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       220C4CDD5437A61B76C5816B16A3EEDCAF2F194F
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS211604.roa
Signing time:             Sat 08 Apr 2023 09:22:15 +0000
ROA not before:           Sat 08 Apr 2023 09:17:15 +0000
ROA not after:            Sat 06 Apr 2024 09:22:15 +0000
asID:                     211604
IP address blocks:        2a12:dd47:8072::/48 maxlen: 48
                          2a12:dd47:807e::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0c:4c:dd:54:37:a6:1b:76:c5:81:6b:16:a3:ee:dc:af:2f:19:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:15 2023 GMT
            Not After : Apr  6 09:22:15 2024 GMT
        Subject: CN=DDFD48738C910AEEF566A79DECF5A3BA0AE3604A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:a9:74:5a:db:9c:4d:ed:b4:bf:0c:7c:bc:
                    7c:c2:d3:5f:ba:60:58:a7:74:e8:9c:c4:50:0c:a4:
                    86:d4:5e:5a:4a:46:c4:3e:32:92:bc:fb:1b:ac:9f:
                    08:4c:2d:97:d8:19:15:63:39:ee:ee:ae:e6:1a:dc:
                    dc:20:6f:a6:2d:da:f5:08:33:c7:6c:33:37:3b:04:
                    96:2f:6c:e6:cf:8e:46:cb:cf:4e:fb:9c:e9:1f:bf:
                    33:46:8a:df:a1:ef:cb:b9:a1:95:c5:93:87:e1:69:
                    db:f2:6e:b8:de:e2:f4:65:8b:93:01:6a:76:21:0c:
                    60:7d:ba:52:47:51:b4:f3:1b:59:9e:13:0d:af:b3:
                    0f:87:05:56:d6:70:a2:b3:ce:5e:8d:f0:df:1e:0e:
                    2a:70:85:b8:90:69:c6:9a:f4:63:d7:08:18:e2:40:
                    1e:eb:a6:40:c3:ae:81:ff:3d:f5:c2:36:e5:fe:fa:
                    8b:5d:14:9b:c3:b1:45:30:61:e5:06:4c:1e:57:18:
                    8d:a6:a3:35:d0:91:b0:2a:16:72:f2:a3:7e:36:73:
                    ec:cd:80:dc:5c:d6:f8:90:2a:97:e4:6a:66:82:26:
                    72:59:9f:58:96:4e:38:47:10:ec:b9:57:57:3f:ca:
                    b8:ea:73:c2:50:21:c0:af:f5:84:c3:d8:13:52:04:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FD:48:73:8C:91:0A:EE:F5:66:A7:9D:EC:F5:A3:BA:0A:E3:60:4A
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS211604.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8072::/48
                  2a12:dd47:807e::/47

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:5f:25:31:48:d6:5d:3e:e7:6f:56:94:72:e7:37:4b:29:
         22:4c:8e:fe:04:59:71:a4:33:63:01:02:0a:b7:c8:0d:b7:ec:
         9e:4c:8f:b8:41:f3:d4:9c:b5:84:dd:f1:65:06:92:8d:37:5b:
         ce:75:df:37:a7:2d:e8:85:d1:79:e7:38:d2:d6:ee:e0:60:e3:
         16:88:69:13:04:ed:84:63:52:5c:86:76:a1:e8:d7:97:46:2d:
         1a:4f:3b:1f:38:be:6a:d3:e6:dd:02:6a:20:09:4d:a7:f9:76:
         01:69:8e:66:a3:21:82:39:b4:38:9e:fa:eb:bd:7f:29:dc:af:
         73:c1:c0:d9:45:9e:f7:3f:8d:f9:51:ae:fa:d9:54:93:62:5b:
         d9:4b:22:d4:c0:a5:84:72:10:18:8b:bf:0b:7d:37:7e:49:c2:
         e1:e5:92:09:5e:50:8f:14:35:87:05:6d:4f:29:f3:36:66:9d:
         ac:55:9f:8e:a0:8a:f1:e6:d4:a0:30:38:29:4b:42:57:56:83:
         dc:ac:d1:16:3a:a9:6f:15:df:a4:e4:24:f4:c7:06:f3:83:fb:
         7f:96:92:82:37:0e:43:f1:e2:7e:1f:b5:d8:1f:19:72:14:60:
         05:20:7d:73:5d:9b:70:9f:5c:6d:3e:ed:6c:1b:6a:7e:c7:fa:
         00:ec:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----