Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS211759.roa
File:                     AS211759.roa (raw, json)
Hash identifier:          SAMqdFU9g36Pghxsny5K3NVmlVsrS8i9z+nMY7cTbVk=
Subject key identifier:   48:9F:95:77:00:A1:9A:A8:0C:44:61:19:71:F4:19:B4:CD:40:F5:06
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       40D7B72960B2C2863AF22648BAC3777A5F55E0EC
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS211759.roa
Signing time:             Sat 08 Apr 2023 09:22:25 +0000
ROA not before:           Sat 08 Apr 2023 09:17:25 +0000
ROA not after:            Sat 06 Apr 2024 09:22:25 +0000
asID:                     211759
IP address blocks:        2a12:dd47:f100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d7:b7:29:60:b2:c2:86:3a:f2:26:48:ba:c3:77:7a:5f:55:e0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:25 2023 GMT
            Not After : Apr  6 09:22:25 2024 GMT
        Subject: CN=489F957700A19AA80C44611971F419B4CD40F506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8e:cc:df:9b:bc:93:03:58:f2:ef:e8:63:25:
                    8b:af:3c:02:1d:fb:23:fe:61:33:3e:7b:b5:a8:9b:
                    39:8d:51:85:95:2e:4a:43:66:c8:31:97:70:0c:a2:
                    2f:99:08:fd:4d:7d:cf:84:40:bb:9d:54:a7:d2:f0:
                    05:3a:b7:a1:e8:50:b7:59:69:44:4d:25:ee:66:fe:
                    81:b0:3a:6a:26:63:84:86:d0:4a:b4:f9:fa:46:d6:
                    8e:b1:28:15:cc:57:04:b6:3e:e7:1b:6a:2b:7f:3e:
                    91:87:0b:ed:a7:b6:ee:32:54:de:5c:7a:cd:45:ce:
                    e7:f1:6b:34:5e:44:66:c6:0b:07:79:e5:54:e2:44:
                    e8:a9:20:7b:74:3f:6b:9f:c4:9f:5d:17:8e:86:9f:
                    89:46:89:de:12:76:0d:db:79:c8:60:43:df:fa:0e:
                    11:4a:3a:84:40:c4:f2:3a:10:0f:b1:3d:94:67:2e:
                    48:79:06:e0:68:a5:fd:5f:70:59:3d:15:ea:ac:a8:
                    53:7a:8e:cc:b0:9d:8f:e2:14:6a:b4:0b:88:52:bd:
                    2c:e4:4f:2e:1c:49:8a:7c:92:11:42:92:c8:5a:39:
                    31:f2:62:7b:cc:09:20:93:61:bc:a6:55:58:66:9c:
                    76:af:d7:31:74:e7:62:b4:45:5a:57:4d:41:07:03:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9F:95:77:00:A1:9A:A8:0C:44:61:19:71:F4:19:B4:CD:40:F5:06
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS211759.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f100::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:1f:70:f9:b5:f8:03:a2:00:e0:81:81:24:14:a4:ed:c3:73:
         b1:97:cd:20:56:df:5c:fb:75:f0:02:29:08:cc:65:70:1b:b1:
         76:0c:0a:56:96:4f:48:3d:a5:9f:90:0a:1b:9d:86:c9:db:1e:
         91:fc:f0:3c:6a:22:27:1d:4c:ae:74:c4:8c:a1:24:0a:9f:0e:
         d4:bb:30:41:52:66:7f:5a:06:f8:87:93:cd:50:34:f3:a0:05:
         b3:19:3d:3b:15:82:83:4a:f2:9a:23:dc:ec:ea:85:e7:89:8b:
         8a:9a:e6:7e:0c:c6:d9:9d:dd:27:4d:8f:8a:49:1b:bf:f9:19:
         ee:2e:d4:da:ae:04:fe:df:9b:ea:fd:74:44:a5:2d:e3:82:70:
         bd:fa:e6:8c:e4:51:a0:77:75:97:d4:87:ca:0e:2b:0c:33:d4:
         9a:0d:40:84:a9:9e:11:6b:bc:37:c0:d8:e2:62:3d:17:0c:69:
         92:a2:1f:82:44:1b:22:6b:20:0b:9a:aa:6e:f2:d7:bd:93:6b:
         fd:dd:ac:2f:1a:aa:eb:fa:74:93:8d:2b:83:9e:a2:1e:bd:eb:
         d4:22:50:2a:e9:16:ad:fc:33:69:0a:74:aa:aa:65:95:18:78:
         55:ce:99:89:ee:80:b7:f6:ea:bb:a9:3a:c4:3d:9c:f0:9c:f5:
         d6:ac:90:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----