Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS211877.roa
File:                     AS211877.roa (raw, json)
Hash identifier:          o6gYD7Hkgqe1hgU88K26yZ0Bj/MCnPsOGflLcq6BXGg=
Subject key identifier:   A0:7C:07:28:CD:4C:4C:A6:11:23:4E:57:9C:89:9B:D9:D6:F4:ED:C0
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       27CC87F69B21F125A3A43096B294551038A9289D
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS211877.roa
Signing time:             Sat 08 Apr 2023 09:22:22 +0000
ROA not before:           Sat 08 Apr 2023 09:17:22 +0000
ROA not after:            Sat 06 Apr 2024 09:22:22 +0000
asID:                     211877
IP address blocks:        2a12:dd47:fb00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cc:87:f6:9b:21:f1:25:a3:a4:30:96:b2:94:55:10:38:a9:28:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:22 2023 GMT
            Not After : Apr  6 09:22:22 2024 GMT
        Subject: CN=A07C0728CD4C4CA611234E579C899BD9D6F4EDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:a0:26:e1:a7:0c:0d:85:80:53:87:64:c3:
                    99:4b:97:30:a6:98:96:34:3a:b1:31:74:20:92:0d:
                    87:eb:68:20:f0:dc:fa:63:ab:d9:e0:01:46:5e:09:
                    4b:81:6e:6f:6c:75:bb:91:e8:03:b7:67:7d:49:79:
                    54:58:75:23:70:16:81:96:e1:a9:e8:77:9e:bb:b9:
                    a5:2b:ff:ba:14:f9:13:35:10:94:23:04:f2:05:ee:
                    00:d2:b9:c2:1f:40:8c:68:79:3d:a4:94:45:7c:30:
                    90:76:43:2c:ed:f7:4a:92:4d:01:80:f6:38:d8:ec:
                    bf:c0:1c:65:79:9d:17:a9:15:1d:d7:5e:a1:d0:d5:
                    65:01:d3:2e:52:f7:c8:67:25:f2:e3:3a:1a:ed:02:
                    03:49:08:c8:1a:7f:b9:42:b1:22:5a:7c:69:2b:db:
                    af:ea:4d:e0:54:d8:f4:eb:30:7d:c2:b0:ad:46:96:
                    44:55:4d:98:66:c1:88:24:3c:c6:58:de:a5:d5:d6:
                    f3:06:a0:1b:e6:93:56:8c:e4:f5:12:ac:09:cc:89:
                    e3:f8:b8:73:23:57:86:62:8f:8f:f6:eb:a9:b4:d0:
                    61:f6:bc:fe:fa:9a:21:4b:5c:be:47:91:74:7f:68:
                    ca:47:71:44:cb:f5:6b:b7:17:c0:63:65:81:41:d0:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7C:07:28:CD:4C:4C:A6:11:23:4E:57:9C:89:9B:D9:D6:F4:ED:C0
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS211877.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:d3:01:33:51:ab:43:47:01:71:11:73:81:6b:2b:ad:cf:ed:
         95:87:a7:02:dd:16:25:5f:12:bb:cb:30:fe:f7:75:b4:9b:19:
         97:94:7e:74:56:03:0d:6e:00:77:e3:93:bf:a8:df:d1:ff:ee:
         8a:25:be:fb:6d:1a:04:06:41:76:09:22:6f:56:ec:a5:6a:d4:
         88:8f:0b:a1:d7:e2:d6:44:87:a2:d5:cc:51:bf:e6:bb:46:cd:
         98:21:1b:c1:4b:5f:42:66:cf:31:23:24:60:a4:0d:87:b1:cf:
         f3:b7:94:ed:42:a8:ac:ca:fa:54:21:8d:ec:7e:37:0d:05:44:
         84:52:8c:f4:5b:5b:af:06:34:23:66:77:bc:63:77:85:9c:0c:
         ef:8b:97:58:a9:6c:57:86:63:35:72:94:60:19:e2:e1:0f:5c:
         d4:c1:5e:4e:8d:8a:85:b5:22:7d:07:7c:bc:93:1a:31:a0:4c:
         b5:96:8b:d0:6a:4f:ad:bd:57:3f:67:7d:73:29:29:59:1f:64:
         7d:d5:e1:8a:dd:b3:07:36:20:a2:86:92:29:1c:2a:c5:32:19:
         09:40:d8:2d:a3:98:e7:8d:43:0e:2f:27:b9:08:ae:29:c5:9a:
         b2:03:87:23:7d:c4:0b:6b:fe:4e:5a:b4:92:50:63:53:6f:17:
         c4:bc:8e:ae
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUJ8yH9psh8SWjpDCWspRVEDipKJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjJaFw0yNDA0MDYwOTIyMjJaMDMxMTAvBgNV
BAMTKEEwN0MwNzI4Q0Q0QzRDQTYxMTIzNEU1NzlDODk5QkQ5RDZGNEVEQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnsqAm4acMDYWAU4dkw5lLlzCm
mJY0OrExdCCSDYfraCDw3Ppjq9ngAUZeCUuBbm9sdbuR6AO3Z31JeVRYdSNwFoGW
4anod567uaUr/7oU+RM1EJQjBPIF7gDSucIfQIxoeT2klEV8MJB2Qyzt90qSTQGA
9jjY7L/AHGV5nRepFR3XXqHQ1WUB0y5S98hnJfLjOhrtAgNJCMgaf7lCsSJafGkr
26/qTeBU2PTrMH3CsK1GlkRVTZhmwYgkPMZY3qXV1vMGoBvmk1aM5PUSrAnMieP4
uHMjV4Zij4/266m00GH2vP76miFLXL5HkXR/aMpHcUTL9Wu3F8BjZYFB0I7fAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUoHwHKM1MTKYRI05XnImb2db07cAwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMTE4Nzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1H+zANBgkqhkiG9w0BAQsF
AAOCAQEAX9MBM1GrQ0cBcRFzgWsrrc/tlYenAt0WJV8Su8sw/vd1tJsZl5R+dFYD
DW4Ad+OTv6jf0f/uiiW++20aBAZBdgkib1bspWrUiI8Lodfi1kSHotXMUb/mu0bN
mCEbwUtfQmbPMSMkYKQNh7HP87eU7UKorMr6VCGN7H43DQVEhFKM9FtbrwY0I2Z3
vGN3hZwM74uXWKlsV4ZjNXKUYBni4Q9c1MFeTo2KhbUifQd8vJMaMaBMtZaL0GpP
rb1XP2d9cykpWR9kfdXhit2zBzYgooaSKRwqxTIZCUDYLaOY541DDi8nuQiuKcWa
sgOHI33EC2v+Tlq0klBjU28XxLyOrg==
-----END CERTIFICATE-----