Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS211940.roa
File:                     AS211940.roa (raw, json)
Hash identifier:          mwX1trg1eel797TeYZrhIbKFjdStSDKuBQbYQrD8KJU=
Subject key identifier:   DA:4E:BC:E1:5D:80:5A:3F:99:46:0C:41:4E:FF:D5:3B:B4:F2:79:04
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       23CFD30470B323CD33C4EA2C468E7B21B6100317
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS211940.roa
Signing time:             Sat 08 Apr 2023 09:22:21 +0000
ROA not before:           Sat 08 Apr 2023 09:17:21 +0000
ROA not after:            Sat 06 Apr 2024 09:22:21 +0000
asID:                     211940
IP address blocks:        2a12:dd47:5001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cf:d3:04:70:b3:23:cd:33:c4:ea:2c:46:8e:7b:21:b6:10:03:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:21 2023 GMT
            Not After : Apr  6 09:22:21 2024 GMT
        Subject: CN=DA4EBCE15D805A3F99460C414EFFD53BB4F27904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:ca:75:17:cc:75:26:e7:48:76:4c:dd:5a:
                    ee:be:b3:dd:45:3b:03:d5:16:68:fe:3a:f9:c4:65:
                    ea:3d:98:48:1f:88:44:62:63:57:8d:bb:b8:cc:11:
                    8e:e0:70:7d:f4:e4:d2:36:29:1d:ff:80:e9:aa:5a:
                    10:5b:f0:f6:5c:5e:7a:7a:26:f7:0d:04:b7:56:8e:
                    38:df:0e:44:80:c1:f8:6b:7e:6d:4b:30:76:b5:ac:
                    ed:c6:29:e7:57:90:74:ed:23:e6:0b:6d:4c:d3:58:
                    bf:b1:bb:8b:8f:54:38:ba:45:ec:40:0c:36:9a:7b:
                    0d:e1:f3:f5:40:64:fc:96:45:3e:bf:61:43:77:7a:
                    d0:aa:87:93:9e:6e:8e:bb:90:05:cf:a4:02:e1:d1:
                    a2:08:a1:d9:dd:84:00:5c:d6:b1:82:73:43:0a:c8:
                    70:c8:8e:6e:97:58:38:e6:28:1f:d3:90:d7:21:4a:
                    65:c2:f2:80:29:43:54:04:3e:b2:67:ef:46:ea:8b:
                    05:a4:a5:e7:cf:ff:e9:cc:3c:b9:57:29:2f:7f:4d:
                    43:e4:b5:0a:f2:b4:ee:4a:8b:b1:75:21:7f:de:0b:
                    67:65:8c:0e:7a:82:94:81:a7:43:fb:3c:ce:b2:ca:
                    00:a2:fb:7c:84:3d:96:df:9b:c8:56:78:b4:00:e9:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4E:BC:E1:5D:80:5A:3F:99:46:0C:41:4E:FF:D5:3B:B4:F2:79:04
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS211940.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5001::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:d6:ff:45:3d:cb:11:14:30:2f:57:36:a8:95:7b:b3:71:15:
         2d:d0:6c:06:27:fc:cd:d9:27:24:c3:0b:77:97:fc:42:14:35:
         45:54:58:06:bc:12:ce:2e:09:1e:9a:bf:87:33:a7:81:77:d6:
         91:5b:6b:69:96:d0:5b:ae:c1:51:9d:0b:78:69:2a:68:f8:97:
         64:97:46:00:84:44:28:32:8e:8a:c8:da:d7:50:9e:04:04:5b:
         fa:4f:c6:3a:96:4f:74:f7:99:a8:c4:80:25:f3:03:44:00:69:
         f3:de:e8:e0:e6:26:38:88:b5:11:97:3e:ce:36:b9:a2:2a:fb:
         7c:51:ba:aa:ed:e6:70:07:31:4a:e7:c8:f4:aa:e0:70:e7:b0:
         49:f2:4f:56:d2:ae:02:b2:65:70:25:5b:40:94:25:64:0b:01:
         5b:7e:11:7e:fa:4a:1c:56:a7:72:a8:f4:e6:78:b4:26:a7:c7:
         0f:f0:30:ae:08:7e:ff:33:25:ed:9c:34:4b:3b:9b:e8:7a:6d:
         20:05:9f:14:15:b7:65:f1:a0:3a:b7:4b:a5:3b:6d:ca:11:4a:
         9d:60:d6:0b:71:ae:47:7c:43:85:8a:95:63:90:33:54:7a:be:
         94:7b:ab:50:bc:a3:1e:cc:56:b9:ae:4f:56:1b:2d:10:59:03:
         34:cd:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----