Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS211946.roa
File:                     AS211946.roa (raw, json)
Hash identifier:          rSlGXCqrALzPLNTmbcFLmY9ZcZyi+lNcei3qqkedL6E=
Subject key identifier:   63:5A:5F:B3:ED:C5:FF:68:4E:77:FB:63:4A:14:92:65:64:69:D9:90
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6028E04D8CC69217765A90E0CD04FCA4427433CB
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS211946.roa
Signing time:             Sat 08 Apr 2023 09:22:12 +0000
ROA not before:           Sat 08 Apr 2023 09:17:12 +0000
ROA not after:            Sat 06 Apr 2024 09:22:12 +0000
asID:                     211946
IP address blocks:        2a12:dd47:8028::/48 maxlen: 48
                          2a12:dd47:d200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:28:e0:4d:8c:c6:92:17:76:5a:90:e0:cd:04:fc:a4:42:74:33:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:12 2023 GMT
            Not After : Apr  6 09:22:12 2024 GMT
        Subject: CN=635A5FB3EDC5FF684E77FB634A1492656469D990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cc:6c:40:2c:bc:31:87:0c:66:ba:aa:8d:21:
                    04:ea:27:61:8f:8b:d0:9c:6b:bd:4f:08:a6:5f:82:
                    00:74:c1:58:ce:42:81:01:2b:34:55:61:2d:cf:1e:
                    ae:b5:79:a8:61:91:8d:fe:2a:ba:e6:df:d7:2a:16:
                    ec:bf:4d:b8:28:41:6b:21:9e:3f:a7:8b:8b:38:06:
                    f4:0a:7a:00:10:33:0d:71:ed:df:1b:c2:2f:11:83:
                    25:3c:10:a1:5c:51:69:20:96:97:6a:6d:69:da:52:
                    ee:1b:3e:3d:37:75:ef:af:5d:29:5d:65:52:e6:fc:
                    fb:83:48:75:8d:45:e5:1f:59:23:27:e0:3d:ce:a1:
                    1e:fa:6e:bb:34:56:e9:60:d2:99:8f:64:db:88:a0:
                    7e:21:e1:f0:07:d1:7d:fb:2a:18:be:73:31:75:5c:
                    8a:d7:e2:1f:98:97:7a:c3:e4:1c:1e:1d:4e:1e:de:
                    17:e7:54:7e:52:11:8d:70:8f:b8:30:09:01:e1:e6:
                    eb:07:6e:62:ba:ac:aa:cd:ff:d3:2a:10:c4:49:6a:
                    f6:3b:98:cb:9b:3d:f5:60:13:34:5d:ad:6a:83:07:
                    b8:db:60:21:fc:db:f3:7f:bb:9a:cf:05:15:72:75:
                    02:73:3c:6f:a0:5e:8c:a6:44:36:6e:a2:62:6b:6b:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5A:5F:B3:ED:C5:FF:68:4E:77:FB:63:4A:14:92:65:64:69:D9:90
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS211946.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8028::/48
                  2a12:dd47:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:a1:db:53:11:f8:4c:0c:1d:ab:46:d3:73:d0:24:6a:b8:fd:
         73:da:ad:39:4c:bd:46:0b:39:f3:e0:df:72:98:80:be:77:7e:
         d5:bb:a5:5f:9e:8f:ca:4b:3c:01:f9:01:a2:51:47:76:cc:bb:
         ce:cb:01:1a:7e:6f:f4:a8:1e:87:a6:bd:e4:29:69:d0:52:ed:
         10:e2:0a:87:a0:73:bb:89:02:25:aa:cc:3a:04:8c:55:a7:7c:
         e1:f5:e2:c7:87:79:47:ee:ff:9a:bf:d7:fe:6c:15:36:5c:63:
         a0:75:e0:24:2f:2b:7d:92:a9:d0:57:86:69:a0:03:1b:b7:fb:
         68:ef:54:c6:80:04:5c:72:8d:ce:ac:cd:c6:3f:a7:7e:d9:0f:
         53:49:cc:3e:e3:aa:9b:ee:d9:40:c0:62:61:16:96:51:ad:8a:
         1a:e3:69:f6:f9:39:35:71:65:e1:69:cb:3f:9b:01:68:76:74:
         8c:7e:12:20:03:8b:aa:76:f9:59:d3:79:05:c8:20:ba:c6:0c:
         76:be:01:25:e9:eb:4d:f2:ab:dc:77:ac:91:5d:6b:7a:03:c6:
         11:35:c7:3c:ba:e5:2c:5d:a4:60:28:36:cb:0a:77:57:33:de:
         db:3f:1a:8c:5b:35:07:f6:a1:8f:0e:e5:d4:9b:2f:9e:f1:ef:
         ee:2f:a1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----