Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS212071.roa
File:                     AS212071.roa (raw, json)
Hash identifier:          EQvGqu4SiMw6z8gdHeioa9BCn9ZO4opQaW2I7YT1kQ0=
Subject key identifier:   52:15:D3:8A:E3:CF:DF:50:99:8D:C4:6F:36:5B:1D:A7:E0:69:5A:A7
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2FBD13D86BF2D32E4505BFCAD1C58A14E9CD580F
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS212071.roa
Signing time:             Sat 08 Apr 2023 09:22:09 +0000
ROA not before:           Sat 08 Apr 2023 09:17:09 +0000
ROA not after:            Sat 06 Apr 2024 09:22:09 +0000
asID:                     212071
IP address blocks:        2a12:dd47:8190::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:bd:13:d8:6b:f2:d3:2e:45:05:bf:ca:d1:c5:8a:14:e9:cd:58:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:09 2023 GMT
            Not After : Apr  6 09:22:09 2024 GMT
        Subject: CN=5215D38AE3CFDF50998DC46F365B1DA7E0695AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:11:be:17:d8:59:a5:fe:c8:08:25:a3:d0:
                    3c:6a:14:09:00:3f:e6:7b:51:ca:48:a3:60:a9:04:
                    89:13:52:99:4d:21:78:0d:ef:28:5b:f5:14:f1:8c:
                    af:e8:78:fd:2f:62:7b:0a:4b:9b:89:98:17:cb:3a:
                    12:d2:01:43:db:f1:02:4a:e2:ef:1a:82:17:da:ed:
                    09:8e:c4:ef:6b:ec:93:1c:1a:ca:84:e7:49:0c:ed:
                    d2:7c:93:b5:0f:f3:c7:a9:b2:6d:dc:79:f1:91:42:
                    fd:87:eb:2c:80:d3:f1:61:c3:a6:8f:56:66:26:79:
                    27:57:2a:fe:1d:4e:88:1c:53:ec:fc:ae:d1:a6:b6:
                    b0:51:07:95:0c:57:d7:78:94:87:83:4d:1b:ef:a5:
                    5e:41:69:dc:82:b9:fc:27:00:95:4b:83:30:4c:f8:
                    c8:78:7b:24:8c:4d:a6:8e:30:21:0b:8e:b0:37:e0:
                    98:7f:65:c6:ad:96:8d:ab:a8:f7:2c:55:b3:8e:94:
                    d3:76:d7:06:f6:98:d7:eb:80:fe:f2:17:23:c0:95:
                    f7:84:a1:d5:5e:f5:ee:76:46:81:f1:d5:1e:d3:9e:
                    80:b8:b5:1f:fd:f3:96:f5:e5:da:4e:6e:ee:96:98:
                    7a:e6:27:57:fa:07:9f:ab:1d:dd:7e:f7:a3:b1:3f:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:D3:8A:E3:CF:DF:50:99:8D:C4:6F:36:5B:1D:A7:E0:69:5A:A7
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS212071.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8190::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:36:7b:15:4f:43:50:34:0a:d8:a4:59:54:de:d8:98:de:1d:
         2d:c8:95:26:f5:5f:f7:37:e4:53:a4:2c:9c:2b:54:59:3c:4f:
         26:69:6b:ae:04:dd:42:9e:4c:b6:06:7d:78:df:f4:22:53:88:
         08:5d:6f:ab:70:f9:ac:31:50:eb:3e:66:59:0d:3a:48:d7:58:
         06:68:0d:3b:15:3f:4e:6b:94:88:b8:8d:4b:d0:c2:92:bb:71:
         7b:7d:9a:f4:a5:90:51:0d:0f:ae:09:b3:10:7d:ec:ec:e3:15:
         40:4d:86:dc:f3:cf:69:9b:6b:5f:d8:68:a8:eb:ed:b2:9b:10:
         87:d7:cb:a4:51:07:5a:6b:9e:4c:5e:c6:2a:ab:8d:22:8e:96:
         12:f2:3b:c2:c3:86:b0:52:76:9d:69:53:58:f0:53:a0:35:3a:
         61:a2:b1:25:49:bd:bb:16:3e:e4:1c:8e:d7:af:b1:5c:5a:c2:
         93:f7:26:f0:92:de:68:14:c5:c3:68:ce:00:8c:b6:b3:6d:b6:
         b0:8b:6e:6e:69:cc:15:d0:7b:f7:1e:c5:f3:72:52:eb:c0:c2:
         38:15:c0:0b:1e:89:cd:b0:5d:d0:dd:f7:d9:47:da:87:d8:8b:
         98:d0:be:83:18:1c:c9:7d:84:44:d5:d6:69:51:32:c0:64:ed:
         30:3c:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----