Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS212164.roa
File:                     AS212164.roa (raw, json)
Hash identifier:          afrE1SfBJ2wG6fffo5JITaW7d+GvEdaHJR84Eg3KvYU=
Subject key identifier:   E5:EC:3A:CC:97:2F:7D:B9:41:5E:34:70:3F:2D:C5:7F:52:AE:2B:30
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       7DADBB6549B1FAB0D037ED4B7E5E04960A21AE24
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS212164.roa
Signing time:             Sat 08 Apr 2023 09:22:16 +0000
ROA not before:           Sat 08 Apr 2023 09:17:16 +0000
ROA not after:            Sat 06 Apr 2024 09:22:16 +0000
asID:                     212164
IP address blocks:        2a12:dd47:df20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ad:bb:65:49:b1:fa:b0:d0:37:ed:4b:7e:5e:04:96:0a:21:ae:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:16 2023 GMT
            Not After : Apr  6 09:22:16 2024 GMT
        Subject: CN=E5EC3ACC972F7DB9415E34703F2DC57F52AE2B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:04:0d:37:83:9f:3f:7e:16:58:9b:0f:c1:
                    cd:fc:2b:1d:a8:ff:35:93:9e:a5:0e:69:7d:b1:bb:
                    50:eb:b3:97:aa:9e:1e:0e:dd:56:fe:5b:d1:ed:86:
                    00:38:81:70:d4:7f:5e:9b:e9:8f:70:28:b3:86:20:
                    74:95:b2:eb:f6:ba:5b:d6:c3:1b:0c:3a:99:bd:67:
                    0f:f0:c1:8c:6c:ef:32:bb:ec:57:8f:a6:0d:88:1a:
                    9c:9f:26:84:09:01:b2:a6:b7:4a:ff:35:66:40:ff:
                    54:4c:20:7c:d0:29:d8:b8:a3:c1:52:e3:8f:87:b8:
                    6d:b9:d1:38:ca:a3:66:09:e3:98:86:73:ae:f3:40:
                    40:fd:fc:ab:b2:40:3c:64:fa:9f:bf:76:c6:2a:25:
                    d3:a1:a2:3f:f3:69:08:f9:11:40:0f:7c:b9:7e:eb:
                    d0:ad:f7:46:3f:15:dc:71:6c:69:aa:ad:47:af:bd:
                    83:b7:30:c1:b3:de:42:37:26:4b:4c:c9:aa:2c:ae:
                    d2:5f:e7:f4:31:37:2e:a6:8c:99:2e:32:d4:d8:30:
                    92:a9:d1:f1:cd:46:7c:60:90:c0:ba:45:59:49:00:
                    92:58:1b:73:c9:ca:7d:d6:40:8c:0f:45:b6:6b:50:
                    30:7f:5c:40:63:54:74:8c:dc:d9:31:06:c5:be:19:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:3A:CC:97:2F:7D:B9:41:5E:34:70:3F:2D:C5:7F:52:AE:2B:30
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS212164.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:df20::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:bd:9f:62:54:e6:8b:d8:10:8d:72:97:46:73:58:03:12:74:
         f3:f1:d2:e6:1e:72:c0:a7:8c:07:f9:2a:a8:c4:13:8d:de:96:
         e0:1b:7d:e5:84:0f:7b:11:dc:58:39:e0:6a:4a:0e:6e:17:1d:
         10:7d:7b:23:b4:88:e9:90:d0:91:3a:b0:bd:53:db:2a:2c:66:
         69:6e:e0:18:a2:de:e8:bd:2b:8e:9f:0d:9c:f2:a0:39:41:81:
         b8:44:e1:84:c4:4a:fc:ef:a8:db:00:ae:a3:85:9e:bc:b1:5e:
         f5:65:f7:bc:7e:58:cb:3b:d3:3c:7c:b6:f6:83:cd:40:0b:47:
         bf:5c:32:81:5c:f5:ca:73:c7:cd:12:93:02:f3:b5:0a:43:d8:
         97:a5:38:4e:3b:85:17:93:c7:72:19:35:7a:b1:bc:5f:05:69:
         a1:de:40:3c:5d:e1:40:54:34:63:17:a1:73:eb:fa:01:4d:d6:
         e6:c8:a1:7d:08:4b:28:65:ec:d3:f9:da:dc:ee:8f:5f:2d:1c:
         a3:be:e9:50:01:6c:4a:06:12:44:ea:5f:3c:ec:d6:89:0d:a3:
         10:f2:9c:5d:19:fc:ee:de:7b:91:46:28:03:65:f3:79:b2:e2:
         55:77:01:c3:7f:ea:33:d0:eb:12:5e:b9:5e:a6:1a:8a:c1:5d:
         d5:bc:bf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----