Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS212242.roa
File:                     AS212242.roa (raw, json)
Hash identifier:          70u4tXIUwm+tK5XYunQL0CSvcIXC0tlZnFMoGLqi0tA=
Subject key identifier:   27:A5:06:D6:32:D4:7F:F9:EB:5E:8A:BA:8D:52:1D:4E:29:40:1A:DF
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       61C82229EFFD1441706328AA5C628E512EDA5EF0
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS212242.roa
Signing time:             Sat 08 Apr 2023 09:22:09 +0000
ROA not before:           Sat 08 Apr 2023 09:17:09 +0000
ROA not after:            Sat 06 Apr 2024 09:22:09 +0000
asID:                     212242
IP address blocks:        2a12:dd47:80e3::/48 maxlen: 48
                          2a12:dd47:d600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c8:22:29:ef:fd:14:41:70:63:28:aa:5c:62:8e:51:2e:da:5e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:09 2023 GMT
            Not After : Apr  6 09:22:09 2024 GMT
        Subject: CN=27A506D632D47FF9EB5E8ABA8D521D4E29401ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:e5:b8:83:9b:f3:e0:11:15:42:ba:60:08:
                    8a:3b:3f:8a:78:5e:2b:8f:d4:6c:8a:22:30:e9:26:
                    40:a1:25:b8:9d:d0:27:d7:2e:2b:e4:ef:7d:68:5e:
                    15:d3:fe:00:08:ed:a5:7b:b0:29:67:36:0a:e7:c8:
                    3d:c7:d6:9b:15:1a:a5:63:d9:a4:e2:92:45:b3:39:
                    d3:45:19:b5:ef:82:6e:20:ea:51:27:50:9d:ba:ad:
                    67:fe:92:80:9d:b8:93:3f:45:08:6f:47:b5:2e:09:
                    ee:8d:3e:ea:6e:1c:f3:ec:63:a9:5f:df:fc:5c:0e:
                    a4:ba:c6:c1:a8:6d:8f:bf:6d:ef:a6:b2:f3:6b:34:
                    24:b6:44:1d:4e:a4:dd:d8:08:bc:e0:19:7c:e0:7b:
                    25:d5:76:42:a8:f5:0e:04:77:96:02:da:09:44:4e:
                    95:99:71:f0:a0:b4:a6:48:56:47:18:56:a9:99:dc:
                    cc:3f:03:05:d1:97:8b:25:46:d5:eb:b6:10:b8:a8:
                    fc:71:e2:99:26:c7:1f:10:b7:0e:ac:80:51:d4:1b:
                    a3:35:8b:7d:3a:dd:f0:4e:27:34:93:bb:7b:0e:75:
                    ac:b1:03:04:3a:ab:e2:c8:14:21:45:dc:76:d4:e3:
                    8a:5c:b9:5a:37:99:7f:33:fd:2c:3b:22:aa:27:41:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A5:06:D6:32:D4:7F:F9:EB:5E:8A:BA:8D:52:1D:4E:29:40:1A:DF
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS212242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e3::/48
                  2a12:dd47:d600::/39

    Signature Algorithm: sha256WithRSAEncryption
         9d:e6:25:fc:26:7c:c3:7d:ca:90:2d:d7:cb:d1:46:d4:8b:0e:
         d2:5e:af:c4:74:b3:51:85:75:00:43:a3:f9:1a:85:b9:93:53:
         e3:f6:7f:ad:e9:96:7b:87:06:0c:33:d2:97:34:e8:01:cd:90:
         df:9a:00:7b:b1:55:18:29:c0:2d:05:5f:7f:11:f6:62:36:0d:
         82:65:62:3f:93:5d:d4:2c:0b:15:ef:e1:e6:c8:c1:d1:d0:a0:
         20:89:90:32:03:51:30:66:c2:90:a6:0d:0f:22:77:ee:b4:b9:
         67:ed:a9:12:72:4f:5b:93:a9:06:cc:cf:c1:b9:63:85:7b:de:
         15:c6:e9:a8:2f:8c:59:d6:03:72:7a:c5:79:4c:6a:e9:58:14:
         e0:4a:82:ec:3b:16:3d:99:20:6b:38:6e:a6:c9:72:f8:2e:2e:
         53:d0:1d:e8:29:6d:b8:7f:26:78:68:cc:dd:97:8a:6f:de:f6:
         1b:78:90:ec:d2:ed:34:1c:1b:10:6a:b2:33:3e:7f:06:30:40:
         d5:bf:3b:e2:0b:10:95:a8:70:ea:e8:4e:38:98:21:b2:b3:02:
         80:a7:6e:a4:22:7f:ff:b5:ac:68:af:82:61:1b:37:93:80:d8:
         6c:da:68:f3:3b:a1:bb:e5:87:8a:c5:89:b9:8c:e0:d1:f9:a6:
         6d:06:ea:73
-----BEGIN CERTIFICATE-----
MIIEmzCCA4OgAwIBAgIUYcgiKe/9FEFwYyiqXGKOUS7aXvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MDlaFw0yNDA0MDYwOTIyMDlaMDMxMTAvBgNV
BAMTKDI3QTUwNkQ2MzJENDdGRjlFQjVFOEFCQThENTIxRDRFMjk0MDFBREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCb+W4g5vz4BEVQrpgCIo7P4p4
XiuP1GyKIjDpJkChJbid0CfXLivk731oXhXT/gAI7aV7sClnNgrnyD3H1psVGqVj
2aTikkWzOdNFGbXvgm4g6lEnUJ26rWf+koCduJM/RQhvR7UuCe6NPupuHPPsY6lf
3/xcDqS6xsGobY+/be+msvNrNCS2RB1OpN3YCLzgGXzgeyXVdkKo9Q4Ed5YC2glE
TpWZcfCgtKZIVkcYVqmZ3Mw/AwXRl4slRtXrthC4qPxx4pkmxx8Qtw6sgFHUG6M1
i3063fBOJzSTu3sOdayxAwQ6q+LIFCFF3HbU44pcuVo3mX8z/Sw7IqonQf+JAgMB
AAGjggGlMIIBoTAdBgNVHQ4EFgQUJ6UG1jLUf/nrXoq6jVIdTilAGt8wHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMTIyNDIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
KgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBwAqEt1HgOMDBgEqEt1H1jANBgkq
hkiG9w0BAQsFAAOCAQEAneYl/CZ8w33KkC3Xy9FG1IsO0l6vxHSzUYV1AEOj+RqF
uZNT4/Z/remWe4cGDDPSlzToAc2Q35oAe7FVGCnALQVffxH2YjYNgmViP5Nd1CwL
Fe/h5sjB0dCgIImQMgNRMGbCkKYNDyJ37rS5Z+2pEnJPW5OpBszPwbljhXveFcbp
qC+MWdYDcnrFeUxq6VgU4EqC7DsWPZkgazhupsly+C4uU9Ad6CltuH8meGjM3ZeK
b972G3iQ7NLtNBwbEGqyMz5/BjBA1b874gsQlahw6uhOOJghsrMCgKdupCJ//7Ws
aK+CYRs3k4DYbNpo8zuhu+WHisWJuYzg0fmmbQbqcw==
-----END CERTIFICATE-----