Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS212294.roa
File:                     AS212294.roa (raw, json)
Hash identifier:          uwHR4lELwVVnv8E5hY+/mmd2n9fEdmB23bQJWTVj6dE=
Subject key identifier:   8F:B9:6D:2B:1C:6C:81:A2:F1:B6:2F:41:FA:05:D2:B0:0B:B9:C6:BE
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       28812EAD9AB040BB3EED1EF8BA22F8AE770FE757
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS212294.roa
Signing time:             Sat 08 Apr 2023 09:22:18 +0000
ROA not before:           Sat 08 Apr 2023 09:17:18 +0000
ROA not after:            Sat 06 Apr 2024 09:22:18 +0000
asID:                     212294
IP address blocks:        2a12:dd47:8004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:81:2e:ad:9a:b0:40:bb:3e:ed:1e:f8:ba:22:f8:ae:77:0f:e7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:18 2023 GMT
            Not After : Apr  6 09:22:18 2024 GMT
        Subject: CN=8FB96D2B1C6C81A2F1B62F41FA05D2B00BB9C6BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:0e:c9:34:5f:55:cf:56:a9:92:84:b3:46:
                    66:d3:5d:d2:4f:fe:c2:1d:54:ac:18:62:c3:90:e6:
                    8e:b8:dc:94:e9:b6:7f:90:70:8d:45:4b:36:f3:82:
                    9b:fb:a8:7a:b1:80:29:04:12:41:1a:21:21:7d:51:
                    3c:40:ad:af:8c:17:9b:95:69:37:20:57:b5:67:36:
                    29:78:9a:89:4f:54:3a:24:09:7c:46:8e:2c:0c:9a:
                    af:ba:a9:11:8c:66:ad:6c:25:2f:0a:1a:e2:60:19:
                    f4:16:99:77:9f:93:f2:97:fa:cf:57:c7:b8:91:6e:
                    57:94:61:e8:17:07:19:72:41:89:71:c7:31:8e:1b:
                    cc:aa:3e:7d:8b:4a:89:f9:f9:18:68:8a:8e:ef:4b:
                    39:d8:ab:02:c7:9d:d2:94:43:71:6f:97:49:82:2f:
                    68:53:11:a3:7a:4b:bd:66:eb:5a:01:0f:e7:c9:1f:
                    39:53:22:34:0f:d4:44:9d:b7:ad:3f:1b:19:0f:c6:
                    ad:81:b2:f9:a0:7d:0e:04:15:26:16:70:2f:3f:4b:
                    dc:d4:ed:03:bc:0b:e1:9b:66:ef:13:33:ed:fc:a1:
                    63:89:79:dd:e5:bd:3c:cb:5e:0d:66:37:b8:91:f9:
                    80:ce:76:08:c2:22:01:ee:53:ec:c1:f7:9f:cd:e2:
                    b6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B9:6D:2B:1C:6C:81:A2:F1:B6:2F:41:FA:05:D2:B0:0B:B9:C6:BE
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS212294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:1e:c2:9b:70:47:6e:45:eb:8e:be:39:77:54:87:7e:bf:1e:
         45:20:fd:f1:37:a5:de:b0:7c:69:05:60:6a:7e:4b:26:94:cd:
         bc:e7:16:ac:c3:67:93:db:d4:13:bc:30:eb:be:92:71:35:6f:
         f2:2b:75:3d:8e:0c:4a:bf:96:35:d5:0c:4d:3e:ed:a7:ad:c6:
         f6:08:ee:aa:7c:cc:c6:12:8d:d8:cb:74:b4:74:c5:c4:ba:37:
         f8:aa:9d:f1:70:d6:7e:ff:4c:02:3f:4b:b4:fe:09:68:93:e6:
         ab:1b:b1:44:fd:1d:01:8c:29:43:05:d8:79:52:47:a8:b7:4f:
         7c:fe:f8:0e:ac:3e:d2:13:25:b1:1c:57:37:a1:9d:fd:b3:62:
         ec:da:3f:d9:87:21:f0:85:9e:41:44:b8:42:03:f2:46:df:93:
         2d:00:ae:41:30:c8:ac:f8:b6:0e:bf:42:b9:45:d0:7d:a7:3b:
         e1:13:14:d5:aa:04:e1:90:92:a4:d7:b2:cd:c9:88:12:fb:51:
         b9:98:74:62:7c:d1:0d:0f:8e:9c:df:36:78:7b:34:3c:05:e4:
         5e:51:a8:4c:16:ae:9b:ed:f8:d5:fd:1e:ca:1c:c9:a1:d7:6f:
         c8:80:43:62:6c:54:7d:f1:c4:a6:fb:19:f5:be:98:da:ff:c5:
         32:0b:3d:f1
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUKIEurZqwQLs+7R74uiL4rncP51cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MThaFw0yNDA0MDYwOTIyMThaMDMxMTAvBgNV
BAMTKDhGQjk2RDJCMUM2QzgxQTJGMUI2MkY0MUZBMDVEMkIwMEJCOUM2QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLg7JNF9Vz1apkoSzRmbTXdJP
/sIdVKwYYsOQ5o643JTptn+QcI1FSzbzgpv7qHqxgCkEEkEaISF9UTxAra+MF5uV
aTcgV7VnNil4molPVDokCXxGjiwMmq+6qRGMZq1sJS8KGuJgGfQWmXefk/KX+s9X
x7iRbleUYegXBxlyQYlxxzGOG8yqPn2LSon5+Rhoio7vSznYqwLHndKUQ3Fvl0mC
L2hTEaN6S71m61oBD+fJHzlTIjQP1ESdt60/GxkPxq2BsvmgfQ4EFSYWcC8/S9zU
7QO8C+GbZu8TM+38oWOJed3lvTzLXg1mN7iR+YDOdgjCIgHuU+zB95/N4rbHAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUj7ltKxxsgaLxti9B+gXSsAu5xr4wHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMTIyOTQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgAQwDQYJKoZIhvcNAQEL
BQADggEBACgewptwR25F646+OXdUh36/HkUg/fE3pd6wfGkFYGp+SyaUzbznFqzD
Z5Pb1BO8MOu+knE1b/IrdT2ODEq/ljXVDE0+7aetxvYI7qp8zMYSjdjLdLR0xcS6
N/iqnfFw1n7/TAI/S7T+CWiT5qsbsUT9HQGMKUMF2HlSR6i3T3z++A6sPtITJbEc
Vzehnf2zYuzaP9mHIfCFnkFEuEID8kbfky0ArkEwyKz4tg6/QrlF0H2nO+ETFNWq
BOGQkqTXss3JiBL7UbmYdGJ80Q0PjpzfNnh7NDwF5F5RqEwWrpvt+NX9HsocyaHX
b8iAQ2JsVH3xxKb7GfW+mNr/xTILPfE=
-----END CERTIFICATE-----