Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS212483.roa
File:                     AS212483.roa (raw, json)
Hash identifier:          kbgAx/L60t06tDAZqfwxNlLD8X8AyFG729uZ/jZQBz0=
Subject key identifier:   8C:46:7C:C1:D2:C6:B6:A6:A0:0A:3F:B7:6B:3D:86:C6:C8:DC:39:1A
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       7D1A7C20A4A810122209E3B460670CD24342D00E
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS212483.roa
Signing time:             Sat 08 Apr 2023 09:22:23 +0000
ROA not before:           Sat 08 Apr 2023 09:17:23 +0000
ROA not after:            Sat 06 Apr 2024 09:22:23 +0000
asID:                     212483
IP address blocks:        2a12:dd47:80b0::/44 maxlen: 48
                          2a12:dd47:8f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1a:7c:20:a4:a8:10:12:22:09:e3:b4:60:67:0c:d2:43:42:d0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:23 2023 GMT
            Not After : Apr  6 09:22:23 2024 GMT
        Subject: CN=8C467CC1D2C6B6A6A00A3FB76B3D86C6C8DC391A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fe:34:f7:ba:fc:30:63:73:cd:5f:b8:5e:85:
                    78:08:ba:2d:f7:02:0e:80:3a:d5:85:6e:2d:58:c3:
                    2f:30:4a:ef:c5:b7:25:5b:09:71:84:6c:de:4a:d4:
                    e0:03:2e:17:21:90:37:82:d0:02:c9:06:ff:dc:40:
                    df:0d:73:05:08:db:81:53:31:a4:6e:94:9c:11:f0:
                    3d:68:1a:37:5f:27:ef:d2:a2:79:8e:f7:cb:10:94:
                    8d:bd:b4:4d:d1:2a:4b:9b:77:40:47:c4:95:20:5d:
                    9c:e8:a1:53:67:8c:aa:aa:8c:48:34:80:0d:ce:14:
                    03:09:32:7f:d7:05:42:01:84:64:a1:f4:61:e8:2c:
                    8d:02:ef:2d:f2:17:a0:8c:59:18:f8:3b:d1:13:6c:
                    9a:ab:8e:24:bc:9b:d3:63:ea:e3:55:e0:8f:e2:ef:
                    05:35:0a:c8:24:56:80:7b:91:34:fc:74:02:a1:7f:
                    c2:43:ae:3e:d6:cb:1f:9e:9e:25:9b:7b:49:c5:13:
                    15:66:7e:98:ec:da:8f:20:0e:ff:65:70:77:21:a2:
                    6a:d3:d5:56:6f:47:c4:2a:40:2a:0c:67:c2:40:e4:
                    db:b9:0a:73:f4:5a:30:17:fe:9d:ff:96:03:fb:e1:
                    47:77:62:7c:c7:06:26:cb:8b:80:98:b6:3b:e7:08:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:46:7C:C1:D2:C6:B6:A6:A0:0A:3F:B7:6B:3D:86:C6:C8:DC:39:1A
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS212483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80b0::/44
                  2a12:dd47:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:e7:17:b7:64:d6:04:99:bc:f7:2e:0b:bd:7d:03:4d:73:82:
         ce:7f:49:b2:de:53:5e:8a:59:8d:32:3e:73:0d:89:cf:1f:02:
         47:f9:18:21:1c:c5:31:1d:41:01:a0:3c:18:a7:bf:ae:0e:11:
         75:3f:32:26:37:75:5f:fa:c2:a4:f9:67:9d:2b:82:58:61:0a:
         d5:1d:da:6a:b0:f1:23:bb:c4:22:df:74:ba:6f:e7:1d:79:c5:
         eb:04:dd:96:c8:c3:fd:6a:06:c8:07:80:4f:3c:14:1a:f4:8b:
         04:58:30:36:12:64:4a:c4:c8:43:46:ed:38:b1:64:66:64:17:
         69:9d:93:0e:70:ea:36:19:73:38:ed:7d:92:fa:3f:ea:11:8e:
         bc:ff:3b:9b:7d:72:10:79:31:1c:d7:a7:1f:db:56:db:bc:91:
         09:a4:73:84:06:0c:f1:f5:92:14:42:64:a0:a3:cb:e1:df:71:
         ee:97:4d:27:93:25:12:1c:97:99:c7:9f:26:e6:54:bc:4c:3c:
         d0:2d:96:79:93:f3:8b:8b:64:33:8c:3e:f5:1e:66:16:5c:92:
         35:6d:f0:1e:fc:8d:f1:94:f1:ef:87:70:d8:4d:99:c2:25:4d:
         33:07:7b:3a:af:27:1f:9f:ec:d0:27:ac:52:c8:bb:16:e2:85:
         28:84:38:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----