Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS212503.roa
File:                     AS212503.roa (raw, json)
Hash identifier:          c0o0QwNwhC6SNvmM9NdEN5ngak/SA+DmMjk/zfOFicc=
Subject key identifier:   DC:82:2D:00:FE:3F:8D:EE:22:EA:7E:1B:12:7B:1E:0A:CF:7B:36:28
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       712D5669474E8F07A2977D99E28AFF8F36BACFD2
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS212503.roa
Signing time:             Sat 08 Apr 2023 09:22:21 +0000
ROA not before:           Sat 08 Apr 2023 09:17:21 +0000
ROA not after:            Sat 06 Apr 2024 09:22:21 +0000
asID:                     212503
IP address blocks:        2a12:dd47:8ee0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2d:56:69:47:4e:8f:07:a2:97:7d:99:e2:8a:ff:8f:36:ba:cf:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:21 2023 GMT
            Not After : Apr  6 09:22:21 2024 GMT
        Subject: CN=DC822D00FE3F8DEE22EA7E1B127B1E0ACF7B3628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:8e:a6:47:46:a2:90:4d:18:ed:38:c5:23:
                    37:20:68:ad:c4:7b:08:43:53:a1:26:b4:7b:e9:25:
                    ce:11:5e:6e:a3:1c:15:4f:3a:f2:e0:e2:ca:d6:0d:
                    ef:7e:61:9a:62:ca:d8:da:a4:21:f2:54:ab:80:a7:
                    15:9c:26:5c:44:57:6a:15:4c:8e:6d:ce:14:2b:d7:
                    28:5a:db:82:4f:cf:51:64:dc:31:95:55:fa:e7:f9:
                    0c:32:43:40:17:8f:68:a0:d0:19:b7:5e:5c:ab:55:
                    7f:73:75:06:91:19:77:e2:bd:e8:27:d3:dd:86:74:
                    40:31:22:c3:93:9c:54:72:95:c7:ef:a7:4b:9d:a9:
                    63:c7:1c:c0:ab:af:d1:14:3e:fb:46:26:66:e7:1c:
                    96:22:1f:0c:51:ea:62:8b:ac:f6:32:c9:ad:58:e7:
                    fd:04:49:d3:00:d6:7b:f8:21:88:6b:d2:64:ad:de:
                    19:59:d1:dc:3d:c4:ed:17:d4:56:0c:6f:cc:67:bc:
                    8d:3e:ad:aa:85:00:44:42:45:ec:a0:e1:93:c1:77:
                    10:43:81:54:5f:c6:92:d3:4b:9b:c9:30:8c:76:2a:
                    ce:53:99:d6:98:c4:b3:90:4c:5c:cd:f3:10:77:e3:
                    8b:ae:c6:2b:a5:83:28:d1:f8:e3:09:9c:81:d2:f8:
                    20:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:82:2D:00:FE:3F:8D:EE:22:EA:7E:1B:12:7B:1E:0A:CF:7B:36:28
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS212503.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ee0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c3:c9:39:49:45:d1:bc:ac:b0:63:6d:c9:19:07:ce:73:64:9a:
         0c:bf:42:f1:26:42:b2:06:3f:e0:9b:d8:ad:15:ab:be:ba:c9:
         28:f1:2b:37:2d:82:45:3f:b6:d7:82:ba:dc:27:b8:ba:ef:0e:
         69:b9:31:1f:ae:48:9a:bc:6e:cc:47:18:29:e9:eb:b2:4c:63:
         82:cd:b7:3d:83:d0:39:01:4f:1f:d1:93:09:46:8f:3b:a8:59:
         90:90:41:90:e8:f2:10:ea:4b:04:6b:1f:fa:0a:87:bb:be:db:
         1f:12:1b:21:7e:58:7b:db:28:c2:e3:73:04:ee:39:92:b2:95:
         2e:93:e7:86:ec:e9:f7:51:73:50:ab:18:4a:23:cd:bc:7f:e3:
         b0:d1:71:7e:fd:c7:35:2a:c4:9f:b5:b0:4c:89:31:94:22:d6:
         58:92:ad:41:04:15:93:c1:c5:c8:2a:32:b8:47:8b:fe:9b:e0:
         7b:69:0a:30:eb:df:36:5d:79:38:4c:0b:de:4d:ee:7d:f6:5f:
         f9:bc:80:d2:53:b1:b2:f5:57:f0:08:12:f5:10:49:63:45:14:
         f7:34:ba:a3:7e:25:f1:7a:5b:53:fb:dc:ba:d8:18:cb:d7:07:
         21:70:66:34:7f:a3:2a:03:dd:5d:b1:c3:3c:e2:9a:51:58:6b:
         1c:5b:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----