Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS212598.roa
File:                     AS212598.roa (raw, json)
Hash identifier:          iJufTDpYZP4T4vNvvKEahl5Ltu6mskcNQg/8RV1XWII=
Subject key identifier:   EA:82:EA:8D:E0:6A:EF:88:17:EA:08:4D:DC:F1:D8:CD:DA:42:BC:4E
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       66999478BA0291E06763ECDAC066CA5ED4B68EFC
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS212598.roa
Signing time:             Sat 08 Apr 2023 09:22:23 +0000
ROA not before:           Sat 08 Apr 2023 09:17:23 +0000
ROA not after:            Sat 06 Apr 2024 09:22:23 +0000
asID:                     212598
IP address blocks:        2a12:dd47:8320::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:99:94:78:ba:02:91:e0:67:63:ec:da:c0:66:ca:5e:d4:b6:8e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:23 2023 GMT
            Not After : Apr  6 09:22:23 2024 GMT
        Subject: CN=EA82EA8DE06AEF8817EA084DDCF1D8CDDA42BC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:ab:96:6b:a1:57:bb:21:b7:29:9b:0b:47:
                    ea:31:71:59:85:16:e0:b7:1f:e8:25:1a:dc:bf:0a:
                    cd:12:f5:5c:e4:60:3f:cf:a4:ad:77:46:6d:c4:22:
                    47:e3:4a:cd:1d:6e:ad:00:ad:2e:31:ef:f9:a0:b4:
                    b9:bf:0d:74:e6:df:2f:9e:7f:1f:30:bb:8a:49:cd:
                    13:b1:77:63:82:0b:29:5b:fc:ca:91:9b:55:de:dc:
                    17:54:5b:8e:b9:30:d3:7b:db:d8:0c:e7:38:e0:22:
                    13:63:c6:c9:2c:2f:5a:c5:73:13:0f:7d:92:91:26:
                    43:3c:f2:4d:85:de:5b:d1:ae:02:54:bf:14:b8:24:
                    07:bf:b9:16:7f:cd:03:21:d5:d7:e6:e7:01:5f:e3:
                    d3:d7:9e:5c:66:2c:31:67:ac:9c:40:84:d0:55:0f:
                    f2:48:56:71:94:84:ee:f7:59:e0:36:2c:96:60:ca:
                    68:8b:b6:55:6c:f4:99:b7:7e:6d:48:0b:00:88:e4:
                    6a:4d:de:76:ee:a3:d7:68:af:00:f6:31:a3:96:5c:
                    d8:ec:4c:34:ce:f0:34:80:4a:3c:a7:9c:63:ba:47:
                    c2:d1:74:3c:c8:8d:c3:61:24:0a:4f:67:52:38:98:
                    4e:b8:88:87:8d:8f:16:e9:32:82:57:9d:65:32:93:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:82:EA:8D:E0:6A:EF:88:17:EA:08:4D:DC:F1:D8:CD:DA:42:BC:4E
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS212598.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8320::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:40:2b:97:65:7c:40:27:94:33:64:00:8a:57:34:0f:a6:72:
         e3:36:95:79:91:73:8a:9b:0d:77:31:af:d0:8d:9b:f0:11:c6:
         79:e5:8a:15:f4:49:64:1c:3c:68:5a:33:2c:c1:bf:0d:20:9f:
         dd:09:76:ae:db:05:b0:cf:1a:91:a8:c1:d4:e5:5b:e3:af:cc:
         32:b5:79:ad:3b:0e:3a:bc:14:ec:1d:0a:38:d2:ba:72:78:7a:
         3c:d9:f6:00:c2:65:9f:48:2b:6a:d5:ba:af:c0:fa:c5:ac:51:
         70:5c:f5:cc:b1:09:38:df:29:29:63:60:fd:75:ca:16:98:42:
         0a:f6:3a:30:09:1d:c4:5b:d0:bd:2b:b6:cb:b7:2b:48:43:7b:
         38:5c:fb:93:64:97:3e:8f:21:0c:50:38:19:62:6c:02:97:70:
         5f:40:66:ab:77:c0:1c:74:04:7b:91:4f:89:a2:df:25:e4:05:
         63:61:48:42:91:77:6d:f8:91:33:5e:31:d4:a5:99:c0:77:dc:
         87:4a:a6:cc:6e:03:46:f6:82:a7:f1:c5:49:e4:51:38:b2:34:
         97:c0:6e:19:52:bd:1a:9a:5e:02:8d:ef:6f:a0:6c:5b:98:93:
         8a:e7:99:1f:f6:58:fd:e0:87:28:b1:24:05:34:5e:0c:01:37:
         a4:98:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----