Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS212983.roa
File:                     AS212983.roa (raw, json)
Hash identifier:          Q+8aYp3uBcAQ1lbcYoyh/tD8QhLkFBJzA3vsceYYEII=
Subject key identifier:   D6:14:91:B3:5A:87:8F:92:CB:A3:CD:F8:CC:61:B5:C5:13:86:7A:E2
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       7A1EA4EE1A17EBDCB06BE06E3A9ADE32B05F86E6
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS212983.roa
Signing time:             Sat 08 Apr 2023 09:22:21 +0000
ROA not before:           Sat 08 Apr 2023 09:17:21 +0000
ROA not after:            Sat 06 Apr 2024 09:22:21 +0000
asID:                     212983
IP address blocks:        2a12:dd47:8169::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1e:a4:ee:1a:17:eb:dc:b0:6b:e0:6e:3a:9a:de:32:b0:5f:86:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:21 2023 GMT
            Not After : Apr  6 09:22:21 2024 GMT
        Subject: CN=D61491B35A878F92CBA3CDF8CC61B5C513867AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:f6:c2:36:0f:75:6a:aa:f7:47:72:98:50:
                    96:f3:16:39:b4:61:1d:73:56:c4:2c:b6:18:14:50:
                    89:63:c2:4c:09:24:19:b2:50:cd:4b:fe:d7:5d:4f:
                    fb:ff:d4:46:cb:49:cf:f1:05:b5:b7:dc:46:5a:6c:
                    8b:0b:0d:4d:7a:7c:84:79:84:66:e2:28:04:a1:e1:
                    cf:f3:60:af:2f:ef:bc:a9:0c:a4:9f:5d:ac:c9:e1:
                    c5:c4:1a:e9:88:4e:2f:e5:10:30:c6:80:f8:b8:ad:
                    71:19:33:33:6c:3e:e0:36:8e:c3:15:43:e7:80:f2:
                    0b:7c:3f:bf:59:eb:e5:b9:8c:04:e8:0c:b2:4f:e8:
                    86:ea:ba:80:fd:21:76:25:45:68:b2:eb:6f:86:3d:
                    34:64:ee:0a:d5:f6:bd:27:a8:ca:05:b3:70:51:dc:
                    8a:a0:68:da:26:ce:7f:b1:4b:57:f2:b2:2e:d6:e8:
                    64:a3:b7:b9:5d:f8:d7:2e:18:31:0a:9f:b2:29:2c:
                    48:82:b7:c8:e0:74:2c:cf:41:99:8f:37:6f:3d:2d:
                    6e:25:f8:3b:43:97:32:34:f6:54:f5:15:cf:eb:2b:
                    6a:72:dd:9d:e7:76:ed:fa:08:0c:61:30:3a:68:b7:
                    06:1e:19:91:1b:7b:dd:b9:6a:03:57:81:d5:a2:d1:
                    42:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:14:91:B3:5A:87:8F:92:CB:A3:CD:F8:CC:61:B5:C5:13:86:7A:E2
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS212983.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8169::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:31:c5:64:76:b3:89:74:e8:70:f0:ee:95:8c:81:5d:85:f9:
         57:85:65:d5:98:4d:68:fc:8f:03:ae:39:4e:d0:58:97:42:fb:
         74:0f:6e:a1:4b:71:c8:de:fb:db:c5:5a:c0:c6:d5:3d:28:0b:
         e0:7a:ed:fe:4b:96:28:53:f4:5e:ab:e7:14:b1:06:5b:e7:d3:
         b7:6a:c6:12:c1:00:4a:e4:a9:18:d7:71:91:61:b2:06:4a:ef:
         80:7c:7a:27:08:be:7c:e5:17:85:8f:fe:21:09:2c:4e:b2:88:
         56:ba:8e:28:3d:d2:64:55:7b:a3:31:f5:14:f9:5d:26:1d:f5:
         64:1d:b9:3f:be:90:f2:7e:62:b4:e0:ff:10:4e:19:8a:ba:dd:
         1b:09:ce:67:dc:5d:4e:f8:48:a1:15:bb:70:38:65:8f:80:90:
         4e:b0:d2:3a:dc:3d:63:e9:4a:4d:15:81:91:2f:c9:a4:45:e2:
         20:86:c7:b5:7f:5f:31:66:33:69:40:94:ba:bd:77:6a:ec:2a:
         d9:d5:90:a3:ef:1d:7e:c1:80:28:6e:26:44:d1:c2:05:3c:78:
         5c:b2:8a:99:77:83:ab:30:dd:ab:b3:f9:6f:fb:13:2c:c1:d1:
         78:10:9e:40:4a:d7:34:06:06:68:8b:c6:cf:78:d0:7b:67:ae:
         32:e0:33:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----