Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS213036.roa
File:                     AS213036.roa (raw, json)
Hash identifier:          +Iw9M9r3CGhoXJrfmVVcOdemGHqAdToAtBIFoZpwp5s=
Subject key identifier:   A7:9B:05:29:D8:47:87:C0:1E:B3:E6:00:14:B3:3D:C1:0B:70:7C:C9
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       4E2D1BF55535B48E95FD15332CA7168DC1CF6851
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS213036.roa
Signing time:             Sat 08 Apr 2023 09:22:22 +0000
ROA not before:           Sat 08 Apr 2023 09:17:22 +0000
ROA not after:            Sat 06 Apr 2024 09:22:22 +0000
asID:                     213036
IP address blocks:        2a12:dd47:8330::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2d:1b:f5:55:35:b4:8e:95:fd:15:33:2c:a7:16:8d:c1:cf:68:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:22 2023 GMT
            Not After : Apr  6 09:22:22 2024 GMT
        Subject: CN=A79B0529D84787C01EB3E60014B33DC10B707CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:35:70:de:4a:74:08:4c:74:f6:8c:d6:e7:77:
                    82:86:70:48:31:77:fb:1f:e0:4b:69:08:4b:d3:15:
                    95:e4:3a:a7:f5:ff:fa:a8:98:c2:68:c2:32:cb:12:
                    97:63:76:b2:8e:8c:92:45:b3:28:c5:21:db:2e:97:
                    d3:d0:3f:ab:1c:c1:d8:e7:ae:85:6a:54:73:d1:73:
                    48:8f:e7:dc:b7:6d:54:56:4c:0d:31:cc:16:04:d1:
                    1d:a1:91:da:bf:07:5e:82:be:a9:06:7c:03:c3:8e:
                    9b:94:38:d8:f7:c1:26:03:d0:d0:c2:43:ae:4b:2b:
                    b0:1e:77:5a:d7:85:05:0a:26:0d:1f:b2:49:79:84:
                    11:11:d1:85:0d:b9:05:30:9f:56:5f:da:d7:2d:32:
                    cc:43:85:c8:24:25:ae:4e:5f:e2:48:73:81:91:77:
                    40:2a:9e:ff:17:92:a5:93:92:59:94:90:77:54:57:
                    ef:8e:f2:f6:8a:8a:b6:38:0a:a4:e9:a3:20:fa:31:
                    0a:5b:91:7a:86:f5:1f:aa:99:85:25:ff:59:f6:3b:
                    cc:53:16:d0:a5:1a:0e:47:68:1f:cc:4f:c4:2f:06:
                    53:4e:84:36:24:99:15:2c:d7:8e:25:9d:0b:4f:45:
                    9d:62:6b:6b:db:63:02:09:c7:a5:82:6c:dc:a8:d2:
                    e3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9B:05:29:D8:47:87:C0:1E:B3:E6:00:14:B3:3D:C1:0B:70:7C:C9
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS213036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8330::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:cb:be:6c:f0:eb:1f:ac:de:24:47:3f:28:3f:8d:66:af:
         02:77:a2:61:ce:94:39:60:90:61:c8:5c:5e:53:30:89:b8:d4:
         b6:59:2e:00:ed:55:6c:b1:5b:bd:cc:31:01:b7:2a:26:37:91:
         c8:d8:d9:f0:e6:e6:97:a4:94:77:94:ed:c0:c7:33:8f:54:d3:
         f7:7b:b8:d1:db:02:31:5f:ce:44:85:5b:77:e2:f3:b7:39:4d:
         1f:41:f8:29:9b:09:67:ea:bf:ca:19:d2:2c:47:bb:88:01:67:
         c9:65:0b:fe:d9:5a:c8:da:55:8b:0f:fc:c7:56:5d:42:26:d7:
         2f:ba:51:69:16:e1:19:05:5d:2c:be:a9:6b:1e:0f:a7:b5:d9:
         b0:72:33:4b:43:1a:e1:a6:e9:c0:a9:2e:37:ef:1a:14:79:0c:
         b4:33:43:27:4a:74:2d:a3:47:9e:c2:1f:26:ee:2d:8a:24:b3:
         87:64:1e:c9:f5:42:e5:44:c1:e3:a3:35:78:74:a2:c1:0d:f4:
         88:26:8e:e4:aa:33:21:6e:a1:22:b6:83:b6:61:50:83:82:d1:
         3f:c6:a5:1b:9a:be:d2:ed:75:2c:c8:3e:e1:ef:67:e2:7b:ae:
         f9:88:41:32:a5:fa:c4:dc:bb:92:80:e1:a1:65:b3:cc:37:76:
         29:9a:4a:e5
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUTi0b9VU1tI6V/RUzLKcWjcHPaFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjJaFw0yNDA0MDYwOTIyMjJaMDMxMTAvBgNV
BAMTKEE3OUIwNTI5RDg0Nzg3QzAxRUIzRTYwMDE0QjMzREMxMEI3MDdDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaNXDeSnQITHT2jNbnd4KGcEgx
d/sf4EtpCEvTFZXkOqf1//qomMJowjLLEpdjdrKOjJJFsyjFIdsul9PQP6scwdjn
roVqVHPRc0iP59y3bVRWTA0xzBYE0R2hkdq/B16CvqkGfAPDjpuUONj3wSYD0NDC
Q65LK7Aed1rXhQUKJg0fskl5hBER0YUNuQUwn1Zf2tctMsxDhcgkJa5OX+JIc4GR
d0Aqnv8XkqWTklmUkHdUV++O8vaKirY4CqTpoyD6MQpbkXqG9R+qmYUl/1n2O8xT
FtClGg5HaB/MT8QvBlNOhDYkmRUs144lnQtPRZ1ia2vbYwIJx6WCbNyo0uP5AgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUp5sFKdhHh8Aes+YAFLM9wQtwfMkwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgzAwDQYJKoZIhvcNAQEL
BQADggEBAD/Vy75s8OsfrN4kRz8oP41mrwJ3omHOlDlgkGHIXF5TMIm41LZZLgDt
VWyxW73MMQG3KiY3kcjY2fDm5peklHeU7cDHM49U0/d7uNHbAjFfzkSFW3fi87c5
TR9B+CmbCWfqv8oZ0ixHu4gBZ8llC/7ZWsjaVYsP/MdWXUIm1y+6UWkW4RkFXSy+
qWseD6e12bByM0tDGuGm6cCpLjfvGhR5DLQzQydKdC2jR57CHybuLYoks4dkHsn1
QuVEweOjNXh0osEN9IgmjuSqMyFuoSK2g7ZhUIOC0T/GpRuavtLtdSzIPuHvZ+J7
rvmIQTKl+sTcu5KA4aFls8w3dimaSuU=
-----END CERTIFICATE-----