Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS213045.roa
File:                     AS213045.roa (raw, json)
Hash identifier:          xxZNywh2Lvnx49Q8Y5VoMn0qyOocFsshYqpSYpXk6RI=
Subject key identifier:   F9:AD:98:18:0D:02:7A:2C:5F:AE:21:59:D5:F7:29:DA:FA:64:55:3D
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       7BD668C152E310846883C4F116F76C6169D1635A
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS213045.roa
Signing time:             Sat 08 Apr 2023 09:22:12 +0000
ROA not before:           Sat 08 Apr 2023 09:17:12 +0000
ROA not after:            Sat 06 Apr 2024 09:22:12 +0000
asID:                     213045
IP address blocks:        2a12:dd47:8075::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d6:68:c1:52:e3:10:84:68:83:c4:f1:16:f7:6c:61:69:d1:63:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:12 2023 GMT
            Not After : Apr  6 09:22:12 2024 GMT
        Subject: CN=F9AD98180D027A2C5FAE2159D5F729DAFA64553D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:aa:0f:91:ed:8f:6e:4b:f8:07:54:6d:5b:
                    3d:f9:69:ca:c0:53:98:9a:a5:51:f4:0e:99:e2:87:
                    87:c4:cc:60:27:06:b5:35:7e:5f:04:29:e3:e9:86:
                    f2:f2:b5:b7:4a:ca:15:72:8c:5e:df:a3:ff:39:a8:
                    06:c5:da:c0:74:5a:a5:6f:18:f0:43:09:02:34:1a:
                    6f:17:9d:ed:1d:47:d6:a7:67:6b:02:e3:8d:62:14:
                    b9:ac:bf:48:24:3e:91:e1:c5:22:1b:9b:5d:d2:49:
                    81:05:d7:e7:3f:ed:0e:df:cc:95:53:12:77:a6:04:
                    15:3f:77:32:bf:82:91:19:16:4e:75:11:ff:c2:04:
                    0f:9b:c4:b1:b9:31:11:71:9a:6f:81:5a:0a:c1:00:
                    25:53:30:14:37:5c:37:29:c0:9a:b7:a5:7a:f8:71:
                    ad:74:c5:26:53:c5:7b:4c:11:0d:aa:6b:84:a4:ba:
                    09:4a:7e:54:5c:66:e0:27:5f:67:ef:2f:f2:ac:22:
                    7b:51:88:21:ac:10:0f:45:75:bc:8f:0b:f3:54:2f:
                    02:c0:5a:e3:11:08:e6:43:32:c0:b7:a8:ce:b2:e7:
                    bc:2b:0f:3a:6b:f9:42:84:86:d5:93:59:8c:39:1f:
                    e6:8e:1f:85:61:f7:4b:f8:af:40:45:61:ad:40:46:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AD:98:18:0D:02:7A:2C:5F:AE:21:59:D5:F7:29:DA:FA:64:55:3D
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS213045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8075::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:b9:99:68:bf:5a:61:b7:43:5f:17:ab:7d:4e:3c:9d:c7:
         9a:2c:b0:9e:0f:55:65:57:24:3a:51:8d:c9:80:23:a3:17:da:
         ea:80:d0:7a:62:93:87:39:0f:e4:97:e3:73:02:77:c3:23:78:
         93:a0:14:d3:eb:71:cd:4e:48:de:f0:cc:d5:00:67:40:67:06:
         8b:70:4f:99:d6:26:e9:da:15:6c:b6:af:c5:e7:69:df:2f:c1:
         f8:28:be:f0:5e:6f:4f:2e:af:a1:4d:79:c3:ad:f7:8b:cd:7b:
         26:02:e2:50:a5:a0:69:b3:8d:35:7c:63:f9:3c:ad:d4:b5:ff:
         7f:a5:f9:70:c5:6f:e0:07:f5:2e:20:b8:d8:e5:85:2e:79:65:
         ed:4f:29:59:65:c7:3a:a1:4d:0a:61:7b:b7:fc:48:2c:5f:8f:
         7d:d4:66:1f:74:50:2c:35:fd:58:9c:0e:f7:2a:0c:0b:0a:aa:
         3c:47:be:e1:21:76:3b:27:1f:94:de:a6:c0:83:69:9e:aa:42:
         2b:ee:2e:66:d0:5f:44:30:17:72:37:7e:d1:cf:91:ec:69:2a:
         c6:a0:70:00:a5:d5:22:c6:e4:34:75:a2:b8:73:f7:d9:11:8c:
         eb:88:65:37:94:55:41:b3:5f:4c:c1:fa:33:c9:b7:5a:68:d5:
         f1:42:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----