Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS213086.roa
File:                     AS213086.roa (raw, json)
Hash identifier:          9gpsYrkMGEYUsXP2FDAbdNCboqZU8V58mnYAV8H3YqM=
Subject key identifier:   3B:2A:AC:47:49:6F:AE:6F:D7:B1:A7:87:CC:3B:A6:97:BC:8B:DC:A4
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       08E26AB4F7F76E48101578EBC06DACB755453164
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS213086.roa
Signing time:             Sat 08 Apr 2023 09:22:17 +0000
ROA not before:           Sat 08 Apr 2023 09:17:17 +0000
ROA not after:            Sat 06 Apr 2024 09:22:17 +0000
asID:                     213086
IP address blocks:        2a12:dd47:d800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e2:6a:b4:f7:f7:6e:48:10:15:78:eb:c0:6d:ac:b7:55:45:31:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:17 2023 GMT
            Not After : Apr  6 09:22:17 2024 GMT
        Subject: CN=3B2AAC47496FAE6FD7B1A787CC3BA697BC8BDCA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:a2:14:65:1c:c5:42:f7:8a:cb:f3:96:20:
                    26:a4:90:34:9e:3a:94:61:7d:23:dd:6c:5d:8c:86:
                    6f:88:52:fe:cd:1a:7a:5b:79:8a:14:a8:b9:60:4d:
                    fe:27:6c:a8:28:5f:6b:ff:ae:af:ac:0d:ef:74:87:
                    e0:3d:f3:ad:53:cb:02:ff:f9:a7:de:4c:22:aa:d8:
                    36:c8:d6:62:5c:26:90:fb:ad:af:a5:86:44:53:af:
                    fa:07:e3:9b:d6:6f:c8:98:21:8f:08:2a:49:cc:b6:
                    f4:6a:9e:19:d1:75:af:16:0c:05:e7:52:e1:47:b0:
                    67:83:d4:21:8d:38:33:ba:bd:82:c1:c0:13:8a:7a:
                    8c:ce:b0:a4:d6:bc:ad:08:77:85:2b:a5:74:c8:89:
                    2b:44:f0:9f:ab:f8:cd:cf:0e:a8:a2:f5:bb:5e:52:
                    cf:2e:4e:53:fd:b2:10:9e:d8:31:ed:a3:dc:17:39:
                    b8:48:3a:68:63:61:08:1d:2e:4b:5f:98:eb:de:7b:
                    12:9e:54:cb:4c:85:b2:6f:1e:a7:4b:a4:55:24:8d:
                    53:58:d2:c8:01:9e:b6:98:ce:b9:b3:b8:8a:58:46:
                    b2:2e:ae:f8:c0:2b:e8:e5:e1:5f:c9:62:77:3d:11:
                    ee:13:54:38:53:3a:1c:9f:04:31:7b:47:5d:aa:b3:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2A:AC:47:49:6F:AE:6F:D7:B1:A7:87:CC:3B:A6:97:BC:8B:DC:A4
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS213086.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:87:36:7b:00:e3:c0:05:1d:39:6c:c6:1c:03:cb:95:4d:ef:
         7d:38:60:40:c6:71:f0:ca:c3:13:d3:7f:08:6f:5d:c3:ab:61:
         fc:e5:f2:b4:56:9c:fe:31:1d:89:76:e4:be:18:c4:b0:6a:73:
         35:cc:ff:9a:ae:2a:fd:75:a5:10:32:9d:8e:15:8c:44:cd:d3:
         f1:58:d9:64:c4:94:e1:85:b6:b3:3a:3a:38:a6:bb:c2:e7:65:
         cd:88:ca:5c:7e:f8:05:69:50:ef:31:55:ec:79:c8:73:da:82:
         7a:bd:70:6a:28:5a:49:22:ef:d1:1a:81:6a:3e:be:fe:ee:ef:
         29:01:72:76:1f:ab:87:80:20:3a:d6:df:4b:c4:6c:15:cf:5d:
         b1:d0:c1:d2:8a:af:fd:56:28:1f:a6:8d:95:84:74:56:73:59:
         2e:ba:c3:52:1f:b8:53:74:27:03:be:f1:59:22:3f:a6:a2:92:
         f4:df:0e:71:19:00:f0:d7:65:cd:ca:ac:c0:7a:23:0f:43:d8:
         73:5a:c4:7f:3a:0f:fd:ce:c9:e5:b1:9f:9b:66:4d:53:36:89:
         bf:de:bc:ac:2e:a3:3e:de:5f:cb:07:b7:c5:47:44:b5:15:b2:
         15:e3:28:8e:21:e2:0a:46:ce:bb:1d:d2:2a:70:0e:46:a5:4c:
         95:9d:1a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----