Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS213267.roa
File:                     AS213267.roa (raw, json)
Hash identifier:          vAK1olSozEYhvVf2bB84Ns/I9H8mUdi4gsEL2LnZNww=
Subject key identifier:   41:67:61:89:C9:94:5F:1C:48:46:51:D3:D4:F9:4B:26:C6:FD:ED:BA
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       65414ECA8953C1857A1EF399FD1EBF39DEC09634
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS213267.roa
Signing time:             Sat 08 Apr 2023 09:22:15 +0000
ROA not before:           Sat 08 Apr 2023 09:17:15 +0000
ROA not after:            Sat 06 Apr 2024 09:22:15 +0000
asID:                     213267
IP address blocks:        2a12:dd47:de00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:41:4e:ca:89:53:c1:85:7a:1e:f3:99:fd:1e:bf:39:de:c0:96:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:15 2023 GMT
            Not After : Apr  6 09:22:15 2024 GMT
        Subject: CN=41676189C9945F1C484651D3D4F94B26C6FDEDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:0c:5c:07:90:1f:96:c1:3c:bb:69:22:3d:
                    e5:0a:4f:7e:24:4f:37:68:96:34:c3:7b:a6:e2:1a:
                    bc:9e:61:80:0b:aa:ad:bf:07:4d:4c:f2:38:b7:18:
                    e9:b5:6e:b6:81:eb:8a:24:68:76:dc:26:e8:db:7d:
                    dc:ad:1c:44:dd:d3:fe:e5:38:5a:51:4f:6b:c1:24:
                    e2:1b:d1:da:e3:56:00:18:6b:8d:78:53:d5:ea:1c:
                    b0:7e:36:10:d3:00:f3:7a:a6:d1:ff:08:d5:33:22:
                    31:6d:cc:7b:03:ec:04:0b:3b:27:d1:ea:21:b2:11:
                    36:82:89:a0:8a:4b:48:c9:88:c0:64:1e:38:d3:b0:
                    da:a2:0a:5f:d7:b6:2c:aa:c1:67:4c:8d:4f:2e:ce:
                    12:d4:16:04:06:63:fc:1e:a0:21:fc:08:7f:f5:be:
                    37:bf:17:1e:54:b5:a1:59:b8:75:2e:df:4a:ce:0a:
                    11:0b:dd:86:53:c2:64:e1:a1:fe:13:d0:0a:49:04:
                    09:40:00:7f:76:8b:14:22:ae:1c:12:21:52:2b:07:
                    29:7f:54:98:6c:8c:69:5f:fd:b1:ad:76:ca:d1:34:
                    9d:6c:a5:1f:07:ac:38:6f:02:3e:f8:3e:2a:2e:98:
                    71:b5:40:55:6a:73:f6:78:3e:ce:33:b8:21:e6:35:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:67:61:89:C9:94:5F:1C:48:46:51:D3:D4:F9:4B:26:C6:FD:ED:BA
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS213267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:de00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:73:7c:83:ca:48:89:cb:ca:e3:e3:33:1a:ac:e3:7d:47:
         82:d6:57:9b:11:2b:95:f3:bb:6e:c6:d0:96:4c:3a:0c:a5:a4:
         3e:97:f0:40:7d:2b:d6:62:02:56:95:be:54:68:cf:6b:1c:51:
         20:9b:0b:9b:b3:fe:b1:92:c9:5f:20:d4:bd:fa:66:24:bb:0c:
         b1:8a:76:30:a2:94:e2:fb:17:a0:9e:6c:d5:d5:18:07:f3:7a:
         dd:27:e7:b9:69:e2:0c:b8:51:a3:4b:a2:90:62:26:c5:80:a7:
         4d:af:a9:ac:bd:13:4f:91:83:06:be:06:9e:bb:5a:df:12:a4:
         7b:be:89:ff:d8:37:65:7e:75:ff:13:23:99:54:7e:9b:4e:df:
         77:5e:4f:04:c2:e3:41:81:0b:ec:21:46:fe:20:8b:fd:c7:5d:
         0c:86:24:7e:3b:29:e0:1e:97:99:00:3a:1f:3e:11:d8:6b:a2:
         fb:72:94:cf:71:34:28:35:fb:29:f3:95:28:e2:ef:9c:f4:53:
         81:1d:df:40:d4:64:3f:c9:71:0a:11:fb:ff:26:5f:d5:84:2b:
         01:da:bf:00:0a:bd:f9:2b:42:b6:18:b1:54:b5:cb:e0:05:06:
         e9:94:71:4b:a1:78:f2:b6:e6:d0:64:3e:00:8f:0e:1b:3c:d2:
         93:83:69:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----