Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS213327.roa
File:                     AS213327.roa (raw, json)
Hash identifier:          UVk1SfD0WKovpeIhIk+GJAyz3D+g3cZ9Z0wD8uo0mxQ=
Subject key identifier:   13:C5:B9:F2:67:76:61:D9:37:3C:0B:C2:DF:C5:85:51:EE:FB:1A:6C
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6689EACFC03214F9B3139792989954E84E9C035B
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS213327.roa
Signing time:             Sat 08 Apr 2023 09:22:09 +0000
ROA not before:           Sat 08 Apr 2023 09:17:09 +0000
ROA not after:            Sat 06 Apr 2024 09:22:09 +0000
asID:                     213327
IP address blocks:        2a12:dd47:804f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:89:ea:cf:c0:32:14:f9:b3:13:97:92:98:99:54:e8:4e:9c:03:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:09 2023 GMT
            Not After : Apr  6 09:22:09 2024 GMT
        Subject: CN=13C5B9F2677661D9373C0BC2DFC58551EEFB1A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:ac:ad:67:c1:b5:ce:a9:8d:18:59:75:e5:
                    0f:86:a4:e6:0f:34:c9:7a:e8:e0:85:46:98:01:2d:
                    52:0c:a0:8a:07:3b:0a:75:a2:a6:57:bd:75:fd:b5:
                    a2:44:9b:e5:24:9f:31:51:5d:18:2a:d0:3f:2a:81:
                    c7:b3:20:aa:0e:3a:3f:fe:5b:7f:63:49:f4:86:2a:
                    25:31:17:54:c9:e5:53:47:64:7e:52:09:84:63:77:
                    5c:bb:e7:2f:76:6d:2a:d6:97:a1:8e:0d:0b:0a:1f:
                    f8:20:e3:cc:c0:5f:f0:bf:48:5e:a2:2c:f1:f3:d9:
                    46:26:c6:9c:0c:bc:29:8d:cf:8c:a3:57:5c:27:1b:
                    79:e6:58:70:8f:93:c2:86:7f:bf:32:22:ba:6b:5d:
                    92:da:31:6c:9d:dd:d2:ef:c8:63:82:8c:5f:4e:16:
                    0d:9a:98:ea:9e:d4:75:29:db:9d:fe:ec:b5:09:18:
                    a1:bd:91:09:d3:94:9d:d7:16:5b:10:90:6c:50:df:
                    99:8e:7f:53:af:b6:da:50:72:69:2b:eb:43:53:cb:
                    95:58:b4:a5:16:91:96:a7:d1:6f:dd:8e:ea:2c:47:
                    ed:dc:b8:72:e2:f3:b1:18:f3:48:ca:c8:df:d2:ab:
                    a7:d5:cc:05:cc:49:c9:36:72:3a:59:c2:56:15:b6:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C5:B9:F2:67:76:61:D9:37:3C:0B:C2:DF:C5:85:51:EE:FB:1A:6C
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS213327.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804f::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:bc:9d:d4:9c:49:48:2f:13:20:1e:c3:ba:1f:24:9a:fa:
         6b:da:21:2e:0d:db:34:ce:79:53:10:ee:fe:a8:30:af:20:ba:
         33:43:a4:e7:5b:07:61:93:99:31:74:db:e9:20:70:70:5b:16:
         ec:f1:0e:6a:8a:c2:70:7e:a3:96:37:31:ee:cc:f2:64:c9:e5:
         96:8f:07:74:69:3d:41:4e:14:47:4f:02:84:86:a9:69:e6:dd:
         91:c4:2b:f5:d2:e2:81:01:e0:23:e0:14:32:75:ed:57:ef:7c:
         85:5d:4d:6d:00:f0:c6:82:ec:f2:e7:e5:18:bf:f7:72:92:d3:
         0b:ff:dc:a5:e5:6e:3e:cd:2d:5d:99:2c:08:97:09:a0:b3:10:
         ff:bd:10:a7:d4:f1:31:f3:3b:16:83:90:94:d9:90:fd:26:eb:
         28:25:8d:a5:7e:d0:7d:71:29:0c:f1:48:b7:00:d7:9d:b6:4f:
         26:ba:a6:4e:50:3a:ef:4b:ad:72:ff:c1:cd:28:62:e0:cc:4b:
         64:f3:0a:b1:8d:17:32:b0:8b:3d:39:a6:cb:87:c5:90:c4:8b:
         0a:ec:28:3d:44:28:6c:ae:37:7f:77:52:ff:6d:85:8c:04:d8:
         de:1f:e9:78:4c:a7:d9:4a:9a:42:33:73:48:6e:b6:b1:15:13:
         80:57:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----