Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS21738.roa
File:                     AS21738.roa (raw, json)
Hash identifier:          Xajg38CKEQV+UjUixnvhYc415MquJF73QeqbMc9Z7Cg=
Subject key identifier:   4C:9F:59:67:C7:96:5D:6D:2B:61:9E:A0:23:F0:EA:18:41:2A:69:C4
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3225EB0ADABEE8B20A3116EBE313D478D81D347C
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS21738.roa
Signing time:             Sat 08 Apr 2023 09:22:28 +0000
ROA not before:           Sat 08 Apr 2023 09:17:28 +0000
ROA not after:            Sat 06 Apr 2024 09:22:28 +0000
asID:                     21738
IP address blocks:        2a12:dd47:5f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:25:eb:0a:da:be:e8:b2:0a:31:16:eb:e3:13:d4:78:d8:1d:34:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:28 2023 GMT
            Not After : Apr  6 09:22:28 2024 GMT
        Subject: CN=4C9F5967C7965D6D2B619EA023F0EA18412A69C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:f8:2b:cb:7b:5c:73:8e:59:0c:e3:3d:4a:
                    2b:47:36:68:57:0c:2e:96:45:10:ce:39:b0:45:f4:
                    6e:e1:72:6b:1c:a9:ff:cb:92:68:a7:c4:02:b3:55:
                    1d:b2:45:bc:b7:98:7a:81:58:c3:cb:06:c4:5a:c3:
                    43:02:b5:c8:ed:3f:ad:37:33:d6:03:75:5f:64:91:
                    74:12:9f:cf:ac:a7:17:c7:14:c7:f5:78:f8:37:bd:
                    30:fb:f2:65:19:7b:27:99:eb:4d:15:97:54:99:db:
                    c1:e0:af:13:5f:f6:47:90:34:c8:4e:69:6b:c4:29:
                    7b:30:15:a7:0c:71:cf:8e:4f:31:e3:19:97:8b:2b:
                    70:ec:2e:6e:d1:ac:10:c3:b6:fe:2b:2c:f0:02:26:
                    88:7c:63:f1:24:d1:77:1c:22:9e:56:35:5d:3b:23:
                    0f:20:ed:4a:3c:f9:e5:b2:b8:92:d4:7e:1f:1b:70:
                    e4:4f:22:d8:95:82:43:a8:7e:b7:3c:a7:a7:40:93:
                    63:41:8f:82:62:85:bb:c0:c0:a3:ac:0e:a2:fd:3e:
                    a2:3b:be:3b:7e:f7:6a:f0:91:96:aa:24:16:f8:8f:
                    53:33:67:7f:00:26:de:bf:5e:44:93:b3:49:14:71:
                    79:e9:67:7c:12:c8:d7:cd:91:21:d8:6b:0b:be:bd:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9F:59:67:C7:96:5D:6D:2B:61:9E:A0:23:F0:EA:18:41:2A:69:C4
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS21738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:f0:5c:de:06:b4:df:47:f9:98:b4:6a:8e:7b:31:70:2f:5e:
         3a:bc:7c:2b:18:4e:5e:47:37:04:de:2d:fb:ae:ed:03:59:0d:
         d3:a8:d7:73:24:ef:7d:56:ed:d8:4b:78:24:fd:01:52:74:64:
         16:02:7c:52:d5:b2:a5:1d:24:75:e0:fa:96:29:fe:e2:6b:5a:
         9d:45:77:cd:77:39:f5:76:30:44:99:e4:c4:af:2f:79:4e:42:
         e6:f9:a8:09:00:77:c3:54:ea:99:14:09:a5:b4:87:d8:8a:02:
         77:68:ba:72:66:40:09:8f:1f:7f:34:7e:be:f8:5b:11:10:e9:
         8f:7e:70:d5:6e:38:6b:11:c9:6c:9c:c6:cf:6d:8c:97:27:6a:
         52:b6:44:51:f2:34:6a:ad:1c:17:9a:a6:3f:39:0e:01:7c:24:
         d6:50:1d:46:39:31:cf:a4:75:24:4a:5f:51:af:c3:f1:a4:6c:
         ab:8c:2a:9a:00:51:b0:f5:14:67:aa:72:5b:40:df:82:47:51:
         38:67:a5:10:30:2c:d0:65:f4:9a:dd:8d:4e:3f:5c:4a:e4:21:
         a1:51:ee:a8:44:eb:cb:29:d3:3b:43:d6:fb:6a:e7:f7:ad:aa:
         0a:37:54:14:fd:c2:06:d6:b6:29:d4:4a:64:99:66:13:5e:65:
         fb:28:92:b6
-----BEGIN CERTIFICATE-----
MIIEkTCCA3mgAwIBAgIUMiXrCtq+6LIKMRbr4xPUeNgdNHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjhaFw0yNDA0MDYwOTIyMjhaMDMxMTAvBgNV
BAMTKDRDOUY1OTY3Qzc5NjVENkQyQjYxOUVBMDIzRjBFQTE4NDEyQTY5QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+fgry3tcc45ZDOM9SitHNmhX
DC6WRRDOObBF9G7hcmscqf/LkminxAKzVR2yRby3mHqBWMPLBsRaw0MCtcjtP603
M9YDdV9kkXQSn8+spxfHFMf1ePg3vTD78mUZeyeZ600Vl1SZ28HgrxNf9keQNMhO
aWvEKXswFacMcc+OTzHjGZeLK3DsLm7RrBDDtv4rLPACJoh8Y/Ek0XccIp5WNV07
Iw8g7Uo8+eWyuJLUfh8bcORPItiVgkOofrc8p6dAk2NBj4JihbvAwKOsDqL9PqI7
vjt+92rwkZaqJBb4j1MzZ38AJt6/XkSTs0kUcXnpZ3wSyNfNkSHYawu+vcx3AgMB
AAGjggGbMIIBlzAdBgNVHQ4EFgQUTJ9ZZ8eWXW0rYZ6gI/DqGEEqacQwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEUG
CCsGAQUFBwELBDkwNzA1BggrBgEFBQcwC4YpcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMTczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UdfMA0GCSqGSIb3DQEBCwUA
A4IBAQBw8FzeBrTfR/mYtGqOezFwL146vHwrGE5eRzcE3i37ru0DWQ3TqNdzJO99
Vu3YS3gk/QFSdGQWAnxS1bKlHSR14PqWKf7ia1qdRXfNdzn1djBEmeTEry95TkLm
+agJAHfDVOqZFAmltIfYigJ3aLpyZkAJjx9/NH6++FsREOmPfnDVbjhrEclsnMbP
bYyXJ2pStkRR8jRqrRwXmqY/OQ4BfCTWUB1GOTHPpHUkSl9Rr8PxpGyrjCqaAFGw
9RRnqnJbQN+CR1E4Z6UQMCzQZfSa3Y1OP1xK5CGhUe6oROvLKdM7Q9b7auf3raoK
N1QU/cIG1rYp1EpkmWYTXmX7KJK2
-----END CERTIFICATE-----