Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS35913.roa
File:                     AS35913.roa (raw, json)
Hash identifier:          0yLMs3rAp5uFD4JR4jRScAxLrB6lo4Vutr/a9869aT0=
Subject key identifier:   98:9F:D4:C2:76:0B:70:06:21:33:E4:28:BD:C3:A2:3C:36:C2:E8:DC
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       25031632BBE16ACB52D76D525B817F9B7956CA2C
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS35913.roa
Signing time:             Sat 08 Apr 2023 09:22:19 +0000
ROA not before:           Sat 08 Apr 2023 09:17:19 +0000
ROA not after:            Sat 06 Apr 2024 09:22:19 +0000
asID:                     35913
IP address blocks:        2a12:dd47:804b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:03:16:32:bb:e1:6a:cb:52:d7:6d:52:5b:81:7f:9b:79:56:ca:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:19 2023 GMT
            Not After : Apr  6 09:22:19 2024 GMT
        Subject: CN=989FD4C2760B70062133E428BDC3A23C36C2E8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:94:08:c3:15:4b:57:2e:cc:d9:af:90:a0:6f:
                    50:13:33:44:12:ea:94:61:8f:ba:69:7a:23:d3:74:
                    56:1c:32:7b:31:78:b4:f4:db:f2:1e:a1:49:3d:78:
                    12:47:e7:df:ea:0a:8f:2d:95:71:24:76:be:ad:66:
                    a9:b9:3d:6d:ee:47:c6:e7:5e:1e:71:9c:79:d8:01:
                    5f:23:1c:e2:ad:2f:5e:35:29:f6:6f:6e:e8:8c:79:
                    19:b9:66:0b:a6:a3:7f:ea:f2:cb:4c:c6:e4:cd:44:
                    be:b1:27:59:3e:0d:69:36:b0:77:03:bf:92:af:d4:
                    04:e9:28:6d:23:20:dc:96:60:2b:ae:e9:d0:20:9a:
                    57:5b:37:c4:cb:50:39:a2:aa:55:7c:91:aa:ee:94:
                    2d:99:55:c8:0a:d1:04:54:17:a4:eb:d0:2e:62:53:
                    e8:5a:59:66:6c:14:e2:03:07:84:64:f8:f4:a8:32:
                    3d:81:f3:bf:78:50:c7:3a:ff:2f:96:b3:69:e1:bc:
                    3e:84:c7:87:73:4f:c9:d3:19:90:86:ba:64:58:8b:
                    d1:e2:4d:77:c3:79:49:a5:be:b0:68:70:80:54:4d:
                    f2:ab:a1:37:40:17:be:92:55:aa:76:94:6e:3a:ef:
                    a5:cb:f5:8e:73:3d:b3:d0:fa:b7:07:e4:c2:a7:95:
                    ed:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9F:D4:C2:76:0B:70:06:21:33:E4:28:BD:C3:A2:3C:36:C2:E8:DC
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS35913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:36:c5:dc:b9:a2:0a:b8:ec:f4:91:90:0c:9c:5d:75:c7:57:
         ac:f0:50:14:ee:5a:22:39:eb:ce:29:e2:c0:85:92:ca:ad:f0:
         36:78:8b:fc:89:53:c1:2c:c1:75:d0:b6:e6:c8:62:5f:54:c7:
         e7:61:8b:2d:38:ae:33:d1:6e:7c:6b:2a:de:4c:33:e0:9c:d8:
         47:f3:90:59:a0:b1:03:20:99:ca:e1:a9:ed:69:55:66:c2:1a:
         5f:8b:a7:62:3e:c7:97:71:7d:e2:85:cd:82:00:26:32:3f:30:
         b4:ed:1d:ba:21:75:1a:fe:98:fd:0a:2f:bc:15:25:0f:0a:3e:
         05:2d:40:65:08:4a:b6:45:fe:49:57:bb:a1:5f:c1:6b:43:b0:
         0a:98:bf:bf:d6:1a:c2:6e:a6:db:7c:ef:92:ff:df:1b:31:4b:
         03:24:96:ba:87:e6:3b:41:e4:97:be:51:99:7f:ee:cf:71:aa:
         4e:f2:a4:1d:8f:7f:84:bd:94:7e:b7:0f:e8:b0:bd:b7:aa:54:
         10:9d:2f:fa:5b:23:37:61:a6:f2:4a:4c:e7:85:3f:b7:9b:53:
         54:cb:0b:b5:03:c2:f9:64:6d:07:5c:70:de:79:e5:2b:79:dd:
         28:2c:88:ff:51:12:81:9c:73:c4:e9:3f:54:14:de:dd:48:90:
         a1:05:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----