Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS393577.roa
File:                     AS393577.roa (raw, json)
Hash identifier:          iiFMsFjTwBAd1LIugDgc2UtzotryUcfqBSLtQ+7Z55M=
Subject key identifier:   D8:26:B9:9C:57:43:46:49:B4:56:6E:22:F6:47:AA:B5:CF:3E:46:2A
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3B32EA228C5458BAAF24ECA126A1340B25FAE859
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS393577.roa
Signing time:             Sat 08 Apr 2023 09:22:21 +0000
ROA not before:           Sat 08 Apr 2023 09:17:21 +0000
ROA not after:            Sat 06 Apr 2024 09:22:21 +0000
asID:                     393577
IP address blocks:        2a12:dd47:d100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:32:ea:22:8c:54:58:ba:af:24:ec:a1:26:a1:34:0b:25:fa:e8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:21 2023 GMT
            Not After : Apr  6 09:22:21 2024 GMT
        Subject: CN=D826B99C57434649B4566E22F647AAB5CF3E462A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:58:f2:29:be:fb:e6:e6:8c:32:65:d8:78:
                    70:41:ee:a6:b5:e3:4c:b5:59:7e:6e:39:c3:fd:09:
                    46:1f:eb:5a:79:f7:90:2a:8a:6c:59:ea:28:da:6d:
                    4b:d9:42:bb:20:c9:8d:23:23:79:17:50:58:44:03:
                    63:ab:59:0b:f0:78:80:69:fa:91:c5:62:3a:69:f8:
                    72:b8:c7:cb:32:bd:d0:39:97:cf:26:0b:57:66:0e:
                    6f:e0:89:e2:71:86:48:c3:bf:1c:aa:17:50:ce:e4:
                    47:92:ed:64:19:33:39:e8:58:00:ff:bb:7e:20:2a:
                    37:8a:68:16:36:e6:38:c9:f1:c0:1d:51:92:06:65:
                    b0:46:cb:6a:6f:77:07:24:e8:83:35:49:5e:9d:43:
                    9b:36:16:cb:07:4e:64:34:86:32:5c:ec:5f:48:ae:
                    d6:78:20:a3:54:bc:67:02:a4:c9:35:2e:90:83:c9:
                    03:e6:e3:0b:8a:bb:c5:dd:cd:22:ad:e6:9c:b9:9c:
                    6a:b1:1b:9b:d0:1b:b4:c7:6b:00:a8:69:84:ff:ff:
                    d7:b6:8c:e4:3c:c2:66:ae:87:1d:d4:6e:6d:20:db:
                    a1:8e:c2:5b:8d:3a:33:c0:47:32:d9:4c:2c:43:29:
                    29:5c:17:a2:ea:ef:c4:39:6b:7a:4a:23:37:72:f5:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:26:B9:9C:57:43:46:49:B4:56:6E:22:F6:47:AA:B5:CF:3E:46:2A
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS393577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:31:59:39:62:82:99:2c:90:1d:ec:f4:32:2e:6b:83:69:24:
         eb:0a:ad:ce:b7:88:b0:4d:d7:2c:0d:15:80:0a:42:e6:cc:c3:
         ca:76:57:ad:57:81:92:0c:e6:62:a0:13:f6:ad:b3:2b:b7:25:
         de:85:09:94:38:41:20:c4:7e:97:45:77:88:f4:7a:82:35:49:
         29:39:28:46:38:4d:25:1e:79:2e:ff:26:11:68:77:53:51:a5:
         5a:93:77:ac:63:b8:77:34:f7:89:a1:9b:24:b3:f3:02:95:fb:
         e6:86:eb:b6:96:94:30:ea:73:4d:f3:22:cc:37:35:79:17:1e:
         32:c1:1e:ee:a6:77:32:d3:46:27:17:7d:ee:f5:89:fa:94:3c:
         8c:94:6d:e2:9e:a6:6a:0c:fe:46:3a:de:93:ff:66:84:50:30:
         65:19:52:55:6e:c8:ea:f5:4a:c2:de:61:b8:d9:e8:c5:d0:15:
         79:35:66:fd:2e:1e:13:9e:1f:fa:10:89:79:7d:a8:93:24:55:
         d6:0f:97:af:82:42:e5:58:fb:fa:ac:58:bb:cd:29:b9:5d:68:
         03:5e:7d:e4:c0:2d:1e:70:87:3b:37:ed:9f:c2:4a:a5:28:14:
         c8:ca:16:cb:1f:4b:e3:8b:66:4a:ac:c9:14:68:0a:c8:83:9d:
         97:e3:07:9e
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUOzLqIoxUWLqvJOyhJqE0CyX66FkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjFaFw0yNDA0MDYwOTIyMjFaMDMxMTAvBgNV
BAMTKEQ4MjZCOTlDNTc0MzQ2NDlCNDU2NkUyMkY2NDdBQUI1Q0YzRTQ2MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/81jyKb775uaMMmXYeHBB7qa1
40y1WX5uOcP9CUYf61p595AqimxZ6ijabUvZQrsgyY0jI3kXUFhEA2OrWQvweIBp
+pHFYjpp+HK4x8syvdA5l88mC1dmDm/gieJxhkjDvxyqF1DO5EeS7WQZMznoWAD/
u34gKjeKaBY25jjJ8cAdUZIGZbBGy2pvdwck6IM1SV6dQ5s2FssHTmQ0hjJc7F9I
rtZ4IKNUvGcCpMk1LpCDyQPm4wuKu8XdzSKt5py5nGqxG5vQG7THawCoaYT//9e2
jOQ8wmauhx3Ubm0g26GOwluNOjPARzLZTCxDKSlcF6Lq78Q5a3pKIzdy9fPRAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQU2Ca5nFdDRkm0Vm4i9keqtc8+RiowHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMzOTM1Nzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1H0TANBgkqhkiG9w0BAQsF
AAOCAQEAwTFZOWKCmSyQHez0Mi5rg2kk6wqtzreIsE3XLA0VgApC5szDynZXrVeB
kgzmYqAT9q2zK7cl3oUJlDhBIMR+l0V3iPR6gjVJKTkoRjhNJR55Lv8mEWh3U1Gl
WpN3rGO4dzT3iaGbJLPzApX75obrtpaUMOpzTfMizDc1eRceMsEe7qZ3MtNGJxd9
7vWJ+pQ8jJRt4p6magz+Rjrek/9mhFAwZRlSVW7I6vVKwt5huNnoxdAVeTVm/S4e
E54f+hCJeX2okyRV1g+Xr4JC5Vj7+qxYu80puV1oA1595MAtHnCHOzftn8JKpSgU
yMoWyx9L44tmSqzJFGgKyIOdl+MHng==
-----END CERTIFICATE-----