Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS56328.roa
File:                     AS56328.roa (raw, json)
Hash identifier:          1msxFaQx16JcanvA06iImZz/MKk+klv4VVP5yHj0lZk=
Subject key identifier:   9E:05:B2:F3:4C:ED:E1:2C:6E:FB:50:CA:8E:72:3B:E8:A8:EE:B5:A0
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1A9056FBDCD721E8D67D5DFF8BF8F368C4AEA3DB
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS56328.roa
Signing time:             Sat 08 Apr 2023 09:22:14 +0000
ROA not before:           Sat 08 Apr 2023 09:17:14 +0000
ROA not after:            Sat 06 Apr 2024 09:22:14 +0000
asID:                     56328
IP address blocks:        2a12:dd47:8c00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:90:56:fb:dc:d7:21:e8:d6:7d:5d:ff:8b:f8:f3:68:c4:ae:a3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:14 2023 GMT
            Not After : Apr  6 09:22:14 2024 GMT
        Subject: CN=9E05B2F34CEDE12C6EFB50CA8E723BE8A8EEB5A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:aa:8b:57:68:00:a8:6b:0d:11:0b:fe:f2:
                    58:2f:ab:7f:fb:86:6e:5b:7e:32:d3:9e:dc:68:53:
                    f2:20:72:b7:0a:81:fa:aa:44:0c:50:45:a7:1e:75:
                    1f:d9:63:53:8c:42:f0:d3:52:1c:a3:07:d9:17:17:
                    ad:2b:14:38:56:92:c4:1f:79:ac:7a:30:61:3c:c2:
                    ac:c3:44:e3:c3:99:f0:08:3d:2b:18:80:d3:44:34:
                    01:87:38:f7:e3:d1:72:b0:0c:7f:f2:b3:49:cf:8b:
                    c7:de:98:d5:b1:11:c0:80:91:0e:7f:e3:d6:79:f8:
                    ad:b6:a8:1d:29:ab:00:2d:02:5a:4a:59:da:05:7a:
                    0e:52:0d:19:47:ef:ce:4c:f8:bd:9e:e9:86:dc:f1:
                    0d:14:dc:ae:ef:20:05:9e:d3:c0:e7:68:67:eb:0e:
                    d6:0d:24:93:61:cb:d8:5f:6e:73:43:64:ba:9b:0e:
                    6f:b4:78:c7:33:62:c5:bf:74:ba:0a:c6:92:6b:0b:
                    e2:d6:02:a8:46:fc:04:78:27:45:0e:b3:c0:0f:64:
                    b3:27:17:35:fe:50:ab:58:30:93:cb:90:8e:92:d3:
                    0d:5a:67:66:30:66:de:b4:4c:49:56:4c:2f:c1:8d:
                    17:a3:6f:b5:a1:1f:25:35:ca:a0:aa:ba:ba:71:3d:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:B2:F3:4C:ED:E1:2C:6E:FB:50:CA:8E:72:3B:E8:A8:EE:B5:A0
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS56328.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8c00::/39

    Signature Algorithm: sha256WithRSAEncryption
         75:75:5e:08:91:08:47:c1:ab:75:8d:ac:cc:f7:9b:e0:0d:ed:
         36:58:53:c8:ed:72:8a:27:bc:5c:4c:6e:ea:33:31:74:06:8b:
         a1:d3:92:62:a1:6a:0e:d3:6a:3c:3d:82:59:c3:a0:da:9f:64:
         1c:11:a0:61:06:89:ff:d6:c0:28:d8:9b:4f:28:27:91:c9:b5:
         69:a6:00:31:a3:38:a4:6c:17:e6:ad:ff:ef:f7:32:86:cb:f9:
         4b:a4:17:97:75:8b:b9:66:11:07:c0:f8:3f:77:f1:6a:c0:c0:
         81:bc:6d:99:dc:87:8a:2a:92:85:71:c1:ce:be:8e:a8:35:4c:
         1b:0a:da:b4:49:83:88:8f:07:34:85:42:77:ad:ea:32:ec:84:
         c0:ff:28:57:63:d5:6c:ae:c7:df:b6:c4:36:36:f6:7f:cc:46:
         a8:72:73:c3:10:a8:64:90:70:70:3c:9e:fa:04:70:e8:c2:6f:
         6d:c3:34:2a:e1:14:a5:88:66:2a:d0:98:da:9f:08:c5:60:e7:
         90:6f:84:35:3c:18:b6:76:4d:10:39:c0:c8:36:f8:89:51:2e:
         a5:10:98:47:d8:c0:56:51:6c:4f:0d:bc:57:14:1c:ae:54:7d:
         f9:dd:0c:32:0b:6f:99:54:ff:15:0d:70:6a:7e:04:67:30:a6:
         12:37:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----