Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS56731.roa
File:                     AS56731.roa (raw, json)
Hash identifier:          1JA2dCWrKohk8g6V5o7SX+2DshLeMUm0BCkhaJ0M3oo=
Subject key identifier:   B1:9C:29:6E:CB:70:4E:AF:3D:02:00:48:77:74:C4:EA:A9:C6:AD:15
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       027C54882549A6AD3876853BAD6B2E2B4A0D702C
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS56731.roa
Signing time:             Sat 08 Apr 2023 09:22:21 +0000
ROA not before:           Sat 08 Apr 2023 09:17:21 +0000
ROA not after:            Sat 06 Apr 2024 09:22:21 +0000
asID:                     56731
IP address blocks:        2a12:dd47:8e20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7c:54:88:25:49:a6:ad:38:76:85:3b:ad:6b:2e:2b:4a:0d:70:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:21 2023 GMT
            Not After : Apr  6 09:22:21 2024 GMT
        Subject: CN=B19C296ECB704EAF3D0200487774C4EAA9C6AD15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:5b:a0:42:9d:0d:f4:fb:ac:9f:31:68:9a:
                    7c:79:f3:50:03:ae:b6:5f:5e:45:91:68:4f:ca:9e:
                    16:a5:cc:64:ac:7a:0c:56:b0:40:a3:99:0d:c8:bb:
                    08:d0:5f:b8:df:26:d4:f8:df:9a:2d:96:d9:3d:f3:
                    8e:db:da:45:b5:6a:0a:9f:dc:a6:e1:77:78:5c:b4:
                    4f:99:04:38:38:c4:f3:50:18:55:78:cd:df:46:00:
                    bf:f9:4c:93:19:0c:b3:67:36:41:0c:32:02:d6:ff:
                    7b:a9:e2:85:ea:4d:92:7c:4d:51:a6:f6:f0:6e:55:
                    21:32:27:cc:a9:00:f1:55:8e:0f:b8:d3:ea:fe:f5:
                    f3:24:95:cb:f3:92:8d:98:3b:35:ae:c4:9a:6e:71:
                    90:d0:12:00:fb:ec:cb:0d:8b:73:c3:a2:0d:67:f8:
                    0e:91:6d:5b:66:fc:97:1b:61:17:d3:93:6e:55:a9:
                    2b:4a:b1:32:f9:a9:25:c6:79:38:84:39:1a:b2:9a:
                    bf:b8:15:84:99:e4:58:80:d7:92:b7:63:59:65:ce:
                    b6:2d:d1:3c:54:ff:c8:a2:f3:d3:f8:7d:4e:9b:66:
                    32:2a:02:e6:86:72:15:5f:b6:bc:0c:c9:2f:5e:10:
                    b5:63:e7:d3:22:db:79:af:12:d5:d7:2b:28:f9:25:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9C:29:6E:CB:70:4E:AF:3D:02:00:48:77:74:C4:EA:A9:C6:AD:15
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS56731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:71:22:05:91:52:55:06:57:22:9e:d1:cb:07:f2:b6:c3:4f:
         bb:88:a7:6e:4c:80:b7:29:4e:18:06:81:bc:be:43:25:04:40:
         0d:1f:de:28:2a:05:39:fb:5d:a7:fb:06:77:81:69:4a:91:2f:
         3e:df:57:62:46:01:7c:96:5a:db:02:c0:50:e7:c7:b9:54:35:
         eb:b9:1e:ae:fb:86:3e:5c:3f:1f:dd:e2:bc:78:2f:79:ba:7a:
         90:a6:16:36:f0:fb:63:cf:f0:4e:ec:a3:55:ef:0a:c1:6e:ad:
         34:5d:07:ef:b2:34:13:fa:f9:07:fe:95:12:2b:3b:32:25:d5:
         6b:58:19:dc:ad:16:30:de:05:16:78:46:ca:b0:d1:ff:1a:f1:
         ad:ed:54:01:31:cc:11:1b:b6:e4:ab:58:75:14:eb:bb:af:43:
         1d:48:88:b8:cc:19:39:49:56:7c:58:d5:07:24:9b:a0:5e:14:
         da:ba:ae:35:64:a1:a8:64:8b:a3:93:e8:75:de:1b:6f:bb:8b:
         c2:cc:3b:be:19:06:db:86:14:4a:2f:90:af:72:3f:93:33:cc:
         4e:39:96:e8:9e:12:7a:5e:08:e5:41:5d:bc:c8:0d:ad:ad:cc:
         71:12:95:1e:60:41:83:ad:ac:15:c0:1e:16:a7:b5:91:46:7d:
         88:8d:a5:4a
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUAnxUiCVJpq04doU7rWsuK0oNcCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjFaFw0yNDA0MDYwOTIyMjFaMDMxMTAvBgNV
BAMTKEIxOUMyOTZFQ0I3MDRFQUYzRDAyMDA0ODc3NzRDNEVBQTlDNkFEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+N1ugQp0N9PusnzFomnx581AD
rrZfXkWRaE/KnhalzGSsegxWsECjmQ3IuwjQX7jfJtT435otltk9847b2kW1agqf
3Kbhd3hctE+ZBDg4xPNQGFV4zd9GAL/5TJMZDLNnNkEMMgLW/3up4oXqTZJ8TVGm
9vBuVSEyJ8ypAPFVjg+40+r+9fMklcvzko2YOzWuxJpucZDQEgD77MsNi3PDog1n
+A6RbVtm/JcbYRfTk25VqStKsTL5qSXGeTiEORqymr+4FYSZ5FiA15K3Y1llzrYt
0TxU/8ii89P4fU6bZjIqAuaGchVftrwMyS9eELVj59Mi23mvEtXXKyj5JeuTAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUsZwpbstwTq89AgBId3TE6qnGrRUwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEUG
CCsGAQUFBwELBDkwNzA1BggrBgEFBQcwC4YpcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVM1NjczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeOIDANBgkqhkiG9w0BAQsF
AAOCAQEANXEiBZFSVQZXIp7RywfytsNPu4inbkyAtylOGAaBvL5DJQRADR/eKCoF
Oftdp/sGd4FpSpEvPt9XYkYBfJZa2wLAUOfHuVQ167kervuGPlw/H93ivHgvebp6
kKYWNvD7Y8/wTuyjVe8KwW6tNF0H77I0E/r5B/6VEis7MiXVa1gZ3K0WMN4FFnhG
yrDR/xrxre1UATHMERu25KtYdRTru69DHUiIuMwZOUlWfFjVBySboF4U2rquNWSh
qGSLo5Podd4bb7uLwsw7vhkG24YUSi+Qr3I/kzPMTjmW6J4Sel4I5UFdvMgNra3M
cRKVHmBBg62sFcAeFqe1kUZ9iI2lSg==
-----END CERTIFICATE-----