Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS56808.roa
File:                     AS56808.roa (raw, json)
Hash identifier:          WLtbe2IRynXzrwVMWkBdpconBa61VttZk56PLhBT2hA=
Subject key identifier:   78:4B:97:41:15:58:A9:9C:C7:75:CD:4F:96:9C:7F:7C:DE:3D:E0:BF
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       11CED9E895D0E9CE693845AA58085A35E6C95974
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS56808.roa
Signing time:             Sat 08 Apr 2023 09:22:16 +0000
ROA not before:           Sat 08 Apr 2023 09:17:16 +0000
ROA not after:            Sat 06 Apr 2024 09:22:16 +0000
asID:                     56808
IP address blocks:        2a12:dd47:804e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ce:d9:e8:95:d0:e9:ce:69:38:45:aa:58:08:5a:35:e6:c9:59:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:16 2023 GMT
            Not After : Apr  6 09:22:16 2024 GMT
        Subject: CN=784B97411558A99CC775CD4F969C7F7CDE3DE0BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:29:b3:e4:28:72:ab:ae:30:cc:47:ce:9c:
                    5b:2d:47:fc:ec:8d:c4:fb:9f:e6:d7:c7:b2:d8:a6:
                    aa:17:a2:08:24:ff:68:bc:ba:ef:18:1c:5a:09:e2:
                    58:e9:9b:cd:c2:9f:05:66:57:05:e4:51:83:03:da:
                    b2:75:2e:e8:01:15:a0:9a:3c:9b:26:3b:55:b9:fb:
                    94:a7:86:94:ec:8f:4f:33:f7:1b:69:c0:3f:ed:b1:
                    34:bf:be:43:0e:8f:fd:0b:4d:88:ec:72:3d:59:53:
                    0e:13:42:08:a9:ce:e5:b3:ae:3b:e3:32:9a:4d:0b:
                    f9:c3:a4:47:41:4a:56:bf:02:01:51:10:66:c9:51:
                    bd:46:17:1a:95:ab:e0:24:9c:8c:8a:b4:57:5d:4b:
                    7e:d4:b8:7c:38:32:2d:0b:eb:da:9e:5a:1a:bc:b6:
                    2e:ec:d6:b7:45:94:cd:c7:db:3d:7f:7b:7b:b9:ad:
                    6c:c0:9c:8b:c1:15:d4:73:6c:0b:72:2c:82:95:35:
                    63:ab:8f:b5:a1:63:b9:88:60:bc:37:6f:ea:a1:d2:
                    bd:26:81:55:b1:da:74:fc:84:be:70:a6:b1:db:f9:
                    35:c5:6e:c0:c3:08:dd:3f:11:c9:45:37:3f:7b:14:
                    b0:92:9e:fc:11:d0:29:f0:13:0b:b7:48:a7:a2:d4:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4B:97:41:15:58:A9:9C:C7:75:CD:4F:96:9C:7F:7C:DE:3D:E0:BF
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS56808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804e::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:65:69:f0:02:11:4f:35:3b:75:95:8a:93:38:ff:d2:04:86:
         57:df:2d:d3:a6:cd:10:93:bc:49:c4:be:a8:af:6d:ce:23:91:
         32:74:25:e0:be:ff:d1:e6:b1:b3:f8:2c:2a:56:c3:fb:f7:48:
         68:11:50:42:65:c7:8b:23:ac:23:a1:f1:61:88:ea:7f:d4:75:
         5f:c6:b8:11:dc:ae:39:e0:88:ec:f0:50:98:f2:72:86:9d:a7:
         cc:d8:3d:ba:93:ae:d3:ee:cb:85:4e:8f:3e:bf:0c:9a:87:1c:
         8a:79:dd:40:32:f9:37:e8:51:73:cd:74:03:1b:b4:98:f4:3f:
         57:77:ff:fd:e6:98:05:20:0c:82:88:55:a5:60:df:8b:95:a4:
         ff:9e:8a:eb:7b:71:cd:db:1e:0d:ba:c5:fb:da:0e:82:9a:8e:
         cf:d4:b0:e9:db:af:64:6a:ac:56:8e:94:34:5d:a7:83:af:b7:
         b9:4a:ae:3b:cf:a0:74:1b:b4:e2:2f:00:0b:e6:e1:32:10:5d:
         40:db:cf:e6:a2:17:2c:20:8e:0b:cd:1c:31:78:90:63:6c:47:
         14:a5:bf:4e:c6:a3:8d:3c:34:2e:aa:00:e0:47:dd:3e:8b:0f:
         26:9b:b0:8b:92:4c:57:3f:08:57:83:35:a1:21:80:d0:31:a5:
         3e:95:71:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----