Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS57401.roa
File:                     AS57401.roa (raw, json)
Hash identifier:          uNn4A8VsoiHnJT6GOY3aAcNvD8Saiw8C86INaFKbiPk=
Subject key identifier:   6D:7B:88:63:29:E9:C9:5E:AC:FD:A9:EA:7B:75:94:1C:46:EC:FE:64
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       4AB0B5B7E9ABE35EEACA426147686DE8E506A327
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS57401.roa
Signing time:             Sat 08 Apr 2023 09:22:10 +0000
ROA not before:           Sat 08 Apr 2023 09:17:10 +0000
ROA not after:            Sat 06 Apr 2024 09:22:10 +0000
asID:                     57401
IP address blocks:        2a12:dd47:8001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b0:b5:b7:e9:ab:e3:5e:ea:ca:42:61:47:68:6d:e8:e5:06:a3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:10 2023 GMT
            Not After : Apr  6 09:22:10 2024 GMT
        Subject: CN=6D7B886329E9C95EACFDA9EA7B75941C46ECFE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:ec:07:55:79:2d:92:eb:20:99:32:10:4b:
                    69:c5:63:90:01:e1:73:cc:9a:07:39:c7:b6:b6:42:
                    f2:80:07:aa:dd:33:52:13:4c:a7:05:8a:f8:62:e6:
                    54:dc:ff:e6:a7:e5:0c:bd:f8:61:fb:11:10:e7:26:
                    25:ac:00:85:ba:bc:0a:dc:10:75:ef:17:b6:46:2f:
                    cb:a6:85:33:bd:14:8e:6f:2a:f4:44:47:7d:8e:a5:
                    a0:38:db:9d:02:1c:62:b0:fd:e1:8e:c0:74:e4:5e:
                    73:e4:f5:8d:c7:cf:19:dd:10:b7:27:15:c6:d6:cd:
                    51:bd:bc:cb:01:a2:87:72:c5:6f:ea:29:72:a2:99:
                    4d:fc:ea:b0:16:b5:bb:56:cd:92:2c:b5:77:1b:44:
                    2e:f2:5a:3d:2d:7a:8d:70:16:76:a0:a7:5f:58:98:
                    44:eb:98:99:53:02:0c:a9:e1:0d:2b:47:ab:da:c8:
                    c5:c4:61:18:7e:10:ef:71:96:ac:cf:09:5f:4e:4d:
                    ac:c5:d1:ef:02:f3:24:28:bc:ef:84:8a:ae:4d:f0:
                    a8:8d:bf:47:b0:99:b9:d2:cb:de:0f:6e:93:74:57:
                    00:37:8c:40:42:95:7c:7c:96:f5:fe:42:a8:f2:a3:
                    26:f9:44:de:c7:45:81:37:a3:a1:95:bc:98:38:f7:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7B:88:63:29:E9:C9:5E:AC:FD:A9:EA:7B:75:94:1C:46:EC:FE:64
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS57401.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:25:ae:7a:f7:7a:45:ad:e9:c7:12:bf:75:7b:a0:25:95:fe:
         30:09:74:60:9b:f4:81:39:8e:25:01:2f:e6:db:2c:6a:ff:d1:
         10:f5:a0:32:b9:22:ab:a3:4c:01:c0:cc:bd:cd:69:50:42:a0:
         81:47:02:a6:2a:f3:06:01:0b:94:71:76:a6:de:99:db:22:5f:
         6d:89:b0:55:6a:bd:71:8d:48:8f:37:f5:14:6c:da:06:e6:eb:
         fd:6f:9c:07:2e:73:e3:ad:4e:8f:52:f6:bf:61:a6:1d:5d:a3:
         e5:0a:78:bc:4c:43:af:50:b7:c3:df:ad:d0:e1:34:1a:01:52:
         8e:2c:93:5e:12:75:80:65:1e:ab:57:20:cc:ff:5c:61:ad:6d:
         a1:3a:45:6b:54:66:83:e8:a2:3c:ac:da:44:43:d8:ae:a7:73:
         43:f4:bd:25:f2:64:03:3f:e9:35:bf:9d:0d:7f:97:e8:40:ea:
         89:65:d4:54:25:f0:5b:72:82:fb:7e:8b:f1:fd:34:16:52:2a:
         d4:f1:51:9f:05:63:84:13:ea:f7:c4:59:58:7d:a5:77:a1:28:
         e6:ff:2a:c3:8f:29:04:14:9a:ba:4d:cb:03:59:1b:b0:db:25:
         ba:53:84:cb:59:35:cc:f6:eb:51:55:39:17:c1:2c:e9:a1:04:
         a6:e3:d2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----