Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS8075.roa
File:                     AS8075.roa (raw, json)
Hash identifier:          0Tr46VhWwuvrhw7X+XgwkK/cBJvQkWTptP9obfUmn0k=
Subject key identifier:   30:B9:40:BF:48:79:DF:AE:AD:EE:61:B4:78:52:0C:5A:62:6B:4B:AB
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2C18842D4052F9C57AF58A985A38F27716A6EB86
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS8075.roa
Signing time:             Sun 09 Apr 2023 21:05:36 +0000
ROA not before:           Sun 09 Apr 2023 21:00:36 +0000
ROA not after:            Sun 07 Apr 2024 21:05:36 +0000
asID:                     8075
IP address blocks:        2a12:dd47:5300::/40 maxlen: 40
                          2a12:dd47:8280::/44 maxlen: 44
                          2a12:dd47:8a00::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:18:84:2d:40:52:f9:c5:7a:f5:8a:98:5a:38:f2:77:16:a6:eb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  9 21:00:36 2023 GMT
            Not After : Apr  7 21:05:36 2024 GMT
        Subject: CN=30B940BF4879DFAEADEE61B478520C5A626B4BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:be:af:b4:22:24:d9:65:b7:fe:1f:e0:28:
                    35:17:a9:4d:c1:9a:cd:05:2b:e5:7b:1e:cc:f7:34:
                    d7:d3:5d:42:ec:a8:1c:93:74:f6:14:fb:da:7a:76:
                    b4:a2:6f:5e:c9:d6:2d:f7:6a:4c:b8:e8:51:c0:42:
                    47:57:64:bc:85:69:a6:99:81:0c:5c:e1:37:98:40:
                    b8:46:e6:a5:7e:b4:4e:e1:eb:3b:6f:87:04:71:57:
                    d8:91:02:a5:17:9b:2c:9a:93:a5:c5:15:89:60:1d:
                    32:a4:7d:54:62:92:18:39:35:52:f3:c2:63:21:8f:
                    52:e6:8f:5f:68:9d:6c:04:22:2c:7a:9b:d9:6b:d0:
                    09:14:f2:de:b0:1b:a1:61:71:39:49:54:09:b2:0d:
                    58:b4:da:4f:dd:2f:83:57:1c:4a:18:ba:e9:a2:89:
                    8c:10:0b:98:5a:da:39:de:a6:c0:1b:3f:77:d4:d9:
                    6b:9b:41:77:62:44:be:07:b6:78:29:d1:89:b9:c8:
                    5c:d4:6f:af:da:80:5b:4f:62:29:28:16:ed:96:55:
                    b5:8f:80:30:27:c9:71:a7:98:fe:85:50:a2:3d:d6:
                    b9:4c:2b:b2:14:bc:8a:77:a0:b4:23:55:2b:ff:2e:
                    9c:53:3d:2f:77:ce:76:49:e4:d5:8b:12:a6:92:3b:
                    dd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B9:40:BF:48:79:DF:AE:AD:EE:61:B4:78:52:0C:5A:62:6B:4B:AB
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS8075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5300::/40
                  2a12:dd47:8280::/44
                  2a12:dd47:8a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         53:72:c5:b3:02:e7:25:8d:17:97:89:0e:3f:9e:cd:0e:a4:11:
         aa:5d:c3:6b:8e:2f:50:0b:a3:df:56:cd:e7:81:81:97:54:bb:
         43:14:f0:db:4c:2b:c5:cc:da:f0:65:a6:c4:f9:e3:52:2c:b1:
         c7:92:27:c2:f9:61:2f:2e:39:ff:7a:b0:e0:6a:fd:55:5c:1b:
         28:74:7b:b1:2d:1b:03:b4:37:02:fc:ab:5c:72:f9:7b:33:70:
         5a:7b:e0:27:71:ee:a5:e0:fd:a9:19:37:67:82:ee:a5:b5:e8:
         ab:45:ab:28:17:f4:2e:9e:ed:90:ec:d6:aa:ff:ef:4d:31:82:
         dd:35:61:f2:0b:2a:c8:0f:37:a5:92:c4:9c:3d:8e:76:10:30:
         44:82:62:c6:0d:7b:0c:ab:0f:eb:e3:9f:e6:35:db:7d:b6:61:
         0a:4c:c1:34:8a:7f:c3:53:cf:42:12:69:77:29:14:44:1c:1c:
         0a:19:b7:1e:3a:b8:96:78:92:67:04:9b:89:87:ea:28:34:89:
         a8:4d:92:29:c0:9d:33:89:ae:35:2c:ea:7a:90:f7:1f:b1:e7:
         1a:35:cc:4f:92:f2:4b:2f:22:9a:a4:f7:3b:2c:b0:2a:df:2c:
         61:b3:bd:05:4b:30:63:75:ea:cf:e3:c1:3b:97:10:ce:9f:31:
         d7:d7:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----