Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS50224.roa
File:                     AS50224.roa (raw, json)
Hash identifier:          PdXyuysWr3Pi7C9DCzI7EtdVR943hg2SW566RAHNsEs=
Subject key identifier:   2E:BF:4F:AA:EB:19:F4:6D:D7:C6:08:21:E3:0B:AB:9D:E8:F1:FB:7E
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       3D6179238B2C79E3D9F35DE672425DC74B681839
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS50224.roa
Signing time:             Mon 10 Apr 2023 03:31:34 +0000
ROA not before:           Mon 10 Apr 2023 03:26:34 +0000
ROA not after:            Mon 08 Apr 2024 03:31:34 +0000
asID:                     50224
IP address blocks:        2a12:dd47:80a0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:61:79:23:8b:2c:79:e3:d9:f3:5d:e6:72:42:5d:c7:4b:68:18:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:34 2023 GMT
            Not After : Apr  8 03:31:34 2024 GMT
        Subject: CN=2EBF4FAAEB19F46DD7C60821E30BAB9DE8F1FB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:15:f0:fb:69:10:1c:53:7d:2f:38:0b:66:
                    8e:72:b6:7a:3d:75:67:c0:b1:83:b4:e1:a3:b9:aa:
                    22:d3:9b:fa:e4:d4:a1:a3:e8:bd:b8:1d:6a:71:6f:
                    13:d1:02:02:21:35:ee:99:6b:42:6c:7f:e1:8e:41:
                    08:63:44:ed:ff:77:dd:30:d5:83:b9:55:bd:90:44:
                    64:20:23:d5:09:6a:19:c6:3f:1b:38:25:48:05:56:
                    69:4d:92:d6:33:3b:4c:12:bd:8d:94:6b:23:cd:a4:
                    49:3c:22:10:12:15:e1:ea:5b:46:ea:60:08:52:1f:
                    a4:b7:73:f9:57:2f:0d:fe:d9:7c:5a:20:41:a9:10:
                    d0:ed:85:d1:89:b2:a3:e4:48:43:a2:d6:a9:25:86:
                    11:f1:8c:d9:88:e8:a3:0e:b1:93:8f:8c:4b:7a:13:
                    2b:ce:89:32:2a:54:a5:9b:6a:99:66:78:9e:bf:c7:
                    30:d9:cf:c9:55:cf:76:9c:24:d6:94:d4:d0:36:6b:
                    d3:a8:81:54:7f:5d:26:a4:c0:19:1d:63:f8:45:81:
                    0e:ec:b6:be:3e:c1:75:b5:4c:cb:f5:69:07:69:42:
                    06:5d:62:81:71:c8:6f:8b:5a:d7:24:b3:1c:b7:b8:
                    18:e3:f7:bb:90:e9:76:9c:5f:0e:ef:40:e9:01:0b:
                    ac:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BF:4F:AA:EB:19:F4:6D:D7:C6:08:21:E3:0B:AB:9D:E8:F1:FB:7E
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS50224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:31:9b:58:95:e6:48:e7:7c:49:b9:fb:a1:e0:e2:df:ff:
         7d:c2:c5:99:de:60:fc:fc:c2:eb:e5:5d:b8:29:85:d0:85:96:
         0b:9c:e3:9e:f3:97:cd:70:c8:e9:d7:48:41:c4:50:c9:73:6c:
         d9:ab:3e:9d:ab:47:5f:00:34:17:59:55:9b:e1:17:c2:2b:cf:
         66:94:61:5a:ce:ea:b3:e7:36:0a:57:89:30:eb:91:d3:e8:29:
         87:9c:1b:e0:31:cc:7f:ab:68:ed:4d:f5:a5:e9:7f:c5:fb:c8:
         23:51:68:12:d0:70:3f:2f:e6:4f:72:2f:21:a0:61:ca:f3:fb:
         13:96:99:98:4f:96:fd:bc:c6:9f:cb:9c:0c:7e:64:13:93:16:
         1b:aa:9f:36:b4:00:b4:00:8b:f5:c2:8d:f5:e3:1d:86:ce:b3:
         ce:24:53:66:c3:68:5e:96:ee:97:ae:bc:f6:8e:60:eb:22:12:
         73:e0:d9:fe:2c:b0:1b:73:22:ac:a5:9c:68:8a:86:56:84:89:
         04:e2:68:0b:67:45:79:f5:1f:f7:a4:06:d7:4f:da:53:ef:a7:
         2f:57:26:ec:cb:1c:c2:9d:2d:48:e8:d5:06:1b:0d:d7:32:06:
         53:01:31:07:52:3f:5c:ab:ad:e9:f0:9d:5b:26:9b:ea:0c:01:
         8e:ae:67:53
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUPWF5I4sseePZ813mckJdx0toGDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzRaFw0yNDA0MDgwMzMxMzRaMDMxMTAvBgNV
BAMTKDJFQkY0RkFBRUIxOUY0NkREN0M2MDgyMUUzMEJBQjlERThGMUZCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZzRXw+2kQHFN9LzgLZo5ytno9
dWfAsYO04aO5qiLTm/rk1KGj6L24HWpxbxPRAgIhNe6Za0Jsf+GOQQhjRO3/d90w
1YO5Vb2QRGQgI9UJahnGPxs4JUgFVmlNktYzO0wSvY2UayPNpEk8IhASFeHqW0bq
YAhSH6S3c/lXLw3+2XxaIEGpENDthdGJsqPkSEOi1qklhhHxjNmI6KMOsZOPjEt6
EyvOiTIqVKWbaplmeJ6/xzDZz8lVz3acJNaU1NA2a9OogVR/XSakwBkdY/hFgQ7s
tr4+wXW1TMv1aQdpQgZdYoFxyG+LWtcksxy3uBjj97uQ6XacXw7vQOkBC6xRAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQULr9PqusZ9G3Xxggh4wurnejx+34wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBE
BggrBgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVM1MDIyNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeAoDANBgkqhkiG9w0BAQsF
AAOCAQEAmOYxm1iV5kjnfEm5+6Hg4t//fcLFmd5g/PzC6+VduCmF0IWWC5zjnvOX
zXDI6ddIQcRQyXNs2as+natHXwA0F1lVm+EXwivPZpRhWs7qs+c2CleJMOuR0+gp
h5wb4DHMf6to7U31pel/xfvII1FoEtBwPy/mT3IvIaBhyvP7E5aZmE+W/bzGn8uc
DH5kE5MWG6qfNrQAtACL9cKN9eMdhs6zziRTZsNoXpbul6689o5g6yISc+DZ/iyw
G3MirKWcaIqGVoSJBOJoC2dFefUf96QG10/aU++nL1cm7Mscwp0tSOjVBhsN1zIG
UwExB1I/XKut6fCdWyab6gwBjq5nUw==
-----END CERTIFICATE-----