Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS50580.roa
File:                     AS50580.roa (raw, json)
Hash identifier:          onxvfrdpEHF7ezXtpD3FTNKNdMbpdF1LSWmmiOLCYdo=
Subject key identifier:   DF:AF:BB:0F:10:09:B7:E8:7C:FE:67:01:F8:E6:5F:12:23:36:BB:C7
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       37B857106DC0C5A241071050D3291088DC2B53D4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS50580.roa
Signing time:             Mon 10 Apr 2023 03:31:33 +0000
ROA not before:           Mon 10 Apr 2023 03:26:33 +0000
ROA not after:            Mon 08 Apr 2024 03:31:33 +0000
asID:                     50580
IP address blocks:        2a12:dd47:db00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b8:57:10:6d:c0:c5:a2:41:07:10:50:d3:29:10:88:dc:2b:53:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:33 2023 GMT
            Not After : Apr  8 03:31:33 2024 GMT
        Subject: CN=DFAFBB0F1009B7E87CFE6701F8E65F122336BBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:0c:83:e0:86:7f:9e:d8:31:69:99:af:3b:
                    5e:1c:c8:a1:d1:7c:25:92:fe:bc:75:4d:3a:4e:1b:
                    97:78:47:7b:c0:57:ba:7a:32:c5:4c:b4:6c:ea:21:
                    1f:17:88:bd:3d:a8:0f:2e:a2:ff:6d:30:ae:69:e5:
                    35:dc:3a:a4:7a:d7:be:98:ca:9a:a1:79:54:80:25:
                    39:7a:50:cf:9e:98:c7:c8:21:57:29:a4:d7:04:da:
                    28:14:de:c4:c7:74:23:11:4e:a6:5c:70:9c:44:4f:
                    eb:1f:a9:cc:01:18:09:5d:23:07:52:48:fe:aa:0c:
                    b5:9b:e8:fd:df:fc:f8:c7:39:89:c2:a2:4a:9e:4c:
                    8f:3a:07:5b:1a:04:a7:36:1a:cc:8d:8c:d5:26:aa:
                    84:39:ca:d8:3f:13:f9:22:e0:29:b9:58:c2:ce:61:
                    71:df:07:2f:fc:8f:86:17:e1:ef:e4:0b:29:de:b4:
                    21:1c:46:b3:d7:d7:a1:34:3b:6c:80:c8:59:a1:41:
                    c2:11:d3:f1:1c:76:8e:d9:6e:a3:95:3f:fd:7a:f1:
                    1a:87:b7:a7:3c:39:6a:1d:0b:17:ef:c0:e3:2c:8a:
                    db:63:96:dd:b6:12:1c:4c:a7:27:cb:dc:2f:7b:54:
                    d5:64:13:a7:ee:6f:e8:56:4d:dc:b6:f6:0b:10:bf:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AF:BB:0F:10:09:B7:E8:7C:FE:67:01:F8:E6:5F:12:23:36:BB:C7
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS50580.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:db00::/40

    Signature Algorithm: sha256WithRSAEncryption
         d2:a6:a8:dc:28:c4:63:a9:28:55:59:ef:ad:6c:16:5a:5a:58:
         9a:01:a3:55:66:1d:36:7a:a5:1f:f5:91:6d:94:4e:3f:2d:8e:
         65:44:43:68:0f:62:af:ef:25:01:b6:88:43:9c:b4:d2:f1:80:
         83:29:f6:28:42:c4:a8:fb:7a:45:d5:c9:3f:b9:4a:a1:93:e9:
         44:47:a1:82:f2:27:b7:83:93:cc:87:bb:88:0b:68:29:47:b0:
         93:1a:cb:c4:a6:bd:60:68:c0:7f:40:66:bd:5f:e9:1b:96:93:
         85:ac:43:e9:52:5e:74:17:9f:da:7c:91:ab:36:e1:06:1b:2e:
         94:bf:9f:72:10:64:7b:28:da:ec:1a:03:f6:85:62:57:ff:e6:
         56:a5:da:04:0b:5e:39:50:54:48:37:68:46:aa:d2:da:71:76:
         c9:8e:bb:76:0c:f9:c5:02:63:73:f7:7c:50:c0:6c:eb:3e:2f:
         e8:4b:e0:f2:18:69:d4:68:e0:54:4c:34:d0:78:f2:c5:e3:fd:
         a6:21:02:01:76:22:df:6c:94:82:a0:a6:b4:56:aa:86:1b:69:
         fd:0c:e1:9c:0c:05:e2:98:6b:8c:be:66:3c:cb:5b:a2:e1:6d:
         d6:b1:ce:6a:17:ae:d2:7c:49:85:44:99:54:6a:22:cd:6c:4e:
         c2:47:61:b7
-----BEGIN CERTIFICATE-----
MIIEkTCCA3mgAwIBAgIUN7hXEG3AxaJBBxBQ0ykQiNwrU9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA0MTAwMzI2MzNaFw0yNDA0MDgwMzMxMzNaMDMxMTAvBgNV
BAMTKERGQUZCQjBGMTAwOUI3RTg3Q0ZFNjcwMUY4RTY1RjEyMjMzNkJCQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwQyD4IZ/ntgxaZmvO14cyKHR
fCWS/rx1TTpOG5d4R3vAV7p6MsVMtGzqIR8XiL09qA8uov9tMK5p5TXcOqR6176Y
ypqheVSAJTl6UM+emMfIIVcppNcE2igU3sTHdCMRTqZccJxET+sfqcwBGAldIwdS
SP6qDLWb6P3f/PjHOYnCokqeTI86B1saBKc2GsyNjNUmqoQ5ytg/E/ki4Cm5WMLO
YXHfBy/8j4YX4e/kCynetCEcRrPX16E0O2yAyFmhQcIR0/Ecdo7ZbqOVP/168RqH
t6c8OWodCxfvwOMsittjlt22EhxMpyfL3C97VNVkE6fub+hWTdy29gsQv19FAgMB
AAGjggGbMIIBlzAdBgNVHQ4EFgQU36+7DxAJt+h8/mcB+OZfEiM2u8cwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBE
BggrBgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVM1MDU4MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UfbMA0GCSqGSIb3DQEBCwUA
A4IBAQDSpqjcKMRjqShVWe+tbBZaWliaAaNVZh02eqUf9ZFtlE4/LY5lRENoD2Kv
7yUBtohDnLTS8YCDKfYoQsSo+3pF1ck/uUqhk+lER6GC8ie3g5PMh7uIC2gpR7CT
GsvEpr1gaMB/QGa9X+kblpOFrEPpUl50F5/afJGrNuEGGy6Uv59yEGR7KNrsGgP2
hWJX/+ZWpdoEC145UFRIN2hGqtLacXbJjrt2DPnFAmNz93xQwGzrPi/oS+DyGGnU
aOBUTDTQePLF4/2mIQIBdiLfbJSCoKa0VqqGG2n9DOGcDAXimGuMvmY8y1ui4W3W
sc5qF67SfEmFRJlUaiLNbE7CR2G3
-----END CERTIFICATE-----