Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS50836.roa
File:                     AS50836.roa (raw, json)
Hash identifier:          b6HUPFRVKyzp9mcqVMbJw3Ihl+zZ7MKvFY/rrpGD9fA=
Subject key identifier:   6F:DC:43:ED:38:57:24:DF:A6:7B:C3:C7:94:63:01:BA:11:3B:28:E4
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       56B79FC933277136447F155E631EB1B05F6C0817
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS50836.roa
Signing time:             Mon 10 Apr 2023 03:34:29 +0000
ROA not before:           Mon 10 Apr 2023 03:29:29 +0000
ROA not after:            Mon 08 Apr 2024 03:34:29 +0000
asID:                     50836
IP address blocks:        2a12:dd47:8ea0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b7:9f:c9:33:27:71:36:44:7f:15:5e:63:1e:b1:b0:5f:6c:08:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:29:29 2023 GMT
            Not After : Apr  8 03:34:29 2024 GMT
        Subject: CN=6FDC43ED385724DFA67BC3C7946301BA113B28E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:9c:b5:3d:e4:84:db:75:e6:30:9a:e7:5f:
                    42:4a:3b:86:63:98:49:1d:66:02:6f:0b:7f:f1:0b:
                    44:a2:dc:16:bf:8a:0d:5f:47:ce:3b:a1:c5:22:e4:
                    c2:c1:ad:c6:81:fc:dc:5f:00:ef:06:f3:c0:f5:93:
                    e2:18:29:b7:16:cd:cb:6b:41:3e:57:c5:f2:73:93:
                    fc:0f:7d:b0:ac:6e:94:f7:70:0d:c6:f8:3e:80:a0:
                    16:e9:aa:c9:4b:f2:83:01:6d:bc:73:a7:f8:1b:32:
                    4f:5a:8f:3e:cf:15:47:c9:d3:92:aa:1c:4a:5a:35:
                    4d:6b:ca:38:d5:27:e1:8c:f2:2f:73:d7:f6:65:b9:
                    dd:e5:b5:0d:76:51:88:49:52:3d:96:01:3e:46:4d:
                    2f:97:6c:9b:1e:02:35:26:e6:24:d7:f9:cc:95:e9:
                    42:31:98:b3:4b:df:7e:5b:cd:b1:39:df:34:fe:78:
                    28:3b:35:cb:82:e6:38:4c:84:3f:08:c0:4e:d1:be:
                    7c:4e:4a:39:2d:bc:f7:37:47:1c:c9:a6:cd:ba:7f:
                    1f:38:eb:f4:94:a1:50:d7:8a:7b:55:16:ad:92:ac:
                    2f:e1:88:5c:60:8c:8f:38:87:f6:93:97:45:22:ac:
                    b3:d8:ea:c8:61:2b:97:c5:80:b7:b7:f5:de:ea:21:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DC:43:ED:38:57:24:DF:A6:7B:C3:C7:94:63:01:BA:11:3B:28:E4
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS50836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ea0::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:d1:26:44:04:db:37:54:ef:f9:f9:f8:83:fc:83:12:5e:d3:
         d7:bb:5a:a8:c9:ed:d8:be:32:b8:2d:06:0f:fd:7e:ce:36:8d:
         69:bf:a2:b7:c1:ec:34:24:cf:41:66:20:15:48:54:f9:92:fc:
         1f:53:6d:bc:d8:0f:3a:7c:0b:c9:11:b0:2a:b6:b7:b6:0f:d9:
         dd:de:c0:c1:0d:d0:93:9b:5f:f3:7a:5d:3d:02:b4:6e:26:36:
         d3:d5:29:2b:98:01:b1:92:fe:db:8b:43:c5:ad:e0:7e:7e:f4:
         8d:60:66:78:d2:99:c8:29:d8:de:5a:61:89:e2:d8:ff:1b:2f:
         c5:e9:37:3b:0e:29:c7:2b:a2:1e:82:d6:5a:c9:27:18:aa:fc:
         27:19:46:03:bb:61:87:dc:fc:49:4d:19:be:6d:49:9e:d7:bf:
         dc:24:e0:ac:9f:56:eb:9e:e2:55:4d:b6:fb:6c:a9:95:e3:1f:
         e4:54:5c:3f:54:02:9a:86:f6:88:c8:2e:86:3e:dc:a9:fc:f2:
         04:f3:61:ad:9a:06:dd:73:5a:7c:d8:b5:70:ad:19:c6:e9:1d:
         0c:d4:c0:4c:50:8b:fe:bb:19:5c:34:ea:ae:48:83:c4:77:eb:
         b2:97:de:21:79:f2:0e:a6:0d:a9:a4:df:83:f2:7f:de:99:23:
         2c:82:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----