Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS50842.roa
File:                     AS50842.roa (raw, json)
Hash identifier:          Mfb+EnTl6xg3IJS8FrllFymVVOtIMQGh62heuWxMujE=
Subject key identifier:   3B:58:0E:45:D5:37:75:06:5E:53:A5:8C:5A:35:E8:9B:6B:55:96:21
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       20B08EC753702911F2360CDD6D475BCB36726B48
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS50842.roa
Signing time:             Mon 10 Apr 2023 03:31:45 +0000
ROA not before:           Mon 10 Apr 2023 03:26:45 +0000
ROA not after:            Mon 08 Apr 2024 03:31:45 +0000
asID:                     50842
IP address blocks:        2a12:dd47:81a0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b0:8e:c7:53:70:29:11:f2:36:0c:dd:6d:47:5b:cb:36:72:6b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:45 2023 GMT
            Not After : Apr  8 03:31:45 2024 GMT
        Subject: CN=3B580E45D53775065E53A58C5A35E89B6B559621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:cb:02:05:9e:25:a1:01:0b:bd:ed:88:70:
                    6c:70:1f:93:fd:f4:c2:eb:ae:2c:6a:25:1c:98:ed:
                    ff:cc:97:c8:7a:79:be:cf:b4:da:9a:17:63:1d:6a:
                    f5:7b:bc:3c:40:f5:cc:29:c1:2a:6a:0a:e5:61:03:
                    05:cb:4c:fa:67:bb:07:e4:ce:fe:a4:73:97:d2:a5:
                    23:25:ed:2d:4d:4e:d9:13:7f:bf:d3:7e:93:75:c5:
                    31:f0:0e:a2:22:c1:0b:b5:17:72:dc:fc:69:05:14:
                    58:50:08:55:03:39:5b:a4:37:d5:7b:9a:19:e2:b8:
                    5f:16:25:88:f9:09:19:63:9b:59:2b:28:12:7f:70:
                    77:26:3e:3c:f3:9f:f6:ee:7d:69:fe:12:a7:ca:9b:
                    9d:88:64:ce:dd:be:6e:02:b6:59:49:1e:94:19:ff:
                    54:ae:68:cf:55:c8:b6:70:74:26:91:d7:d8:27:f9:
                    53:51:80:16:e8:0e:12:a5:6b:9a:43:c4:8c:f6:29:
                    3b:ca:d4:55:33:36:a0:06:15:98:1a:94:af:c9:4e:
                    70:67:c1:fb:79:0e:6d:e1:87:ee:63:e6:e0:5c:37:
                    15:cc:6d:ef:2b:fe:e4:51:c0:35:47:a2:fe:3c:8d:
                    04:2f:33:af:d5:b7:7e:4b:38:bd:33:64:a0:d8:9a:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:58:0E:45:D5:37:75:06:5E:53:A5:8C:5A:35:E8:9B:6B:55:96:21
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS50842.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:fc:2a:55:52:2d:74:60:ce:9b:ad:40:b1:e0:7d:b4:47:6b:
         ca:b8:aa:01:4b:6b:cc:af:5f:2c:0f:02:8d:89:44:09:ec:3b:
         8e:5e:d1:86:8b:0e:0d:b6:1f:f6:fa:46:fe:1c:24:91:9a:c7:
         07:c8:af:b7:90:0b:77:39:66:1a:b0:40:47:74:56:f8:da:07:
         f1:7c:89:f3:87:a5:a4:31:23:a2:45:d4:8a:ce:de:25:f6:15:
         ba:cd:70:8c:35:e3:d4:0b:ca:75:27:b7:95:0d:d4:f9:d6:72:
         e7:64:b9:b7:52:3b:7f:c6:26:b4:f1:92:73:eb:e7:5e:69:b1:
         1c:78:c4:50:92:35:f8:80:84:42:0e:88:c3:c3:4b:e6:ea:31:
         3f:91:22:80:0b:80:45:9a:72:e9:49:4b:28:fb:6f:f4:22:1c:
         c0:9c:22:7b:c5:f2:b8:49:3c:ed:8a:de:7d:3c:de:09:25:7c:
         cf:99:85:c4:fe:36:26:a7:8e:94:f8:de:da:bd:25:bc:b8:c6:
         b7:e7:c7:3a:75:df:8a:0a:60:8b:31:01:59:a2:a4:f4:c3:3a:
         ef:23:d2:27:f7:33:8b:f9:53:41:78:62:fd:5d:1c:e1:48:2d:
         48:9c:92:9e:2c:d7:d5:3b:6e:ff:27:7d:a5:24:f4:9f:79:d3:
         18:82:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----