Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS47449.roa
File:                     AS47449.roa (raw, json)
Hash identifier:          ksb69u+7ut7e0dSPz+RSEEDtPf+pph6uVKX+tdU7J/Q=
Subject key identifier:   71:25:02:EC:48:D2:E7:A5:9A:5A:23:E3:7D:CD:47:50:16:D2:D1:45
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3D6D0D3F3675C3D4FF2D325EDEC089222EA92B83
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS47449.roa
Signing time:             Sat 08 Apr 2023 09:22:28 +0000
ROA not before:           Sat 08 Apr 2023 09:17:28 +0000
ROA not after:            Sat 06 Apr 2024 09:22:28 +0000
asID:                     47449
IP address blocks:        2a12:dd47:8010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6d:0d:3f:36:75:c3:d4:ff:2d:32:5e:de:c0:89:22:2e:a9:2b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:28 2023 GMT
            Not After : Apr  6 09:22:28 2024 GMT
        Subject: CN=712502EC48D2E7A59A5A23E37DCD475016D2D145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:71:75:92:b7:2c:38:36:6e:2f:9d:8f:74:
                    19:35:11:51:c9:eb:ae:0d:85:1f:10:ef:a1:5e:38:
                    9f:82:59:ec:da:87:ab:16:7c:24:69:7e:0b:e8:43:
                    48:aa:4d:b4:44:d6:80:1d:e8:f6:09:a3:4f:84:1d:
                    71:e7:f3:4a:25:a1:36:89:c6:b2:89:e3:da:1e:36:
                    b0:7c:4c:f7:65:4a:2c:32:fe:89:cf:a9:31:f6:ef:
                    9a:bf:f1:b8:97:7a:65:9f:1c:cb:19:c1:12:26:a5:
                    c6:89:4d:ec:28:f2:f3:8c:cf:04:fc:b1:8d:e7:b3:
                    23:74:05:bf:1a:78:16:f6:ab:c3:cc:85:8b:5a:ad:
                    4a:6b:8f:82:4d:3d:8d:86:fe:ef:da:13:9e:4d:0c:
                    a6:ec:c2:88:d3:35:63:67:80:d0:f5:f9:75:82:bf:
                    d1:c5:f0:57:65:1f:c1:49:ff:76:71:ae:9a:f0:ae:
                    b3:e2:38:7e:bc:af:f1:a2:3d:bf:45:8a:71:31:4f:
                    d3:72:a8:ab:f1:89:77:8b:0e:0d:8a:97:7c:f4:e5:
                    ed:4f:67:4b:7e:e6:95:df:c9:66:56:7d:e2:34:00:
                    a5:d4:ea:11:9e:8f:72:d2:4a:2a:59:03:9e:d1:5c:
                    b3:68:86:1a:a8:2b:25:70:a7:85:2f:1e:c8:28:ae:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:25:02:EC:48:D2:E7:A5:9A:5A:23:E3:7D:CD:47:50:16:D2:D1:45
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS47449.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8010::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:a7:00:66:31:2a:50:b9:dd:70:c1:d5:63:01:f2:ee:e2:e1:
         98:8b:bc:85:39:77:e6:28:84:b1:92:92:2f:26:7d:2a:1c:7f:
         5b:86:91:0b:ac:66:a3:a6:d9:46:db:4c:2a:eb:5a:87:70:0b:
         51:c0:bf:41:7a:d0:a9:f7:ca:b9:f4:fc:9f:be:13:06:b3:63:
         df:1a:c6:7a:2c:bd:08:4b:8b:6e:94:27:f1:3f:33:d4:1f:5d:
         86:25:56:95:25:79:71:cf:6f:3b:90:43:93:c4:e1:15:c0:e0:
         96:10:30:b3:92:7d:a0:53:a7:58:a3:9c:51:6e:24:13:12:cc:
         71:19:38:e5:d9:af:18:56:0e:8e:a2:11:72:c6:fe:bd:a6:f4:
         f3:9c:29:55:d9:72:b1:2f:b7:31:03:41:e1:c7:fb:01:71:63:
         dd:1a:c3:71:d4:35:2f:05:3f:1f:14:cd:d6:13:19:92:d4:de:
         b4:7f:ed:ad:1d:0a:41:df:33:71:64:e1:42:95:c6:ff:37:a3:
         f8:ac:60:38:b4:22:58:9f:16:fc:62:e0:4f:19:d3:38:65:38:
         36:54:ee:c8:ab:b7:78:83:29:c3:36:19:95:67:6a:7e:0e:48:
         ec:61:31:7d:3d:4f:98:b7:e8:c8:84:b0:ee:01:cb:2f:f7:bd:
         85:8d:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----