Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS47924.roa
File:                     AS47924.roa (raw, json)
Hash identifier:          DN4VhJE8LU8wawo2esdHFD3hFG5HDDb3OvzZrqifgNs=
Subject key identifier:   49:9C:E7:E7:AD:4A:47:88:55:1A:99:9C:0D:66:1F:CF:F5:31:64:5B
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2B412456DBE56D9E8E6DC8A73D2CC6565AEC5466
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS47924.roa
Signing time:             Sat 08 Apr 2023 09:22:17 +0000
ROA not before:           Sat 08 Apr 2023 09:17:17 +0000
ROA not after:            Sat 06 Apr 2024 09:22:17 +0000
asID:                     47924
IP address blocks:        2a12:dd47:8110::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:41:24:56:db:e5:6d:9e:8e:6d:c8:a7:3d:2c:c6:56:5a:ec:54:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:17 2023 GMT
            Not After : Apr  6 09:22:17 2024 GMT
        Subject: CN=499CE7E7AD4A4788551A999C0D661FCFF531645B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:28:e0:36:60:11:80:12:9b:17:09:80:b6:
                    ef:76:99:cc:c7:89:af:e6:20:f4:12:4a:b4:6c:45:
                    42:66:51:c2:fa:0f:b2:23:58:24:03:72:9b:01:58:
                    d6:d8:6d:44:ad:ba:bf:a1:e6:65:38:7e:0c:03:b3:
                    f5:3a:40:13:10:7a:1f:71:0a:2a:27:79:eb:f9:d0:
                    ce:a5:6a:a2:3e:fb:be:1a:93:81:9b:13:7b:8b:67:
                    94:34:0d:41:3c:b6:b6:ce:03:2b:a3:e8:9e:7e:59:
                    87:e4:47:0d:c5:fc:e0:42:8b:c4:6b:5b:62:5f:8e:
                    ea:d8:d2:0c:77:87:f0:6c:79:e6:40:a2:fc:a1:64:
                    cc:62:31:69:ac:3f:41:7a:aa:ab:01:77:0d:b9:ea:
                    e2:59:23:da:0a:06:17:c9:8e:d1:cf:21:8f:93:9b:
                    82:11:2b:0e:7d:a8:c6:6c:7f:8b:47:28:d1:04:4a:
                    bd:05:b9:aa:68:2e:30:64:7a:d2:4a:37:65:41:5e:
                    66:92:3c:59:af:5f:dc:5a:9a:38:43:19:67:e1:49:
                    80:24:2d:59:08:94:50:aa:16:5a:6d:f3:45:8d:15:
                    a2:e6:b6:4c:62:8f:2f:ed:20:3e:3d:17:55:58:ed:
                    78:e2:aa:62:c2:a7:f7:2f:ea:bf:f7:0d:35:48:57:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9C:E7:E7:AD:4A:47:88:55:1A:99:9C:0D:66:1F:CF:F5:31:64:5B
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS47924.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8110::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:db:9b:e5:8e:2f:06:36:ef:30:8a:22:55:f5:f8:d4:d1:
         16:2e:11:c9:04:61:a9:4d:fd:2b:45:c8:69:d6:5e:50:56:30:
         cc:e7:c0:cf:61:70:27:0a:a2:39:97:d0:f9:a8:20:5e:12:d9:
         b8:5e:ac:d8:aa:35:33:d5:17:16:2e:c4:06:f7:49:6f:85:10:
         c7:0e:ec:5f:5d:69:ba:48:e5:0b:79:42:f2:18:f7:71:d6:de:
         54:c8:5d:72:f6:b8:be:80:6c:36:b5:8f:24:08:30:0f:d9:de:
         66:c8:80:9a:47:98:e5:9c:e8:34:dd:5f:e2:eb:f3:e5:83:29:
         c8:4e:dc:52:63:26:03:78:e6:fe:90:c3:ad:7e:b5:b3:f4:ff:
         aa:d0:e5:c5:2a:2a:c7:e0:99:3b:9a:22:ca:b3:e0:b4:a9:41:
         6f:cf:63:ac:99:1f:cf:bd:b7:b5:96:71:8e:7e:ab:bc:b7:14:
         3a:a8:f0:87:b3:71:e0:cc:ee:32:78:69:8f:8b:d0:9d:5c:1d:
         69:18:c8:ef:c8:82:d2:ae:14:5e:7d:22:1e:e5:86:5b:fd:fd:
         be:25:01:98:3e:04:d3:54:ba:9b:fa:5f:cf:94:7d:cc:cd:c7:
         15:18:7b:75:56:8c:80:a1:e3:29:08:c0:e9:f7:7c:57:c7:a7:
         d9:82:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----