Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS49581.roa
File:                     AS49581.roa (raw, json)
Hash identifier:          HOiQBoEj+gBrb3RvEjp9GuRpiT4Skz0PgVnULx/9gRI=
Subject key identifier:   24:A1:A3:16:CA:37:4E:0A:CF:D9:72:70:80:DB:F9:90:E8:78:59:B7
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       014845D5D7D6B61C06233706092B07BA706D9904
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS49581.roa
Signing time:             Sat 08 Apr 2023 09:22:20 +0000
ROA not before:           Sat 08 Apr 2023 09:17:20 +0000
ROA not after:            Sat 06 Apr 2024 09:22:20 +0000
asID:                     49581
IP address blocks:        2a12:dd47:8500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:48:45:d5:d7:d6:b6:1c:06:23:37:06:09:2b:07:ba:70:6d:99:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:20 2023 GMT
            Not After : Apr  6 09:22:20 2024 GMT
        Subject: CN=24A1A316CA374E0ACFD9727080DBF990E87859B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:8b:9f:4b:b8:2b:c8:53:be:f0:25:7d:ce:
                    09:a2:28:55:9e:2d:d1:20:ca:d5:2c:ae:8c:23:bb:
                    51:6d:d1:e5:9d:91:af:34:ab:f8:fb:b4:df:f8:69:
                    ff:d5:cb:6d:e2:27:94:5e:e2:a5:d6:ec:98:cf:2c:
                    f5:51:d4:38:6b:a5:41:fd:2c:7a:59:95:d9:c2:89:
                    d5:55:07:c8:cf:55:80:f9:a3:f4:fc:e0:7d:b7:d9:
                    1b:8c:a9:05:f7:5c:30:5d:5a:69:90:30:86:9f:c2:
                    13:8f:99:c2:c9:2c:cd:ad:91:37:dc:ea:55:b6:21:
                    0d:0f:7f:c8:17:af:68:b0:57:7c:7f:f4:2c:a6:86:
                    61:29:14:43:cb:66:16:c3:c4:b1:01:75:a5:47:11:
                    5c:98:f6:59:63:28:b6:10:26:68:39:55:c4:3b:ae:
                    35:e8:3a:46:82:15:35:be:dc:8b:e1:d6:63:a0:27:
                    91:9c:ed:72:5b:af:0d:49:99:bc:9c:0e:d7:02:a2:
                    f8:ad:db:d8:1f:7d:aa:42:5e:b1:75:7f:a4:d2:ac:
                    1e:f4:54:a5:88:77:4b:dd:30:8f:c8:7b:85:21:12:
                    a1:63:e3:7d:00:63:7a:71:37:78:3c:31:a7:18:16:
                    ea:77:af:e7:70:93:d3:85:8d:15:75:c0:47:42:84:
                    ef:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A1:A3:16:CA:37:4E:0A:CF:D9:72:70:80:DB:F9:90:E8:78:59:B7
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS49581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8500::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:8f:d0:ed:90:11:67:de:1f:6d:ae:9f:88:68:00:d0:f4:56:
         b4:0b:2f:c6:aa:8e:86:48:4a:f2:7d:9b:59:8e:48:05:c8:0a:
         1e:c1:d5:6a:6e:3c:79:1e:33:ad:0a:32:5b:35:aa:9c:1f:3b:
         02:37:7d:9e:b6:a2:29:6d:df:44:a8:7c:49:2e:11:03:06:f4:
         fc:ed:52:48:3a:bf:ab:31:ff:0b:61:eb:fb:d1:69:a7:20:07:
         1d:19:ff:9c:1f:be:d4:65:8e:64:9d:96:f6:ad:67:df:c0:51:
         9a:da:37:72:2f:be:79:9f:58:88:ab:23:03:c6:f0:a7:ae:71:
         b3:63:8b:41:6f:cc:5c:09:a3:cb:a4:b0:82:66:00:5e:b9:eb:
         39:00:7d:71:c8:46:28:e5:4b:11:25:91:a0:09:8a:09:8c:09:
         e2:3f:0c:22:63:b3:ea:b3:7f:f2:11:82:b2:fc:df:a3:44:04:
         8b:0a:0f:4e:f9:ae:e3:fc:34:e3:fe:17:41:c6:e5:cf:0d:f3:
         9d:df:4d:c1:32:70:02:af:17:1d:0a:6b:e3:03:d5:6a:9d:dd:
         ff:9d:a0:c8:cb:44:c4:f1:7e:70:03:3b:0c:79:ea:2f:d9:2b:
         2f:23:1a:4f:af:a5:04:81:86:96:5a:e8:1f:04:24:cf:e2:f5:
         e5:a8:95:91
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUAUhF1dfWthwGIzcGCSsHunBtmQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjBaFw0yNDA0MDYwOTIyMjBaMDMxMTAvBgNV
BAMTKDI0QTFBMzE2Q0EzNzRFMEFDRkQ5NzI3MDgwREJGOTkwRTg3ODU5QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGYufS7gryFO+8CV9zgmiKFWe
LdEgytUsrowju1Ft0eWdka80q/j7tN/4af/Vy23iJ5Re4qXW7JjPLPVR1DhrpUH9
LHpZldnCidVVB8jPVYD5o/T84H232RuMqQX3XDBdWmmQMIafwhOPmcLJLM2tkTfc
6lW2IQ0Pf8gXr2iwV3x/9CymhmEpFEPLZhbDxLEBdaVHEVyY9lljKLYQJmg5VcQ7
rjXoOkaCFTW+3Ivh1mOgJ5Gc7XJbrw1JmbycDtcCovit29gffapCXrF1f6TSrB70
VKWId0vdMI/Ie4UhEqFj430AY3pxN3g8MacYFup3r+dwk9OFjRV1wEdChO8vAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUJKGjFso3TgrP2XJwgNv5kOh4WbcwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEUG
CCsGAQUFBwELBDkwNzA1BggrBgEFBQcwC4YpcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVM0OTU4MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeFADANBgkqhkiG9w0BAQsF
AAOCAQEAso/Q7ZARZ94fba6fiGgA0PRWtAsvxqqOhkhK8n2bWY5IBcgKHsHVam48
eR4zrQoyWzWqnB87Ajd9nraiKW3fRKh8SS4RAwb0/O1SSDq/qzH/C2Hr+9FppyAH
HRn/nB++1GWOZJ2W9q1n38BRmto3ci++eZ9YiKsjA8bwp65xs2OLQW/MXAmjy6Sw
gmYAXrnrOQB9cchGKOVLESWRoAmKCYwJ4j8MImOz6rN/8hGCsvzfo0QEiwoPTvmu
4/w04/4XQcblzw3znd9NwTJwAq8XHQpr4wPVap3d/52gyMtExPF+cAM7DHnqL9kr
LyMaT6+lBIGGllroHwQkz+L15aiVkQ==
-----END CERTIFICATE-----