Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS50224.roa
File:                     AS50224.roa (raw, json)
Hash identifier:          KhcdescuEY7GuNRcyfCR9QvTrkZSJuUvjQ0aVR32DQw=
Subject key identifier:   91:8D:9B:46:E3:5F:14:43:CD:2A:3C:AD:8B:F3:AA:4E:D6:79:D5:75
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       1570BDE4DFBC048A01324E9E4CCFB65DDC0B52F0
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS50224.roa
Signing time:             Sun 09 Apr 2023 21:00:31 +0000
ROA not before:           Sun 09 Apr 2023 20:55:31 +0000
ROA not after:            Sun 07 Apr 2024 21:00:31 +0000
asID:                     50224
IP address blocks:        2a12:dd47:80a0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:70:bd:e4:df:bc:04:8a:01:32:4e:9e:4c:cf:b6:5d:dc:0b:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  9 20:55:31 2023 GMT
            Not After : Apr  7 21:00:31 2024 GMT
        Subject: CN=918D9B46E35F1443CD2A3CAD8BF3AA4ED679D575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3e:d0:f3:a9:7a:ca:b3:dc:dd:db:f2:ec:0e:
                    bf:ed:31:7f:b2:10:9b:1b:25:c8:c0:1e:18:10:0b:
                    a6:58:bc:af:85:8d:dd:f1:55:76:80:e2:09:fa:c9:
                    ea:eb:3f:9f:d4:3b:3e:4a:28:bf:7f:b6:7a:29:21:
                    0b:82:d5:fc:8e:82:b0:1b:9f:20:f5:ca:3f:65:99:
                    67:e9:d5:2e:63:ad:b1:3d:85:b7:a4:83:57:1a:76:
                    a0:b1:a4:18:21:9c:b7:f7:88:5b:08:c4:be:14:22:
                    7b:0a:5d:ca:03:11:99:76:ed:c7:61:72:22:8f:0a:
                    9c:e0:63:e9:0b:8c:ee:6d:9b:a8:42:aa:79:80:ee:
                    69:8d:25:b2:1f:d0:59:e1:c0:1a:ac:5c:b3:31:fb:
                    b1:1c:ff:58:4e:57:7b:c0:46:b2:37:47:84:a2:e2:
                    25:dd:ec:63:58:da:7a:cf:27:c2:b0:a0:94:06:29:
                    2b:0b:27:97:01:37:3f:a9:e3:05:6f:14:8a:9c:1a:
                    4b:91:bc:1c:bc:a5:1d:8e:ea:1c:61:c2:00:9f:0c:
                    d4:c0:3d:e9:21:cb:dc:2e:61:d9:02:21:fb:c7:67:
                    85:c3:fd:9f:e4:58:f8:e7:ba:72:47:89:2e:f5:a0:
                    dd:65:e2:60:bf:55:e6:bb:d8:4b:f6:42:b7:34:6c:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8D:9B:46:E3:5F:14:43:CD:2A:3C:AD:8B:F3:AA:4E:D6:79:D5:75
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS50224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         bd:f8:54:db:a8:be:6d:86:63:4e:c0:2d:d2:3c:32:b0:08:6f:
         b8:57:f6:b9:9e:37:61:35:f6:41:fd:9a:78:5b:ec:eb:26:ce:
         ca:10:29:a2:e2:3d:fd:bd:60:af:6e:7c:20:ed:61:3b:f5:00:
         74:76:3b:51:5a:36:3d:56:63:9f:86:0e:26:aa:cc:9b:f1:ab:
         40:38:61:10:32:a7:ab:4a:c1:a5:3c:b8:8a:bc:37:a7:66:68:
         ea:c5:83:04:76:c3:de:14:5b:55:c2:57:eb:eb:0b:bd:c2:6d:
         d8:17:ca:c9:8a:07:6f:11:24:30:2b:1a:f3:de:1a:6e:77:74:
         7b:a7:db:bc:c8:0f:c4:b3:32:d6:b5:c2:de:05:07:6a:d1:74:
         07:30:cd:67:e6:d4:7e:61:0b:3e:21:bc:d1:e4:e6:7e:56:7c:
         13:84:82:b9:14:ee:a5:e9:dc:fb:2d:b8:29:e0:8e:97:d2:5b:
         b3:1a:a5:11:a2:f9:48:d0:38:9a:c4:9f:9f:d3:d4:a9:c7:7d:
         6e:98:6a:b8:10:09:af:07:14:c4:c1:cf:62:60:40:fb:6d:cc:
         7d:14:f8:14:64:5d:58:f4:8e:8f:59:43:fc:47:e6:8d:f8:f8:
         66:0e:10:cb:8e:e4:9e:0e:f5:36:a7:a7:68:ca:47:d9:97:10:
         20:d8:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----