Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS50580.roa
File:                     AS50580.roa (raw, json)
Hash identifier:          Qrt/nITDvod8ptCXmrYOWMmdGA6Iiy0UKDhovYjM1K4=
Subject key identifier:   08:00:88:B2:1C:02:7E:08:4A:0D:88:D9:D4:34:85:1C:5D:D3:1E:BC
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       75C891C4764462C61129C20F6F659DB91641FE99
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS50580.roa
Signing time:             Sat 08 Apr 2023 09:22:19 +0000
ROA not before:           Sat 08 Apr 2023 09:17:19 +0000
ROA not after:            Sat 06 Apr 2024 09:22:19 +0000
asID:                     50580
IP address blocks:        2a12:dd47:db00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c8:91:c4:76:44:62:c6:11:29:c2:0f:6f:65:9d:b9:16:41:fe:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:19 2023 GMT
            Not After : Apr  6 09:22:19 2024 GMT
        Subject: CN=080088B21C027E084A0D88D9D434851C5DD31EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2a:20:d9:4a:81:2f:ce:84:c2:77:0d:de:ea:
                    53:9a:88:a9:a8:93:01:01:0e:aa:34:63:90:6a:cf:
                    4b:9b:ec:ee:e1:6c:2a:b8:0b:c1:35:85:c1:88:8b:
                    73:93:b9:a5:17:e9:91:39:51:d6:8a:e5:8c:45:02:
                    05:19:55:16:14:e4:94:18:40:44:b6:13:94:4f:b6:
                    f3:82:9a:f8:a8:4c:ae:d2:4e:5f:b8:9d:e1:9a:7c:
                    94:70:0f:4d:f3:0a:d5:24:92:d5:66:79:11:67:78:
                    a8:7d:03:eb:30:60:2e:7e:e3:8b:45:f8:b1:57:3c:
                    6a:41:00:b8:fb:b0:db:20:0b:af:e4:37:d1:29:d9:
                    f1:1e:dc:11:71:02:38:1e:5a:9f:60:01:55:c3:0c:
                    22:8e:0d:5c:1e:3e:5e:5c:17:53:37:72:d9:75:11:
                    c0:cc:dd:99:97:b6:fd:75:3f:f9:15:14:f1:62:05:
                    98:68:bc:66:35:f6:8a:52:41:bd:22:c3:a7:0f:6e:
                    73:f4:c9:0d:b4:65:b9:4b:fe:e4:68:bb:b6:1b:97:
                    d9:46:2b:3a:f5:45:22:91:10:5b:91:c5:54:1d:86:
                    4e:b0:01:8c:12:d1:15:1b:6c:08:42:89:89:a0:61:
                    05:1c:f3:17:e7:a1:13:34:24:00:68:8d:bf:f2:d9:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:00:88:B2:1C:02:7E:08:4A:0D:88:D9:D4:34:85:1C:5D:D3:1E:BC
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS50580.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:db00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:93:b5:f5:a7:2e:de:eb:0f:ae:1e:c5:69:68:2b:ad:30:fb:
         a8:84:79:6e:7f:b7:63:f7:b6:69:26:bf:fa:dc:bf:91:e1:11:
         ed:3e:56:54:49:9c:24:3e:42:be:14:55:0a:70:ea:b8:bc:25:
         b4:eb:66:ed:73:17:c1:dd:92:a6:18:b1:1c:1f:ea:4b:45:c9:
         ec:3b:9c:09:f3:d2:c9:b9:fd:d8:1f:e9:8d:65:02:d4:2b:86:
         3e:aa:0f:24:1a:13:72:6c:64:1e:1b:35:32:b4:b0:99:e3:2b:
         20:f8:8c:fc:c9:04:85:ff:4c:84:97:9b:b4:f9:a3:3f:1c:2c:
         7e:2b:fa:ef:6b:c1:6d:6b:cf:99:f2:70:5e:83:98:31:d9:72:
         1b:be:c2:5e:03:bf:05:60:06:25:e3:1b:d1:56:c1:fe:d5:8e:
         6f:f0:44:e0:a8:88:a6:fd:99:0e:a3:9e:dd:d6:56:0c:60:a3:
         a2:c8:1b:32:3e:fc:da:4b:e3:8b:18:6a:20:31:26:43:86:c1:
         c3:f2:e0:66:73:17:a8:7d:0a:2c:e0:25:b8:fc:e7:48:e2:38:
         af:80:0b:ae:16:9a:7b:64:c5:60:46:03:52:26:00:93:75:85:
         4b:16:ac:0c:b3:a2:a6:b1:bd:64:f8:00:ec:41:c4:b2:16:13:
         28:b5:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----