Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS50836.roa
File:                     AS50836.roa (raw, json)
Hash identifier:          jf2LdoVJwoU+H+/VKw7SdMJwxD1/c50WWKaHSWGJnmQ=
Subject key identifier:   C4:E9:95:6A:90:E3:0A:1C:A8:DF:AE:58:92:A6:CC:2E:4D:11:E1:F3
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       69C69A2432839183B55BA4D2A0EB42EFBAA5B3A1
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS50836.roa
Signing time:             Sun 09 Apr 2023 21:05:52 +0000
ROA not before:           Sun 09 Apr 2023 21:00:52 +0000
ROA not after:            Sun 07 Apr 2024 21:05:52 +0000
asID:                     50836
IP address blocks:        2a12:dd47:8ea0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c6:9a:24:32:83:91:83:b5:5b:a4:d2:a0:eb:42:ef:ba:a5:b3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  9 21:00:52 2023 GMT
            Not After : Apr  7 21:05:52 2024 GMT
        Subject: CN=C4E9956A90E30A1CA8DFAE5892A6CC2E4D11E1F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:8e:40:d7:3f:b4:52:09:47:e8:d7:8f:e7:
                    de:ba:57:20:fa:48:48:c3:30:04:2a:c0:48:16:6e:
                    39:40:60:4a:a6:fe:b6:64:b6:e6:48:83:5f:95:12:
                    5f:3c:79:c7:95:4a:80:5b:30:05:9e:10:f5:1f:b9:
                    dd:48:2e:56:83:c5:d0:f0:f1:27:a9:20:47:be:3d:
                    c7:31:6d:cd:44:bf:05:3b:be:a1:7a:79:d3:b1:f9:
                    a6:39:6c:2d:c5:8f:80:ff:c4:82:4b:3f:ff:a0:41:
                    3e:14:6e:79:02:53:c7:8d:3e:41:41:21:49:9d:cc:
                    1b:b7:97:03:39:f5:52:34:23:95:03:60:38:4c:8a:
                    df:dc:e5:37:a0:1c:20:e1:a1:6e:3b:00:d5:f9:b9:
                    2a:30:6e:c6:f5:67:25:b9:91:38:d6:0e:b7:a4:f5:
                    7e:79:69:6f:11:1b:74:2c:93:44:a2:55:19:e7:17:
                    9c:25:74:12:3e:88:d8:2c:dd:48:df:b2:5c:f1:a0:
                    90:9c:94:0d:a0:9d:ad:70:1e:64:1a:0c:83:ce:15:
                    40:c8:f2:27:a0:9f:fc:3f:ef:4f:ad:e1:97:1f:5a:
                    c8:d0:b9:59:26:d4:a7:9c:f7:64:b7:61:69:a7:b5:
                    f5:1c:e3:31:4d:b1:a5:d0:ff:48:0c:7f:2c:30:4a:
                    b2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E9:95:6A:90:E3:0A:1C:A8:DF:AE:58:92:A6:CC:2E:4D:11:E1:F3
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS50836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ea0::/44

    Signature Algorithm: sha256WithRSAEncryption
         91:4b:31:70:e2:5f:8a:53:65:72:2f:fb:42:62:d5:ae:b0:a4:
         2c:5a:12:c2:9a:54:97:69:e4:67:86:57:e7:70:a8:35:bf:02:
         3c:1d:a0:9e:f8:e9:05:95:15:79:5d:09:08:fc:c8:26:1c:ad:
         07:c1:7e:f9:74:12:f7:66:62:f9:45:0f:eb:3e:21:ec:84:ea:
         e2:14:96:c4:2c:aa:78:35:15:fe:f8:35:87:26:dd:0c:34:07:
         8c:66:4e:de:5a:ce:de:af:fd:51:1f:f8:6f:42:03:2d:59:18:
         c3:1f:cd:53:a1:c6:8c:30:8a:fb:61:93:9d:1a:18:f8:ec:f5:
         c8:c4:5e:db:2d:23:40:2d:e3:92:ff:e4:66:42:bb:d9:3d:b6:
         de:de:f3:db:76:0a:00:af:98:cb:7e:c1:f6:54:13:ac:c1:50:
         b0:76:39:dc:e4:17:d6:31:df:c7:01:89:97:4f:7b:cb:6a:02:
         71:20:e5:77:46:85:22:d7:b9:ee:3d:55:51:a3:ce:ef:02:35:
         6b:28:fd:4f:20:86:d5:25:8f:4f:87:f9:04:1d:93:9a:e0:f2:
         71:32:9b:6f:c9:85:85:5b:21:62:62:61:89:e3:28:31:87:38:
         dc:b5:04:2f:7c:b3:16:f1:a9:26:08:2d:c8:48:65:50:56:39:
         fc:62:45:03
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUacaaJDKDkYO1W6TSoOtC77qls6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDkyMTAwNTJaFw0yNDA0MDcyMTA1NTJaMDMxMTAvBgNV
BAMTKEM0RTk5NTZBOTBFMzBBMUNBOERGQUU1ODkyQTZDQzJFNEQxMUUxRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Q45A1z+0UglH6NeP5966VyD6
SEjDMAQqwEgWbjlAYEqm/rZktuZIg1+VEl88eceVSoBbMAWeEPUfud1ILlaDxdDw
8SepIEe+Pccxbc1EvwU7vqF6edOx+aY5bC3Fj4D/xIJLP/+gQT4UbnkCU8eNPkFB
IUmdzBu3lwM59VI0I5UDYDhMit/c5TegHCDhoW47ANX5uSowbsb1ZyW5kTjWDrek
9X55aW8RG3Qsk0SiVRnnF5wldBI+iNgs3UjfslzxoJCclA2gna1wHmQaDIPOFUDI
8iegn/w/70+t4ZcfWsjQuVkm1Kec92S3YWmntfUc4zFNsaXQ/0gMfywwSrIdAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUxOmVapDjChyo365YkqbMLk0R4fMwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEUG
CCsGAQUFBwELBDkwNzA1BggrBgEFBQcwC4YpcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVM1MDgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeOoDANBgkqhkiG9w0BAQsF
AAOCAQEAkUsxcOJfilNlci/7QmLVrrCkLFoSwppUl2nkZ4ZX53CoNb8CPB2gnvjp
BZUVeV0JCPzIJhytB8F++XQS92Zi+UUP6z4h7ITq4hSWxCyqeDUV/vg1hybdDDQH
jGZO3lrO3q/9UR/4b0IDLVkYwx/NU6HGjDCK+2GTnRoY+Oz1yMRe2y0jQC3jkv/k
ZkK72T223t7z23YKAK+Yy37B9lQTrMFQsHY53OQX1jHfxwGJl097y2oCcSDld0aF
Ite57j1VUaPO7wI1ayj9TyCG1SWPT4f5BB2TmuDycTKbb8mFhVshYmJhieMoMYc4
3LUEL3yzFvGpJggtyEhlUFY5/GJFAw==
-----END CERTIFICATE-----