Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS51129.roa
File:                     AS51129.roa (raw, json)
Hash identifier:          QMghFTmRij5xQ6OaQfE5pG+pg+mbWcE5eU5Dx8HB7yU=
Subject key identifier:   DC:54:7A:F1:9D:68:A5:6A:FE:22:04:04:49:A9:AD:17:8D:69:FC:36
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       25C9B2A7FD725B5DE6EF8CA1ED9892273D970465
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS51129.roa
Signing time:             Sat 08 Apr 2023 09:22:20 +0000
ROA not before:           Sat 08 Apr 2023 09:17:20 +0000
ROA not after:            Sat 06 Apr 2024 09:22:20 +0000
asID:                     51129
IP address blocks:        2a12:dd47:8e10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c9:b2:a7:fd:72:5b:5d:e6:ef:8c:a1:ed:98:92:27:3d:97:04:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:20 2023 GMT
            Not After : Apr  6 09:22:20 2024 GMT
        Subject: CN=DC547AF19D68A56AFE22040449A9AD178D69FC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:9e:fc:c3:e7:51:2b:e4:1e:59:6e:e6:3e:
                    82:58:02:bd:fa:36:78:e5:4e:ce:c9:67:0c:d8:b0:
                    3d:af:82:26:91:45:4b:b6:f8:de:b7:2f:8a:e1:34:
                    2a:e2:1e:83:92:10:5b:3a:12:13:af:65:fe:77:e8:
                    d6:a2:ae:e3:51:a3:78:43:ca:75:4f:3e:11:96:a0:
                    5c:c1:a8:11:07:f3:0d:f9:fe:a2:c5:7c:29:05:10:
                    f1:cf:09:65:bc:17:d2:89:3e:34:e9:60:68:b0:70:
                    d0:f4:6b:a9:65:d1:ba:79:f5:9e:88:25:93:22:07:
                    7e:1e:d0:a2:2b:76:b6:47:a4:a7:27:15:99:e8:2c:
                    31:1c:48:da:6d:b5:a4:74:27:dc:ba:81:e3:90:f7:
                    fd:83:8f:13:4f:ce:51:4a:63:7d:5b:68:88:61:94:
                    6a:ff:d8:b7:4a:4a:14:d7:f3:ca:5f:fe:02:19:3a:
                    f2:a4:47:0b:46:a2:87:54:50:17:3c:d5:d0:5b:82:
                    03:9e:de:68:83:1a:38:93:aa:f2:44:b7:5a:b4:36:
                    07:a1:25:d0:7a:88:a3:94:26:5d:4e:9e:2b:e7:da:
                    a9:a0:da:52:2a:ac:33:15:0e:92:59:36:70:74:b1:
                    da:63:67:f8:84:d1:6b:d1:83:8c:76:d5:73:90:96:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:54:7A:F1:9D:68:A5:6A:FE:22:04:04:49:A9:AD:17:8D:69:FC:36
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS51129.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e10::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:17:be:7a:8a:6d:ad:20:cd:4c:15:45:12:d3:c4:c0:93:59:
         92:c9:ed:56:65:22:aa:f6:49:d0:7f:3c:d5:15:d1:bd:97:d1:
         86:5d:6a:b7:1a:f8:4f:9b:9b:30:cf:ac:b5:08:fc:d7:ee:a6:
         4a:fa:97:4a:6f:51:d9:c4:d7:c6:2c:23:d9:8e:da:2f:28:06:
         03:03:34:b1:ad:86:af:cf:31:20:24:ab:97:87:a9:f2:d3:c0:
         0f:a1:2d:b2:6b:3b:d3:60:22:63:6d:79:ae:e3:60:9b:f4:8a:
         d6:cf:22:5d:5a:d2:46:b1:3d:18:71:ee:84:38:bc:85:7d:e8:
         2e:bf:38:26:6b:26:7f:e3:a2:80:34:4b:0f:f1:db:29:b3:11:
         5f:8b:2d:9d:11:83:97:8e:14:fa:31:6e:08:79:eb:35:a5:34:
         3e:b4:b3:76:22:3e:77:65:af:d9:76:e2:42:9f:78:4d:46:4e:
         9d:53:c5:de:c5:60:84:36:f8:4f:ac:db:34:29:b0:0c:2e:5b:
         93:79:de:92:01:53:13:a9:e9:80:8d:9a:73:1f:91:0c:1c:d3:
         db:42:87:da:1e:53:25:8c:d5:c2:fa:eb:44:94:5b:8e:f4:33:
         2d:ed:b8:fb:47:16:f9:97:4d:21:20:45:fe:80:0c:f9:fa:33:
         02:61:66:f9
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUJcmyp/1yW13m74yh7ZiSJz2XBGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjBaFw0yNDA0MDYwOTIyMjBaMDMxMTAvBgNV
BAMTKERDNTQ3QUYxOUQ2OEE1NkFGRTIyMDQwNDQ5QTlBRDE3OEQ2OUZDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSG578w+dRK+QeWW7mPoJYAr36
NnjlTs7JZwzYsD2vgiaRRUu2+N63L4rhNCriHoOSEFs6EhOvZf536NairuNRo3hD
ynVPPhGWoFzBqBEH8w35/qLFfCkFEPHPCWW8F9KJPjTpYGiwcND0a6ll0bp59Z6I
JZMiB34e0KIrdrZHpKcnFZnoLDEcSNpttaR0J9y6geOQ9/2DjxNPzlFKY31baIhh
lGr/2LdKShTX88pf/gIZOvKkRwtGoodUUBc81dBbggOe3miDGjiTqvJEt1q0Ngeh
JdB6iKOUJl1Onivn2qmg2lIqrDMVDpJZNnB0sdpjZ/iE0WvRg4x21XOQlgizAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQU3FR68Z1opWr+IgQESamtF41p/DYwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEUG
CCsGAQUFBwELBDkwNzA1BggrBgEFBQcwC4YpcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVM1MTEyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeOEDANBgkqhkiG9w0BAQsF
AAOCAQEAbBe+eoptrSDNTBVFEtPEwJNZksntVmUiqvZJ0H881RXRvZfRhl1qtxr4
T5ubMM+stQj81+6mSvqXSm9R2cTXxiwj2Y7aLygGAwM0sa2Gr88xICSrl4ep8tPA
D6Etsms702AiY215ruNgm/SK1s8iXVrSRrE9GHHuhDi8hX3oLr84Jmsmf+OigDRL
D/HbKbMRX4stnRGDl44U+jFuCHnrNaU0PrSzdiI+d2Wv2XbiQp94TUZOnVPF3sVg
hDb4T6zbNCmwDC5bk3nekgFTE6npgI2acx+RDBzT20KH2h5TJYzVwvrrRJRbjvQz
Le24+0cW+ZdNISBF/oAM+fozAmFm+Q==
-----END CERTIFICATE-----