Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS57957.roa
File:                     AS57957.roa (raw, json)
Hash identifier:          P1kO80CGljb1zdriXdcyz3GUkCqDB3is9WRWIueVQL0=
Subject key identifier:   24:89:57:79:F8:07:61:DD:E7:20:DA:BC:9F:B2:F1:9B:FC:F8:67:23
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       3CD65BFC6F93705D1158099DCD5AA402DD05F754
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS57957.roa
Signing time:             Sat 08 Apr 2023 09:22:09 +0000
ROA not before:           Sat 08 Apr 2023 09:17:09 +0000
ROA not after:            Sat 06 Apr 2024 09:22:09 +0000
asID:                     57957
IP address blocks:        2a12:dd47:804a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d6:5b:fc:6f:93:70:5d:11:58:09:9d:cd:5a:a4:02:dd:05:f7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:09 2023 GMT
            Not After : Apr  6 09:22:09 2024 GMT
        Subject: CN=24895779F80761DDE720DABC9FB2F19BFCF86723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ab:47:f1:67:17:c7:ce:97:a2:64:33:15:14:
                    b3:96:07:7d:90:ba:59:85:85:69:ff:20:e6:be:11:
                    dd:09:65:68:5d:c8:c9:58:11:3d:c5:e7:95:5f:06:
                    b9:df:e2:95:17:70:54:65:2d:a7:58:d6:86:dd:1f:
                    90:7f:7b:0e:33:6a:33:8c:39:89:9f:54:7b:a8:db:
                    e1:4b:da:9d:fb:bc:76:3f:66:11:f2:d6:a5:40:28:
                    68:26:7a:ed:52:b9:63:06:75:bf:c7:03:62:15:5a:
                    21:fe:49:a2:52:ea:2b:74:32:ed:7b:e8:01:ad:20:
                    4d:e0:51:61:ba:be:b2:46:95:41:62:29:8c:c0:9d:
                    fc:7c:91:bb:48:a9:5c:20:96:1a:65:27:ec:10:c8:
                    b5:a4:b9:d4:95:e9:e4:29:24:67:fb:2f:78:10:e7:
                    a2:6f:4d:db:0d:16:10:bb:7a:a0:fa:d1:69:35:ad:
                    2a:8a:90:df:68:d0:8b:d7:e5:67:ae:97:07:ea:d6:
                    39:a6:92:3f:ec:85:20:32:35:30:db:d0:36:95:93:
                    6c:d9:d2:e6:e5:72:24:6c:6f:96:22:01:18:e7:88:
                    e3:ec:45:5c:7b:60:20:a9:9b:05:cf:72:da:01:bb:
                    a3:64:88:a4:c1:5e:fd:8d:d4:94:d0:4d:f7:ec:4d:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:89:57:79:F8:07:61:DD:E7:20:DA:BC:9F:B2:F1:9B:FC:F8:67:23
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS57957.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:4d:4c:45:90:51:45:f0:89:75:5d:ce:68:48:8c:0d:62:68:
         cf:6b:ea:b0:84:fb:19:bd:2a:1a:54:b4:c9:30:db:64:4c:e1:
         ae:b8:2f:6d:7a:0c:8f:a3:99:e9:5d:d6:71:0e:bb:02:6d:32:
         88:be:5e:93:cd:e2:30:00:07:07:20:12:b5:28:d8:73:22:12:
         de:f4:54:3d:8c:1b:2c:cc:76:ad:a3:f2:23:e3:57:88:7f:73:
         36:70:ea:8f:6c:9e:19:92:4e:f5:dd:a4:51:77:35:31:a4:61:
         dd:53:d5:e8:0d:7c:e2:44:b1:a8:01:38:81:cf:f8:9c:20:7f:
         18:b2:ab:3d:47:f8:a8:18:ff:11:6b:e0:27:04:8a:ca:67:25:
         d2:83:1f:dd:a0:af:2c:02:d1:15:42:6a:1f:85:1f:6e:e5:9a:
         8c:6d:9a:0f:3d:86:9c:57:3b:ab:a9:8c:80:9a:6c:7c:82:df:
         38:20:70:c0:67:ee:63:bb:f0:00:91:df:30:98:52:c3:77:8c:
         e7:82:22:d0:c5:6c:81:5e:1b:e4:9d:69:98:b8:73:c3:a3:fb:
         f1:4c:98:08:c7:f7:79:a0:74:6e:6e:59:94:10:e3:0e:b0:ac:
         81:34:af:07:fe:27:09:f7:37:b1:6e:2c:43:1e:3d:0d:d9:0d:
         4a:20:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----