Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS59730.roa
File:                     AS59730.roa (raw, json)
Hash identifier:          sTanK5KELCZPlXdn21lgZwLPtwjZpisDJzLtWx2F/3s=
Subject key identifier:   E8:9E:E6:6E:F7:C6:FD:C0:85:E6:2C:22:67:11:AB:2B:F2:B0:3E:23
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       60807B4067A8279F5ECFB0B1CD71C3F93EE372A2
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS59730.roa
Signing time:             Sat 08 Apr 2023 09:22:27 +0000
ROA not before:           Sat 08 Apr 2023 09:17:27 +0000
ROA not after:            Sat 06 Apr 2024 09:22:27 +0000
asID:                     59730
IP address blocks:        2a12:dd47:82b0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:80:7b:40:67:a8:27:9f:5e:cf:b0:b1:cd:71:c3:f9:3e:e3:72:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:27 2023 GMT
            Not After : Apr  6 09:22:27 2024 GMT
        Subject: CN=E89EE66EF7C6FDC085E62C226711AB2BF2B03E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:b6:e8:7e:1b:a2:b7:e1:f0:03:64:f0:a2:
                    65:dc:f5:70:fa:cb:12:c5:5c:61:8e:7f:ca:5f:33:
                    53:fa:c9:02:e1:6a:0e:5b:6b:c3:1d:1b:b7:14:f1:
                    f0:20:d5:ad:cf:b5:d4:0c:b6:de:02:42:23:d8:cf:
                    89:77:b6:59:6b:b7:c1:ba:65:46:32:66:45:5d:62:
                    da:68:4e:d6:65:25:07:bf:6d:98:64:25:ad:a5:ea:
                    80:c7:5a:ea:12:51:90:a9:5a:a5:94:62:3b:1a:ae:
                    18:4d:e7:aa:10:79:55:4f:17:89:84:7a:3b:4d:61:
                    62:40:be:1d:2d:09:0a:5e:1d:25:e4:11:32:ac:d0:
                    97:d9:51:ff:b0:b0:c6:5e:37:65:a9:ba:71:fb:07:
                    cd:b9:db:16:f8:79:86:bf:d1:57:0a:48:61:f8:9e:
                    13:4f:c1:92:ad:b5:bf:6a:b4:56:7e:9a:f6:9d:08:
                    fa:4f:cf:ba:c0:44:81:e5:c4:46:8c:22:a9:b4:ef:
                    c2:ce:c4:1b:c2:5b:e2:7c:44:18:71:50:fa:44:dc:
                    53:0c:50:2d:cb:10:92:52:28:fb:78:2a:ec:13:22:
                    e9:9e:61:5d:5d:6a:ff:0a:2e:f9:57:73:47:20:4a:
                    a4:ff:40:1b:d0:b2:0d:1b:0c:3a:e6:9d:85:c9:33:
                    9c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9E:E6:6E:F7:C6:FD:C0:85:E6:2C:22:67:11:AB:2B:F2:B0:3E:23
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS59730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         26:46:26:d4:2a:e5:5c:7f:01:3d:6e:6d:dd:e8:2e:e1:d0:35:
         74:83:03:cc:b5:97:2b:cc:38:49:a8:b8:30:9e:eb:16:07:33:
         af:1e:e5:d0:2f:ae:bc:4b:4b:eb:12:a6:fc:19:31:61:69:98:
         3c:0f:86:c7:34:dd:ca:16:d8:f6:31:a1:32:93:f9:75:c7:47:
         a8:8f:e9:77:9d:c6:65:5b:45:0e:e3:22:a0:29:99:14:10:59:
         81:53:8c:6c:d8:34:e6:e6:06:2a:26:c8:8b:82:4e:b7:f2:70:
         67:f0:0d:a7:2c:52:8d:3b:da:b5:99:75:5d:e7:5d:f8:04:26:
         ca:95:c4:00:b2:2a:b3:7c:6c:35:e8:fb:37:6f:9e:5d:9a:63:
         dd:ea:a8:60:6d:01:f6:42:5d:f5:5d:1b:61:fd:d2:cb:42:2e:
         f2:c2:56:26:26:0d:ab:f1:e4:97:98:6b:67:0f:30:33:ea:3e:
         6b:79:fa:08:bb:2c:7b:78:18:82:cb:4e:d2:bb:43:b0:a3:da:
         d0:cf:31:9a:be:89:99:b8:28:16:6c:bd:31:c0:1c:ff:69:16:
         db:a8:5d:b9:88:45:68:ea:d1:e1:3b:41:6c:4a:f3:d0:a2:c0:
         f2:d5:21:38:2c:11:d2:8d:5f:ad:d4:35:8d:4f:b4:27:9a:cd:
         85:40:fa:ce
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUYIB7QGeoJ59ez7CxzXHD+T7jcqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjdaFw0yNDA0MDYwOTIyMjdaMDMxMTAvBgNV
BAMTKEU4OUVFNjZFRjdDNkZEQzA4NUU2MkMyMjY3MTFBQjJCRjJCMDNFMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDbbofhuit+HwA2TwomXc9XD6
yxLFXGGOf8pfM1P6yQLhag5ba8MdG7cU8fAg1a3PtdQMtt4CQiPYz4l3tllrt8G6
ZUYyZkVdYtpoTtZlJQe/bZhkJa2l6oDHWuoSUZCpWqWUYjsarhhN56oQeVVPF4mE
ejtNYWJAvh0tCQpeHSXkETKs0JfZUf+wsMZeN2WpunH7B8252xb4eYa/0VcKSGH4
nhNPwZKttb9qtFZ+mvadCPpPz7rARIHlxEaMIqm078LOxBvCW+J8RBhxUPpE3FMM
UC3LEJJSKPt4KuwTIumeYV1dav8KLvlXc0cgSqT/QBvQsg0bDDrmnYXJM5w3AgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQU6J7mbvfG/cCF5iwiZxGrK/KwPiMwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEUG
CCsGAQUFBwELBDkwNzA1BggrBgEFBQcwC4YpcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVM1OTczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeCsDANBgkqhkiG9w0BAQsF
AAOCAQEAJkYm1CrlXH8BPW5t3egu4dA1dIMDzLWXK8w4Sai4MJ7rFgczrx7l0C+u
vEtL6xKm/BkxYWmYPA+GxzTdyhbY9jGhMpP5dcdHqI/pd53GZVtFDuMioCmZFBBZ
gVOMbNg05uYGKibIi4JOt/JwZ/ANpyxSjTvatZl1Xedd+AQmypXEALIqs3xsNej7
N2+eXZpj3eqoYG0B9kJd9V0bYf3Sy0Iu8sJWJiYNq/Hkl5hrZw8wM+o+a3n6CLss
e3gYgstO0rtDsKPa0M8xmr6JmbgoFmy9McAc/2kW26hduYhFaOrR4TtBbErz0KLA
8tUhOCwR0o1frdQ1jU+0J5rNhUD6zg==
-----END CERTIFICATE-----