Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a3330303a3a2f34302d3438203d3e20323033383838.roa
File:                     326131323a646434373a3330303a3a2f34302d3438203d3e20323033383838.roa (raw, json)
Hash identifier:          UmQRCr46XNAppwC1V/VNxsNT5dxgtYqV51Z2EPBhrL8=
Subject key identifier:   BA:2E:92:8E:76:FB:CC:75:12:F3:78:FB:F3:69:27:EB:15:11:47:FC
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       4263D1D6C946D75CF816EDA8787DD8D7D26393F9
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a3330303a3a2f34302d3438203d3e20323033383838.roa
Signing time:             Sat 08 Apr 2023 05:28:45 +0000
ROA not before:           Sat 08 Apr 2023 05:23:45 +0000
ROA not after:            Sat 06 Apr 2024 05:28:45 +0000
asID:                     203888
IP address blocks:        2a12:dd47:300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:63:d1:d6:c9:46:d7:5c:f8:16:ed:a8:78:7d:d8:d7:d2:63:93:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:45 2023 GMT
            Not After : Apr  6 05:28:45 2024 GMT
        Subject: CN=BA2E928E76FBCC7512F378FBF36927EB151147FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:93:08:d9:56:bd:bc:08:eb:22:7f:35:35:
                    8c:00:1b:b7:0a:e4:ee:0c:93:e7:36:82:ea:75:9d:
                    88:02:c1:91:0d:2b:32:40:28:ee:98:83:c4:ef:ea:
                    eb:58:62:fa:36:0d:4f:72:0a:0e:ca:eb:aa:56:d8:
                    63:65:99:ee:64:57:64:36:c1:c3:86:a2:e9:56:14:
                    77:15:da:0b:07:e3:90:4a:34:85:0a:8b:8b:7a:60:
                    1f:f5:43:b5:59:0a:53:16:f6:85:8f:0d:b8:6f:a6:
                    72:6e:b5:ad:29:a7:0b:bb:8e:b2:2f:50:db:c6:9f:
                    b1:be:7d:3a:b4:f7:34:ce:14:eb:8f:0a:dd:04:b8:
                    5e:a6:b4:f0:93:7e:7d:3e:33:1a:cf:38:dd:e6:62:
                    b0:25:5d:c1:e5:c9:06:e7:39:56:90:09:7f:1e:22:
                    a4:91:b2:5d:b3:5b:43:55:cf:91:14:6e:a3:56:44:
                    90:94:0f:3f:bf:c1:f7:6b:2a:c9:a8:0f:4a:dc:26:
                    46:4d:6d:86:bd:f1:5a:3e:d4:94:df:d5:6b:86:0a:
                    b3:54:d1:af:78:df:28:5d:30:6a:0d:fb:9e:ea:35:
                    f5:52:c2:20:43:39:f7:33:a1:6b:e1:b7:49:7b:4b:
                    b0:08:44:f0:c9:d2:d9:90:f7:62:8e:26:7d:06:80:
                    c8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2E:92:8E:76:FB:CC:75:12:F3:78:FB:F3:69:27:EB:15:11:47:FC
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a3330303a3a2f34302d3438203d3e20323033383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:25:a9:2e:67:c9:e3:12:dc:ef:9f:5c:6e:c7:e6:e4:85:
         38:5e:ab:67:b4:7e:b0:2a:43:57:41:36:dc:3d:c3:d3:85:ce:
         7f:bb:3a:15:0f:d8:03:2c:0a:2c:de:60:4b:16:a7:7e:0a:87:
         46:bd:7b:cc:65:d9:ae:4f:4a:dc:bb:83:f8:e2:a2:46:d5:fd:
         1e:d7:7c:de:31:76:73:61:14:7f:a4:7a:3c:1b:14:fb:99:9e:
         54:7f:0d:00:7d:26:6e:0d:2d:12:03:d5:6c:c9:04:75:9a:ea:
         07:1c:77:77:78:d1:11:41:34:be:b4:c0:de:ba:88:c5:99:9a:
         1b:94:e1:c6:15:a4:74:1e:3f:49:49:26:7e:29:ef:98:5e:90:
         13:84:16:0e:a4:5a:41:67:b7:13:81:a2:c8:7b:1a:63:a2:3b:
         a2:12:9e:81:8b:07:47:ae:f3:23:ec:5a:04:67:cb:56:8c:d8:
         f6:06:e9:e8:10:06:e1:42:a9:10:91:f6:d2:12:f2:5e:2a:98:
         b4:61:90:3f:8e:45:67:4e:0d:22:fe:eb:2e:c5:6c:75:38:5c:
         93:26:16:9c:99:2b:26:a4:82:7c:3f:27:1d:29:9f:13:fb:5c:
         4d:bd:f8:06:d6:08:cd:4f:cd:09:31:94:c8:8a:e4:ce:b4:7b:
         07:53:a2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----