Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a353130303a3a2f34302d3438203d3e20323033363336.roa
File:                     326131323a646434373a353130303a3a2f34302d3438203d3e20323033363336.roa (raw, json)
Hash identifier:          7W0lXuMlJyuOojUZVxygfjlVB6uuMmEJvNlrCaOr5vY=
Subject key identifier:   2A:65:CB:CF:53:EC:AB:AE:41:AA:9C:AA:1A:5A:EF:FE:09:33:3B:C8
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       3F0A05590E2189C16F351D252BC7CED31954E6E5
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a353130303a3a2f34302d3438203d3e20323033363336.roa
Signing time:             Sat 08 Apr 2023 05:28:47 +0000
ROA not before:           Sat 08 Apr 2023 05:23:47 +0000
ROA not after:            Sat 06 Apr 2024 05:28:47 +0000
asID:                     203636
IP address blocks:        2a12:dd47:5100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0a:05:59:0e:21:89:c1:6f:35:1d:25:2b:c7:ce:d3:19:54:e6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:47 2023 GMT
            Not After : Apr  6 05:28:47 2024 GMT
        Subject: CN=2A65CBCF53ECABAE41AA9CAA1A5AEFFE09333BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:58:a9:5a:35:69:d9:bc:d2:35:f0:ed:e7:
                    a9:bd:81:e4:67:ea:bd:02:14:34:d2:0f:28:f4:10:
                    fb:39:1b:fe:00:a3:ad:a1:7f:91:61:1c:d6:74:ce:
                    0b:22:67:c7:e1:be:cb:73:65:0e:d8:8c:7d:a1:52:
                    4d:18:40:a1:9c:79:ab:ba:7a:7a:d5:44:8b:53:6d:
                    bd:55:f3:a3:d7:0e:3b:11:aa:18:34:a0:7e:b2:d1:
                    a9:1b:3d:70:38:1d:ab:a0:68:19:40:95:dd:9d:37:
                    ae:d4:5a:d5:4d:70:26:ee:4f:0e:35:57:2c:33:b9:
                    58:6c:25:0b:a1:6f:d0:8d:0e:89:b1:d9:3f:0c:6b:
                    c1:aa:73:8c:fd:e9:5d:07:8a:11:c9:2c:c8:6d:02:
                    ff:80:b8:55:35:4a:6b:0b:c2:b5:16:09:6a:21:d5:
                    01:11:c0:c8:43:c7:bd:af:69:34:a6:08:b5:04:42:
                    b2:6e:4c:e5:bf:6e:77:17:5e:5c:95:8c:fe:8a:d8:
                    be:98:cb:0f:b9:92:90:fb:b3:37:cc:55:2b:66:7f:
                    69:c3:30:a7:16:48:09:09:45:9f:58:17:32:6f:53:
                    0e:83:3f:a8:6f:c2:fa:73:38:55:ba:1c:43:94:10:
                    4b:5e:dc:4b:93:48:27:71:b1:89:24:e4:7e:18:13:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:65:CB:CF:53:EC:AB:AE:41:AA:9C:AA:1A:5A:EF:FE:09:33:3B:C8
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a353130303a3a2f34302d3438203d3e20323033363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:f2:7c:bc:a5:b7:d8:02:e5:96:4a:50:36:6f:0e:9f:9f:69:
         19:fa:66:43:f2:b1:44:a3:9d:8d:fa:2d:65:da:1d:7c:8d:55:
         49:2d:b6:45:3a:70:f0:b7:a4:9f:d4:80:65:e4:c5:54:6c:70:
         58:ab:97:3b:41:83:b3:aa:89:c1:b2:22:ac:63:f9:9f:9c:bb:
         fe:cb:e1:4b:d9:d2:ad:93:67:e3:ee:a7:2c:b1:5e:e2:17:d9:
         18:08:9b:55:60:1c:a8:a2:40:54:86:5f:2f:76:32:98:68:bc:
         aa:60:c0:9c:2d:2e:b8:ce:4b:53:fe:ed:a0:3c:26:32:37:bb:
         b3:e3:d1:5c:e8:ff:a0:fb:a2:26:09:d5:e9:9d:38:c5:43:9c:
         7f:41:bc:ba:bb:8d:59:07:f6:40:63:9a:99:aa:ce:78:21:bf:
         29:c9:a3:a5:c7:01:85:7f:89:e2:51:71:f1:6f:81:3f:05:b0:
         8d:9f:42:98:c2:ed:d5:a8:56:9d:ec:98:a4:3b:14:8b:f0:3a:
         bc:39:1c:5b:6e:89:8e:48:e1:9c:a4:bb:7b:63:67:1f:1e:eb:
         09:ff:aa:69:0d:28:bc:f9:ac:ca:d3:d1:34:5a:27:49:b4:20:
         12:5b:54:60:06:2e:d8:50:aa:19:50:67:f7:21:ef:ed:f5:39:
         43:9e:ab:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----