Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a383032623a3a2f34382d3438203d3e20323032383230.roa
File:                     326131323a646434373a383032623a3a2f34382d3438203d3e20323032383230.roa (raw, json)
Hash identifier:          CqLU0Y4kJueEpBINy7CjPTzvQIHG4YMTHQ3N2Gob8rM=
Subject key identifier:   5F:2B:DE:88:02:91:E4:19:78:8A:D9:E0:95:D1:80:11:6E:C5:66:83
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       42A2E4D0B119025A5657BE00733DE1E02B8EB32F
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a383032623a3a2f34382d3438203d3e20323032383230.roa
Signing time:             Sat 08 Apr 2023 05:28:48 +0000
ROA not before:           Sat 08 Apr 2023 05:23:48 +0000
ROA not after:            Sat 06 Apr 2024 05:28:48 +0000
asID:                     202820
IP address blocks:        2a12:dd47:802b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a2:e4:d0:b1:19:02:5a:56:57:be:00:73:3d:e1:e0:2b:8e:b3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:48 2023 GMT
            Not After : Apr  6 05:28:48 2024 GMT
        Subject: CN=5F2BDE880291E419788AD9E095D180116EC56683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:ef:52:b9:fb:6f:d4:ea:60:f0:5d:83:fb:
                    fa:46:f2:b9:55:ee:2d:76:77:7b:94:c6:c8:6e:68:
                    71:c6:51:1f:60:18:3e:14:a7:44:40:58:37:6a:63:
                    9f:d9:4b:b6:02:a0:ff:7c:97:fb:3c:9c:13:25:b2:
                    b5:dd:bf:56:71:bb:35:6f:0c:48:e2:51:a3:b9:da:
                    d5:56:8a:4e:c3:94:d0:b4:12:70:ed:b4:11:c5:77:
                    ab:5f:92:90:db:cb:8e:55:a5:8c:de:61:85:57:14:
                    76:4f:a7:97:87:a6:d3:75:d8:f7:e0:41:f8:7f:9a:
                    37:49:5f:f0:81:78:9a:ae:b2:c2:13:37:cd:c2:db:
                    bc:91:3b:9e:63:4d:dd:ec:2c:28:94:f3:9e:aa:4b:
                    0a:a1:e5:ca:52:47:c3:59:48:6d:34:74:3c:8e:63:
                    ac:44:ce:a2:a5:a9:c5:17:74:a7:dc:ef:35:e8:e4:
                    c1:8f:a0:29:b1:2c:de:9f:57:5a:9c:b4:b7:fb:c9:
                    2d:3a:fa:0a:ac:cf:68:ec:bc:dd:8f:e4:ac:07:ba:
                    1c:83:9a:f6:29:9c:63:85:d6:48:2f:23:ae:bf:74:
                    93:67:80:00:87:aa:08:96:ec:7a:d6:d0:9c:ac:49:
                    a3:54:f1:be:a6:24:80:f9:72:a1:46:30:38:5f:89:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2B:DE:88:02:91:E4:19:78:8A:D9:E0:95:D1:80:11:6E:C5:66:83
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a383032623a3a2f34382d3438203d3e20323032383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:e5:d6:60:a0:ac:f8:43:0f:0d:8c:a4:85:38:6b:02:c8:57:
         b9:15:4d:ce:81:b1:6a:84:d5:2b:39:90:d3:b3:2b:f1:6e:98:
         5b:d7:dc:0a:ce:a8:6a:b1:de:77:ff:f3:9f:88:55:36:e9:8e:
         84:fb:d3:bb:d5:3d:ea:70:67:84:28:5c:cd:d8:a0:1b:a4:cc:
         92:67:4c:73:e1:5a:71:83:d8:58:07:43:d7:7e:28:78:68:d6:
         20:c7:30:3f:83:31:4a:7b:d6:8d:f3:4c:92:d1:c7:b2:0f:6b:
         ba:cd:2e:c1:b1:f0:81:82:2f:ee:35:f6:b7:91:d1:9b:b7:fd:
         26:68:89:4c:57:49:e6:91:43:f6:ef:66:95:d7:32:60:17:f3:
         f8:b5:71:2d:75:f1:39:82:d7:b2:84:89:a9:0f:41:6c:ac:b5:
         fb:66:d1:98:bf:98:84:2e:4b:c6:b9:3d:82:92:ee:35:bd:37:
         34:c0:e6:2b:e7:2c:78:e3:9e:ec:3a:15:88:3e:76:5e:b7:96:
         e6:c8:ae:39:d3:4d:ef:9e:31:28:fd:93:82:41:a7:6f:85:16:
         1d:40:e1:ec:ab:2b:ba:2b:31:eb:75:14:6e:6f:a8:a6:de:00:
         0b:33:01:8d:09:25:bb:36:0d:06:6d:5e:24:9e:34:14:83:8b:
         fc:67:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----