Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a383034363a3a2f34382d3438203d3e20323033383638.roa
File:                     326131323a646434373a383034363a3a2f34382d3438203d3e20323033383638.roa (raw, json)
Hash identifier:          pgi8F2dJ6JAG9ethSsaCr+fu5l1Yk6yZLx8+x7d789g=
Subject key identifier:   AD:C5:0B:6E:09:E6:DC:7F:DE:C7:0B:CF:77:31:2E:D8:3E:44:8C:1C
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       1CFF052B1C8C1E30532A43DEAA10F3304510B40E
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a383034363a3a2f34382d3438203d3e20323033383638.roa
Signing time:             Sat 08 Apr 2023 05:28:45 +0000
ROA not before:           Sat 08 Apr 2023 05:23:45 +0000
ROA not after:            Sat 06 Apr 2024 05:28:45 +0000
asID:                     203868
IP address blocks:        2a12:dd47:8046::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ff:05:2b:1c:8c:1e:30:53:2a:43:de:aa:10:f3:30:45:10:b4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:45 2023 GMT
            Not After : Apr  6 05:28:45 2024 GMT
        Subject: CN=ADC50B6E09E6DC7FDEC70BCF77312ED83E448C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:48:31:3f:25:12:6e:82:c1:2c:0c:32:fc:80:
                    fe:be:0d:97:42:6a:be:85:0b:34:aa:11:e5:01:55:
                    ad:a8:36:97:87:2d:09:61:4c:33:14:8b:5f:22:d7:
                    1c:f9:e9:bd:b9:23:5f:99:5d:df:3f:02:8f:da:ad:
                    d9:33:6b:e3:4f:39:12:70:d1:a3:db:25:e9:4d:0d:
                    bc:31:c9:f1:f6:e6:1a:b7:c5:f7:a3:0d:59:2b:f0:
                    d2:03:8f:6d:3a:93:4c:44:e7:1e:9b:d7:6a:2d:c2:
                    78:d2:da:a9:75:39:1e:44:47:6b:1b:b5:30:25:d8:
                    84:01:b4:8b:ff:2a:f2:e2:a7:8a:5d:01:6c:28:af:
                    25:11:c1:39:78:d8:ca:ae:f8:07:60:dc:91:df:e5:
                    2d:fe:e7:78:0d:ec:00:58:d7:df:9e:e6:c8:74:25:
                    a5:30:85:9a:4e:56:6a:c3:bb:ca:18:b5:54:7f:22:
                    88:ac:19:5c:82:07:0f:77:c4:8b:bf:f3:d0:c1:59:
                    63:b4:74:c2:63:ac:32:ad:df:b3:e4:24:b7:f0:77:
                    2a:4f:b2:53:de:7a:97:46:d7:05:d8:52:77:df:ce:
                    96:49:20:a5:03:06:92:d6:eb:bf:cd:b7:b7:3a:85:
                    a5:0b:b5:07:91:02:09:34:e6:2a:11:1e:b4:91:60:
                    f0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C5:0B:6E:09:E6:DC:7F:DE:C7:0B:CF:77:31:2E:D8:3E:44:8C:1C
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a383034363a3a2f34382d3438203d3e20323033383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8046::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:c3:fb:ea:b4:b8:11:ca:e4:f8:12:12:45:9b:3d:fd:d0:0b:
         eb:8b:ca:5b:73:ab:f3:04:ff:6c:07:53:ed:9a:e8:b5:12:2c:
         9e:c5:ea:60:0f:da:28:da:a0:fa:58:de:d4:da:18:9c:c4:01:
         9d:17:7b:0e:c6:d9:3b:24:67:c7:03:db:63:11:c7:24:9b:28:
         f5:32:25:81:a4:53:62:81:4e:6c:28:0a:f4:37:be:d6:e6:69:
         3f:33:23:54:fc:78:a1:d8:41:88:35:fa:0a:f1:d5:42:12:b5:
         69:a7:2f:e6:e6:c3:51:b1:12:d7:2e:cb:53:27:7f:85:fb:7b:
         ab:09:ba:68:b2:06:58:d9:91:4b:3e:61:13:cf:68:d8:f5:86:
         80:8d:8c:d1:df:56:02:bc:79:3d:b8:46:8e:88:7b:65:68:61:
         19:58:32:06:13:9d:1d:5c:fb:7e:c3:d9:62:2e:6f:7d:0d:74:
         a3:68:18:88:79:64:01:6f:62:ea:e1:e4:52:3a:cd:db:c8:eb:
         e6:a4:07:90:19:fb:2e:a2:c2:72:76:33:d5:47:2a:7f:4a:d6:
         2f:39:2a:f1:4c:c9:38:5e:48:a8:2f:a9:7f:53:60:83:e2:8c:
         10:35:7a:d7:16:20:06:34:75:c1:49:b8:af:f3:f4:6e:aa:43:
         7a:da:7e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----