Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a383034633a3a2f34382d3438203d3e20323032383238.roa
File:                     326131323a646434373a383034633a3a2f34382d3438203d3e20323032383238.roa (raw, json)
Hash identifier:          zJ2kwSPyF2fJO1EQZ6XkCUrAmyKQIvT/jF+cGBF0vQY=
Subject key identifier:   93:CA:A6:83:98:D1:43:7A:8A:8C:9F:96:91:2C:10:DF:B3:4E:78:2B
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       63FAD23F21A3BC20CD9454FFD4FD10075B5DC83F
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a383034633a3a2f34382d3438203d3e20323032383238.roa
Signing time:             Sat 08 Apr 2023 05:28:44 +0000
ROA not before:           Sat 08 Apr 2023 05:23:44 +0000
ROA not after:            Sat 06 Apr 2024 05:28:44 +0000
asID:                     202828
IP address blocks:        2a12:dd47:804c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fa:d2:3f:21:a3:bc:20:cd:94:54:ff:d4:fd:10:07:5b:5d:c8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:44 2023 GMT
            Not After : Apr  6 05:28:44 2024 GMT
        Subject: CN=93CAA68398D1437A8A8C9F96912C10DFB34E782B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ef:02:1c:b8:d7:a9:cb:7f:2d:2f:43:e5:6b:
                    b4:de:d9:8c:9c:2c:60:01:22:a2:34:fe:e4:35:34:
                    c5:6f:aa:26:ca:b6:60:8a:3d:9b:6a:bf:35:6e:98:
                    6e:f3:4a:45:6c:1e:f9:c9:b9:b2:b1:b6:00:35:6b:
                    3b:56:53:d1:a9:ac:19:b7:f3:4f:e2:2e:31:0c:22:
                    2f:ff:11:41:d2:52:cc:86:80:b8:c0:d9:9c:be:19:
                    ab:f6:cf:ae:58:c0:90:2f:a7:f4:3d:d8:68:fc:e5:
                    c8:67:16:51:9f:40:2b:25:e1:8b:31:69:ec:4c:e3:
                    d0:7f:c8:3b:19:ac:46:b0:ea:19:16:b6:93:79:3b:
                    f3:4e:95:8d:30:e6:87:c9:fd:28:6e:d5:8a:fa:b9:
                    b6:ea:33:28:8b:91:e7:a5:7c:15:b7:00:a6:4e:a9:
                    a3:78:b0:84:b5:18:c4:f0:48:57:07:79:5a:22:fb:
                    2d:21:d0:57:a9:c9:3e:ed:7f:11:78:a7:fc:82:2f:
                    67:0b:5b:b9:a9:37:b6:82:11:b8:43:2b:00:1c:d0:
                    ff:ce:f6:37:88:ea:d6:2e:32:37:74:9b:c6:f5:aa:
                    68:06:f1:2c:11:4e:6a:ad:69:2e:42:c7:49:76:d2:
                    e8:2c:f1:f6:d1:4d:17:26:f7:c3:9a:9d:d0:e5:6c:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CA:A6:83:98:D1:43:7A:8A:8C:9F:96:91:2C:10:DF:B3:4E:78:2B
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a383034633a3a2f34382d3438203d3e20323032383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804c::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:11:06:7c:0a:38:ca:b9:ed:42:6b:59:d9:99:d9:3b:7e:99:
         d2:df:13:be:02:89:f1:cc:dc:a2:b0:c6:2a:45:3e:8a:f3:c5:
         b7:ec:9f:47:09:ef:75:fb:36:a0:a9:d0:ba:00:59:1c:0c:eb:
         33:56:82:30:80:31:3e:70:a9:31:f9:c4:5f:cd:d9:3a:64:52:
         be:94:0b:a4:a0:0b:ae:af:b6:3e:bf:90:72:21:89:cd:e2:6e:
         15:21:cf:aa:bf:74:64:b2:9f:8e:8d:6d:e6:c2:ae:f0:af:22:
         cd:0b:35:94:b4:6d:cf:e0:82:40:bf:93:64:81:b7:21:88:da:
         42:7b:33:bf:17:f6:5e:c2:f0:7f:12:93:fd:f0:27:ab:ea:05:
         02:f5:f2:f8:fe:3d:55:bd:35:a8:78:8f:c1:e7:23:52:4b:f2:
         d7:d2:a7:e2:92:d1:cb:26:6d:a3:62:1c:41:65:55:62:41:96:
         92:3d:b4:1c:27:86:b4:8b:62:f6:b8:ba:7c:e4:bf:d6:00:8a:
         c2:21:15:7a:82:e8:83:69:c1:00:5e:b2:ca:49:f5:52:56:10:
         5a:8f:86:d4:75:a1:7c:68:a6:83:94:28:ef:ec:2f:87:d0:ba:
         48:eb:fa:c2:cb:b9:56:d4:31:d6:5c:3a:fe:f9:f5:ae:f9:3e:
         00:e1:77:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----