Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa
File:                     326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa (raw, json)
Hash identifier:          ef6sADZmMNQnXcFF29fYMBZi6wsKEXDuEIRdtXmQQFA=
Subject key identifier:   B2:ED:CB:67:41:5C:22:F7:53:50:63:1A:02:00:94:B0:44:90:2A:5E
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       0DAA59527704CD017F8E064F40DC63401F946372
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa
Signing time:             Sat 08 Apr 2023 05:28:41 +0000
ROA not before:           Sat 08 Apr 2023 05:23:41 +0000
ROA not after:            Sat 06 Apr 2024 05:28:41 +0000
asID:                     202911
IP address blocks:        2a12:dd47:8210::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:aa:59:52:77:04:cd:01:7f:8e:06:4f:40:dc:63:40:1f:94:63:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:41 2023 GMT
            Not After : Apr  6 05:28:41 2024 GMT
        Subject: CN=B2EDCB67415C22F75350631A020094B044902A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:0f:6c:c5:1a:7b:60:da:c6:06:35:31:f7:
                    6b:16:43:e8:bb:2a:74:ca:96:e7:39:fe:be:fa:e9:
                    01:f0:fb:31:7f:e6:1d:f2:82:df:6d:19:03:d6:08:
                    21:71:26:e9:cd:5d:2c:21:75:9f:a2:0d:f7:ac:37:
                    e3:a7:ea:66:b9:87:28:43:0f:4b:0d:ae:15:3d:bc:
                    93:01:45:60:0b:7f:5d:c9:e7:e4:06:d9:f1:c4:f7:
                    8f:16:c9:de:09:a0:28:e4:af:8b:a4:67:13:64:d0:
                    c0:6b:e8:28:21:e3:62:3e:4d:15:b5:c5:28:13:b2:
                    ba:15:3f:2c:cb:0b:24:81:d0:75:8a:df:2d:08:d6:
                    35:69:20:59:47:59:46:fe:80:20:f7:4e:f7:b2:58:
                    ad:d1:86:e8:f6:18:a6:14:1e:37:b3:47:32:08:6d:
                    bd:ef:ee:e4:c4:d4:10:ac:db:7d:4d:80:21:34:7c:
                    e6:bf:e9:7a:41:b9:d5:9e:87:a0:03:d9:24:22:71:
                    73:a1:9f:4e:19:6a:e3:60:76:7a:cf:ff:de:f2:99:
                    b2:fe:28:63:50:54:9d:d8:54:a9:39:b7:59:b3:4a:
                    09:a3:07:c1:a8:d0:6d:eb:39:5c:59:94:5a:7b:bd:
                    ff:6b:e7:a9:67:c2:4e:81:ad:b3:41:08:a8:0b:d4:
                    f2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:ED:CB:67:41:5C:22:F7:53:50:63:1A:02:00:94:B0:44:90:2A:5E
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8210::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:3e:cd:cd:59:cf:1c:d6:d5:cc:4f:38:fa:5c:c1:11:97:
         11:d5:a3:a5:36:e7:8f:d2:8e:fb:f9:6c:fd:d6:fa:d1:76:b0:
         40:03:e7:60:2b:7e:71:c0:42:47:e7:71:ec:34:94:0c:50:8f:
         b7:d4:25:a7:e8:58:1a:1c:a7:48:19:9f:8f:73:bd:fd:79:90:
         93:53:d9:45:86:b6:79:ff:85:17:23:f9:28:b6:31:eb:08:23:
         23:03:02:f7:79:b6:0b:f9:3d:99:2f:a4:33:f9:d3:17:c8:e6:
         77:87:fc:f8:a9:81:db:c1:cf:56:3f:8b:ca:15:8e:0b:f2:f7:
         33:b4:e3:88:2a:7b:4a:2e:31:6d:ca:f6:b0:68:1c:74:53:87:
         52:23:33:7b:41:3a:8b:9a:5c:42:16:a2:64:93:19:77:e9:4e:
         24:40:1d:74:51:f1:39:0e:15:02:0f:53:eb:51:a1:91:97:17:
         a2:92:e7:b4:7a:67:8f:13:f2:2b:41:3c:bd:24:93:7c:1c:ef:
         48:31:80:9a:5d:e6:e6:92:99:6c:4a:3d:fc:12:c5:08:c4:09:
         30:9d:74:48:fd:dd:ab:01:92:6e:aa:58:90:89:d3:01:4c:92:
         9c:fd:0b:00:a4:69:66:26:99:f5:84:3b:66:db:2d:d7:24:d9:
         9f:27:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----