Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a383334303a3a2f34342d3438203d3e20323030323430.roa
File:                     326131323a646434373a383334303a3a2f34342d3438203d3e20323030323430.roa (raw, json)
Hash identifier:          V9Oh21Zn8VSnFlAuLaNuaAfKlf6Al4EpkEbP5OjkO7U=
Subject key identifier:   29:F3:26:88:FB:D7:42:7C:C5:D0:54:C9:DE:28:2E:82:74:BD:AD:2F
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       56C419C0A9ADB42BE2ED4FEBDE255C314F03DBB0
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a383334303a3a2f34342d3438203d3e20323030323430.roa
Signing time:             Sat 08 Apr 2023 05:28:42 +0000
ROA not before:           Sat 08 Apr 2023 05:23:42 +0000
ROA not after:            Sat 06 Apr 2024 05:28:42 +0000
asID:                     200240
IP address blocks:        2a12:dd47:8340::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c4:19:c0:a9:ad:b4:2b:e2:ed:4f:eb:de:25:5c:31:4f:03:db:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:42 2023 GMT
            Not After : Apr  6 05:28:42 2024 GMT
        Subject: CN=29F32688FBD7427CC5D054C9DE282E8274BDAD2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:a1:ad:49:a9:29:cb:4a:1a:bf:33:b2:c3:
                    65:61:fe:ce:0d:d2:44:56:e6:38:8f:e5:c1:51:f0:
                    2d:1f:38:a6:d7:e9:91:3f:5d:47:f3:74:50:ed:9d:
                    fa:a9:2f:5c:93:de:b9:c3:52:44:24:f5:df:06:be:
                    7c:83:cd:df:96:47:e5:48:da:34:7c:59:fc:dd:36:
                    94:fb:6e:ee:91:cd:be:60:c8:64:13:d1:f6:2a:23:
                    54:88:5b:7f:41:83:e4:eb:40:a8:8a:07:65:c9:9d:
                    ae:c6:4b:4b:60:c9:72:72:04:3b:d7:82:16:59:0d:
                    71:15:cf:22:bf:da:62:8c:8e:78:99:2e:b3:91:11:
                    61:3a:d9:28:e8:e8:74:e5:1e:e3:ea:e4:c3:65:c1:
                    8e:da:ab:fd:5c:88:7d:3e:98:56:ff:b3:1f:8e:0a:
                    4a:cc:e3:4b:98:88:45:b0:5e:36:ec:c6:9b:1a:89:
                    e7:0d:01:a9:0f:81:e8:32:f7:32:f7:d7:22:d8:83:
                    a2:5f:6d:e6:35:ed:27:c9:1a:ea:6f:68:1e:0e:af:
                    5e:87:48:5c:6d:45:1c:31:9f:ed:fb:38:03:99:68:
                    50:78:74:f6:36:72:81:91:97:d4:4e:ef:2b:4a:77:
                    77:7d:30:6d:3e:7e:84:cb:6e:3b:cb:87:5b:2a:1a:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F3:26:88:FB:D7:42:7C:C5:D0:54:C9:DE:28:2E:82:74:BD:AD:2F
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a383334303a3a2f34342d3438203d3e20323030323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8340::/44

    Signature Algorithm: sha256WithRSAEncryption
         ad:3e:ad:40:c9:ec:f0:b8:5f:48:91:8a:d1:bb:a9:e9:52:e5:
         d3:b7:2b:97:7f:01:b8:fc:33:fb:93:ab:b2:4f:90:19:02:7d:
         3a:8c:ef:71:21:a3:80:39:ab:a2:ea:14:29:30:69:03:16:d9:
         f2:3a:99:17:7b:ed:e5:17:79:71:1e:e7:dd:bc:44:5b:80:fe:
         06:44:c6:2c:5f:85:80:25:81:55:c8:b3:12:56:cc:b8:e8:23:
         ec:5f:dc:ca:71:19:a5:3a:6d:2f:1c:67:fc:ab:91:d2:cb:32:
         71:ff:9b:d7:74:73:96:d4:43:ab:81:bc:0b:53:b1:ae:b3:a3:
         5f:c7:32:e0:fd:5c:12:3c:cb:2f:c8:d7:03:cd:2e:b4:2f:75:
         be:b0:ab:54:df:b3:43:53:c3:66:db:d4:e2:1d:81:3e:3c:df:
         20:9b:71:49:95:f3:3b:81:44:b0:73:eb:e3:e7:6b:70:a1:7b:
         0f:39:68:08:bf:ae:48:17:19:f6:3d:b6:74:f6:a5:c1:c3:94:
         aa:d5:9a:e8:03:f1:99:3e:8e:1f:b2:5c:d6:94:b2:9b:18:20:
         a4:53:c8:32:38:f7:a3:9f:ca:f7:b7:cf:51:89:b0:fa:55:c9:
         08:e8:4b:87:b4:01:2d:e1:8d:68:9f:9e:bd:12:6b:4d:60:98:
         3e:88:aa:67
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUVsQZwKmttCvi7U/r3iVcMU8D27AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwNTIzNDJaFw0yNDA0MDYwNTI4NDJaMDMxMTAvBgNV
BAMTKDI5RjMyNjg4RkJENzQyN0NDNUQwNTRDOURFMjgyRTgyNzRCREFEMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hKGtSakpy0oavzOyw2Vh/s4N
0kRW5jiP5cFR8C0fOKbX6ZE/XUfzdFDtnfqpL1yT3rnDUkQk9d8GvnyDzd+WR+VI
2jR8WfzdNpT7bu6Rzb5gyGQT0fYqI1SIW39Bg+TrQKiKB2XJna7GS0tgyXJyBDvX
ghZZDXEVzyK/2mKMjniZLrOREWE62Sjo6HTlHuPq5MNlwY7aq/1ciH0+mFb/sx+O
CkrM40uYiEWwXjbsxpsaiecNAakPgegy9zL31yLYg6JfbeY17SfJGupvaB4Or16H
SFxtRRwxn+37OAOZaFB4dPY2coGRl9RO7ytKd3d9MG0+foTLbjvLh1sqGv5HAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUKfMmiPvXQnzF0FTJ3igugnS9rS8wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjB8Bggr
BgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi8zMjYxMzEzMjNhNjQ2NDM0MzczYTM4MzMzNDMwM2EzYTJmMzQzNDJkMzQz
ODIwM2QzZTIwMzIzMDMwMzIzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhLdR4NAMA0GCSqGSIb3
DQEBCwUAA4IBAQCtPq1AyezwuF9IkYrRu6npUuXTtyuXfwG4/DP7k6uyT5AZAn06
jO9xIaOAOaui6hQpMGkDFtnyOpkXe+3lF3lxHufdvERbgP4GRMYsX4WAJYFVyLMS
Vsy46CPsX9zKcRmlOm0vHGf8q5HSyzJx/5vXdHOW1EOrgbwLU7Gus6NfxzLg/VwS
PMsvyNcDzS60L3W+sKtU37NDU8Nm29TiHYE+PN8gm3FJlfM7gUSwc+vj52twoXsP
OWgIv65IFxn2PbZ09qXBw5Sq1ZroA/GZPo4fslzWlLKbGCCkU8gyOPejn8r3t89R
ibD6VckI6EuHtAEt4Y1on569EmtNYJg+iKpn
-----END CERTIFICATE-----