Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a383530303a3a2f34302d3438203d3e20323032363835.roa
File:                     326131323a646434373a383530303a3a2f34302d3438203d3e20323032363835.roa (raw, json)
Hash identifier:          kjZjbEou317BvvFZwRWXriMl3vBiRO4anK/kp8Knupo=
Subject key identifier:   EC:9A:81:5D:B1:37:AC:9A:09:C4:03:62:69:8E:CF:AA:1D:63:F0:F3
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       523A9BF9969EF13E100FDA4BA93FAF400B75114C
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a383530303a3a2f34302d3438203d3e20323032363835.roa
Signing time:             Sat 08 Apr 2023 05:28:52 +0000
ROA not before:           Sat 08 Apr 2023 05:23:52 +0000
ROA not after:            Sat 06 Apr 2024 05:28:52 +0000
asID:                     202685
IP address blocks:        2a12:dd47:8500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3a:9b:f9:96:9e:f1:3e:10:0f:da:4b:a9:3f:af:40:0b:75:11:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:52 2023 GMT
            Not After : Apr  6 05:28:52 2024 GMT
        Subject: CN=EC9A815DB137AC9A09C40362698ECFAA1D63F0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7a:3c:d8:bf:5d:a6:c4:0a:23:cc:9e:0a:3b:
                    16:4d:7d:6e:75:d5:0e:7d:f2:40:ef:b5:08:d4:ed:
                    f0:ba:25:59:e9:e8:2e:ca:f8:04:f3:6e:e0:af:5c:
                    4f:94:45:11:c4:7a:eb:01:1f:27:6d:e9:d1:79:01:
                    ed:d9:48:92:d2:7a:06:e7:65:e2:83:8b:1e:cf:15:
                    10:12:fc:68:02:b7:a7:4a:be:6c:3d:0d:10:47:e0:
                    0a:34:cb:1b:ce:4d:84:94:03:5b:e9:53:29:8c:66:
                    fb:0a:6f:ea:8e:6c:eb:b4:9a:84:15:94:7a:f1:e5:
                    8d:b5:ff:10:db:c3:29:b5:32:c8:d0:39:4a:97:92:
                    5c:d2:8e:19:17:d0:8b:71:05:a8:cf:b0:f1:c7:c2:
                    37:3c:43:28:c0:bc:f8:4c:fa:a7:3c:a3:3f:d7:2f:
                    85:60:c2:76:bf:1e:5b:e1:ca:6d:72:c9:56:06:0b:
                    a8:b4:e5:83:3d:23:05:96:f9:46:ef:cd:e2:6d:6c:
                    86:f2:fd:18:7b:51:60:ab:fc:f2:4b:3d:13:10:de:
                    06:1b:89:36:36:b5:02:44:2f:aa:1e:f1:0b:ef:4d:
                    da:70:b6:36:cd:43:33:49:ab:71:0d:5d:c0:51:37:
                    11:58:61:0d:89:4f:e8:c6:8f:97:c3:d1:d3:d3:01:
                    c2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9A:81:5D:B1:37:AC:9A:09:C4:03:62:69:8E:CF:AA:1D:63:F0:F3
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a383530303a3a2f34302d3438203d3e20323032363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:55:a5:b3:d8:ec:68:ba:7c:1e:be:43:8c:74:8b:77:38:15:
         aa:a9:aa:e6:ca:ec:f2:b2:43:37:bb:7c:d4:2f:49:92:25:6c:
         5f:ad:29:0d:b9:0d:c0:b9:b9:72:54:06:d8:ff:98:e9:60:38:
         43:1a:86:b3:b7:e6:70:c3:c4:b0:a7:67:e0:ad:50:18:53:f3:
         96:19:41:78:ae:79:a9:40:a5:a8:0e:c0:07:88:b8:86:11:66:
         7d:5c:c2:9e:a8:31:1a:32:64:a1:49:ba:e0:af:2a:69:3c:2f:
         4c:76:5c:69:db:31:41:95:eb:43:41:99:a9:76:96:be:9d:60:
         41:f8:ce:ce:01:0f:bf:aa:58:c7:f6:58:ba:14:3d:6a:fa:6a:
         73:1f:bf:52:21:7d:2b:1b:bb:e1:d4:cc:1e:d9:95:9e:39:67:
         a7:87:bd:34:23:05:54:95:da:f3:10:a5:e1:62:84:0f:cb:c1:
         4e:ad:56:9d:1d:ad:df:a3:42:d8:31:14:74:b3:7a:04:0e:bb:
         c3:6d:16:f0:9d:d3:13:9e:86:c1:bc:bc:d1:9c:bf:22:b4:8d:
         d8:f7:19:d0:3c:c6:e9:0a:aa:a9:8a:70:0f:11:14:87:25:79:
         5f:bd:29:0f:c4:04:d1:19:de:91:32:08:d6:cd:d1:84:ff:a1:
         7b:b3:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----