Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/326131323a646434373a646130303a3a2f34302d3438203d3e20313939363933.roa
File:                     326131323a646434373a646130303a3a2f34302d3438203d3e20313939363933.roa (raw, json)
Hash identifier:          yo4az8CpvovVP36F3F6wIuheH36/bdF7AkJn65JBRs0=
Subject key identifier:   73:65:FC:A5:B0:69:6E:9D:8E:07:CF:29:3D:F8:C2:07:56:E9:17:A4
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       3D6B6C7AEDE357F22D8021154B15D1FA8357F32A
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/326131323a646434373a646130303a3a2f34302d3438203d3e20313939363933.roa
Signing time:             Sat 08 Apr 2023 05:28:45 +0000
ROA not before:           Sat 08 Apr 2023 05:23:45 +0000
ROA not after:            Sat 06 Apr 2024 05:28:45 +0000
asID:                     199693
IP address blocks:        2a12:dd47:da00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6b:6c:7a:ed:e3:57:f2:2d:80:21:15:4b:15:d1:fa:83:57:f3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 05:23:45 2023 GMT
            Not After : Apr  6 05:28:45 2024 GMT
        Subject: CN=7365FCA5B0696E9D8E07CF293DF8C20756E917A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:3d:89:ce:16:f4:da:4d:54:20:27:7c:86:
                    5f:60:8d:5b:90:47:a8:a9:4d:1e:ed:cc:cd:94:ec:
                    bb:4d:22:e0:26:58:b7:af:00:13:17:11:d7:ab:cf:
                    a1:23:24:b9:3b:5d:98:ad:bb:87:b9:ff:c5:b0:c0:
                    fa:5b:2a:05:20:c1:e6:38:0d:0a:5a:17:3a:5e:4c:
                    58:c6:f5:ca:c6:45:88:41:ba:73:62:7d:60:6e:72:
                    55:65:49:07:27:d2:bb:3c:59:d4:b7:95:9e:da:48:
                    82:8c:ef:eb:f2:f3:69:f9:d3:8b:ad:04:16:c9:7a:
                    c8:06:51:3e:f1:d9:1e:fb:e5:bf:3b:fd:43:02:aa:
                    59:67:f6:18:39:bf:04:6d:82:8d:fe:e7:43:5e:1e:
                    e7:db:65:7b:ee:ab:c2:ea:cb:70:9d:c8:5d:ae:43:
                    86:89:9c:15:72:e2:39:5c:30:12:49:36:5b:db:24:
                    c5:20:b3:e2:fa:b3:3f:16:f6:89:91:4c:8a:29:73:
                    e9:70:a8:01:80:d1:21:da:2e:95:b6:22:de:f2:26:
                    95:55:33:b0:27:9a:20:04:d3:4d:44:52:02:ac:b9:
                    3c:4a:e2:1a:83:eb:12:cf:28:0c:74:f0:82:e7:69:
                    91:a6:54:b0:e0:a1:cd:9c:5b:66:9e:d7:dc:74:f0:
                    be:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:65:FC:A5:B0:69:6E:9D:8E:07:CF:29:3D:F8:C2:07:56:E9:17:A4
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/326131323a646434373a646130303a3a2f34302d3438203d3e20313939363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:da00::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:77:1a:25:c2:d8:46:83:3e:73:e8:03:66:29:a8:c6:ae:
         d9:4a:a5:ae:4b:c6:e0:49:3e:c4:82:c9:9a:54:61:af:a8:ba:
         b9:65:fc:43:b1:2a:7b:fb:ee:85:82:52:c8:86:53:1d:4f:b4:
         e3:52:e5:97:5b:74:34:65:a8:08:d7:b8:bb:cb:fd:05:1d:72:
         67:74:08:ae:7b:1d:b9:35:bb:80:df:3f:54:6f:ff:8b:d7:54:
         9f:4d:10:45:c8:21:6b:04:83:c1:dc:35:07:de:d0:5c:3e:f2:
         1c:83:50:22:17:69:d8:1f:08:2d:c6:5d:4f:59:19:d2:93:f3:
         12:c5:82:88:ad:e2:15:74:42:7a:77:6f:fa:53:47:5c:05:bf:
         f1:dd:eb:f8:b4:fb:81:2c:82:c9:cc:0a:4e:31:5a:a5:24:e6:
         6b:dc:03:72:99:6e:55:5f:54:6c:a2:48:94:f2:56:b9:05:74:
         19:ea:21:e8:8c:8c:8f:8d:b7:2e:86:90:c1:5d:d0:0c:a6:e2:
         f0:a7:0e:53:0e:a4:52:b6:df:0a:f7:9b:53:47:b1:e5:2b:c8:
         df:83:e2:a8:09:c2:5a:a0:cc:e1:97:a1:6f:7b:82:49:09:b6:
         4d:3f:5c:ca:0c:f6:f9:28:83:13:f9:06:b2:3c:26:99:4b:23:
         03:d3:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----