Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS209652.roa
File:                     AS209652.roa (raw, json)
Hash identifier:          x/CvAvKR3DGerv7YjDplB3q0ft8jAuWWkiEyI9vRikU=
Subject key identifier:   06:71:CD:FE:9B:C8:65:1B:0E:2E:A0:AA:BC:D6:F1:E2:48:FA:34:5A
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       057DD8515540761A4B992C3210EF64647A8515F0
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS209652.roa
Signing time:             Sat 08 Apr 2023 03:25:43 +0000
ROA not before:           Sat 08 Apr 2023 03:20:43 +0000
ROA not after:            Sat 06 Apr 2024 03:25:43 +0000
asID:                     209652
IP address blocks:        2a12:dd47:83c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7d:d8:51:55:40:76:1a:4b:99:2c:32:10:ef:64:64:7a:85:15:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:43 2023 GMT
            Not After : Apr  6 03:25:43 2024 GMT
        Subject: CN=0671CDFE9BC8651B0E2EA0AABCD6F1E248FA345A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:5c:0e:7a:d8:fa:af:67:57:3a:39:0f:6b:
                    b8:c6:79:c8:ca:c5:0d:61:b2:7a:60:b4:43:28:d4:
                    b3:22:69:7d:1e:bf:32:90:b9:8f:de:b0:52:d0:0d:
                    3d:07:39:06:40:e5:c7:a0:0a:eb:e9:be:d6:47:ce:
                    d8:3e:80:ff:5f:79:8b:24:6e:ca:0d:02:3c:b1:22:
                    b5:9f:c6:3f:e7:10:dd:7f:36:18:36:b6:4d:f9:f2:
                    f3:7c:00:d0:98:f3:bb:d2:1f:a5:1d:68:5c:93:2b:
                    2b:1d:b0:19:44:d6:3e:f0:e0:23:f9:90:c4:39:51:
                    6c:6e:96:41:28:12:7b:eb:7b:7e:70:d1:63:79:28:
                    ed:41:97:46:f4:9e:d7:7f:30:3c:b3:d2:1e:df:f0:
                    63:7b:0d:05:1c:6c:fc:8a:02:a7:52:21:1a:2b:27:
                    6a:26:74:ed:fd:97:df:32:53:c7:9e:33:ce:66:e7:
                    99:77:a8:31:d0:f4:40:12:fe:71:4a:a7:86:42:89:
                    8c:fa:4d:18:03:5e:99:83:a5:bb:e0:88:ce:b5:b1:
                    12:cc:e0:f4:11:0f:d8:d9:84:7c:4e:63:c5:bd:c0:
                    11:12:2c:24:9e:0e:44:b5:e5:8e:a9:14:88:e8:00:
                    93:a2:82:86:10:4c:39:c0:6f:6e:84:90:df:aa:c5:
                    01:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:71:CD:FE:9B:C8:65:1B:0E:2E:A0:AA:BC:D6:F1:E2:48:FA:34:5A
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS209652.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         96:3c:09:90:a4:04:7f:82:3e:bb:c1:71:17:a9:2e:ae:6e:3f:
         08:7e:79:75:c1:5f:bb:d3:b3:a5:6a:a4:67:e3:1c:89:18:74:
         25:f2:8b:fe:ff:b7:81:27:0f:15:7d:93:76:24:5a:90:b8:3e:
         ff:3d:53:18:cc:cc:a8:ca:7b:35:22:00:23:6d:77:7b:69:55:
         26:f3:14:fb:c2:ff:a4:19:5e:37:d6:c4:63:9b:e0:dd:0c:9f:
         4f:04:a5:9c:06:9c:4a:3f:be:69:80:5b:a9:eb:24:99:7a:79:
         c4:bb:c0:a6:50:46:35:6f:61:77:7f:fb:8c:70:ac:e4:df:fc:
         70:05:4a:96:61:a6:5d:c5:00:e1:4a:ac:c5:83:03:df:d8:d3:
         a8:90:8d:ca:e7:74:57:00:62:49:be:51:78:8b:21:fc:7d:e1:
         d8:89:80:fe:c4:63:52:48:f9:79:c6:c9:24:10:34:d5:57:ec:
         44:ac:c8:67:ef:e6:54:59:43:1d:48:7f:8c:f0:fa:d9:ec:b1:
         b8:52:a5:e1:10:f9:15:95:b7:e1:85:6d:eb:36:ed:83:fb:fc:
         c3:6c:6d:8f:ff:a2:29:de:fd:27:28:80:b8:be:f4:37:84:74:
         f7:74:38:63:8b:5b:84:34:50:b6:8f:14:ec:e5:70:ad:d7:cd:
         81:11:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----