Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS210152.roa
File:                     AS210152.roa (raw, json)
Hash identifier:          Wvw6UJZViKyV+wogvmAMC8KcdAlp8fAc4ZMtxPhpEfc=
Subject key identifier:   63:78:AF:FE:AE:EF:57:95:C8:69:7F:6B:FF:99:75:8A:9A:47:5D:BC
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       427F40F597581BFB863DC296B4FDE3A985D869D9
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS210152.roa
Signing time:             Sat 08 Apr 2023 03:25:33 +0000
ROA not before:           Sat 08 Apr 2023 03:20:33 +0000
ROA not after:            Sat 06 Apr 2024 03:25:33 +0000
asID:                     210152
IP address blocks:        2a12:dd47:8020::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7f:40:f5:97:58:1b:fb:86:3d:c2:96:b4:fd:e3:a9:85:d8:69:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:33 2023 GMT
            Not After : Apr  6 03:25:33 2024 GMT
        Subject: CN=6378AFFEAEEF5795C8697F6BFF99758A9A475DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7a:9f:b3:2c:e4:a6:a2:83:cc:e3:e0:16:bf:
                    f1:71:fd:b3:fe:38:0b:c6:36:38:d0:5d:f6:54:35:
                    f8:0e:6f:a8:37:87:64:0e:48:d0:38:0b:5d:57:e4:
                    01:2a:27:a9:a5:d3:7e:4f:fb:b8:25:90:e2:c8:a9:
                    35:e5:39:e2:cc:d5:b7:c3:c0:6f:54:2a:84:f9:c5:
                    e8:c4:32:59:b4:7d:c9:9e:6c:44:70:42:cf:10:94:
                    87:5c:5b:19:02:d6:c3:a1:29:f1:43:27:00:4e:ce:
                    3e:01:fc:0a:73:2a:79:9d:7d:b9:cd:c1:c8:40:dd:
                    61:69:00:97:2f:eb:01:ab:6c:56:cc:40:e5:2e:eb:
                    a1:a2:49:f6:ce:2c:51:78:28:08:71:ac:f6:06:b4:
                    f6:f0:a7:72:ec:f7:30:71:48:70:38:c7:31:65:b4:
                    0b:03:69:8b:49:ae:f1:8a:b3:9b:bb:6b:27:17:de:
                    90:c3:10:da:cc:1e:65:fe:fc:9a:7f:2b:56:f0:5c:
                    20:bd:4c:5a:ba:bd:0d:a5:39:4b:79:2e:32:e3:d2:
                    74:f8:14:67:d5:ed:d7:95:47:dc:92:ad:ad:d1:96:
                    0f:b0:cd:f4:46:4c:f8:54:70:35:97:ae:a7:50:f7:
                    bb:50:3a:b5:9a:5d:cc:74:da:0a:4d:60:9a:21:26:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:78:AF:FE:AE:EF:57:95:C8:69:7F:6B:FF:99:75:8A:9A:47:5D:BC
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS210152.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8020::/45

    Signature Algorithm: sha256WithRSAEncryption
         07:e7:e1:8d:b3:51:36:5a:d3:b5:08:ed:4f:ef:e9:8d:db:d4:
         e0:61:19:94:dc:07:30:27:2a:24:11:b0:ad:2a:c8:c9:77:2f:
         74:d0:54:88:0e:6a:7b:eb:46:d3:49:c0:0f:b8:73:e2:af:68:
         53:63:5b:93:85:40:a1:b0:24:b3:fe:6d:5e:ac:86:da:2c:8e:
         aa:8b:25:1b:b6:79:07:05:5d:d6:87:b9:1f:ce:11:d6:43:70:
         73:0a:d8:74:28:0c:2d:1b:64:30:b3:01:68:3c:fc:9f:76:6f:
         b6:4f:e8:6e:db:90:00:1b:a2:ed:81:a0:c3:7b:9c:df:50:f8:
         34:e8:e3:71:b4:60:2b:20:1a:17:7c:fb:f5:75:64:0d:b6:48:
         ba:55:b9:66:17:be:b0:7f:e7:6c:02:ba:8c:f3:98:fb:69:56:
         ee:95:59:11:fc:21:92:2e:f9:fc:6d:39:a1:4d:58:62:6f:6e:
         46:7d:b5:b1:e3:13:60:2c:30:ad:2b:66:94:7d:4e:73:a2:df:
         c0:45:11:c0:47:24:f1:75:82:59:fc:94:f0:12:47:e1:13:cd:
         63:03:80:99:59:b8:9a:8e:63:a6:31:f4:2a:ca:84:68:07:d4:
         ad:9d:87:ee:ed:c8:3e:d3:d2:50:60:cb:c3:f7:f6:c2:43:e4:
         df:d3:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----