Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS210537.roa
File:                     AS210537.roa (raw, json)
Hash identifier:          dvegQWKOE+yAMUFLZepGxV/759PXKbJza8O0ts+3IJw=
Subject key identifier:   38:0B:26:E2:B2:B6:18:AF:97:70:5F:34:2E:B3:78:5D:EE:1D:7D:AB
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       40696998A1DF890064089BF88F7309DF8813F095
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS210537.roa
Signing time:             Sat 08 Apr 2023 03:25:21 +0000
ROA not before:           Sat 08 Apr 2023 03:20:21 +0000
ROA not after:            Sat 06 Apr 2024 03:25:21 +0000
asID:                     210537
IP address blocks:        2a12:dd47:8070::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:69:69:98:a1:df:89:00:64:08:9b:f8:8f:73:09:df:88:13:f0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:21 2023 GMT
            Not After : Apr  6 03:25:21 2024 GMT
        Subject: CN=380B26E2B2B618AF97705F342EB3785DEE1D7DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:98:c4:c1:be:1d:ef:ff:55:bc:7f:09:37:
                    78:14:52:a0:69:99:e8:77:ab:8d:d8:e6:51:51:30:
                    64:69:b2:65:13:f3:8c:f4:cd:dd:51:ac:76:bb:95:
                    e1:ef:38:6b:07:62:04:73:b7:e8:75:dd:3a:9d:70:
                    86:56:c9:64:d6:86:d8:c5:4d:1c:18:94:79:82:db:
                    d1:1e:9e:93:1e:99:10:f4:68:4d:5f:4e:d1:70:cd:
                    3a:66:19:eb:c6:7f:a1:47:5f:5a:a6:20:8b:66:17:
                    29:33:97:f8:da:3f:7b:11:05:08:17:38:6f:49:80:
                    ac:a2:fa:80:12:bf:ad:2e:4c:c3:02:99:a7:0f:79:
                    92:80:b7:7b:41:31:b2:1e:19:3d:af:3d:87:e2:c5:
                    27:03:9a:c5:d3:7c:9b:14:01:fc:87:f7:6b:0e:40:
                    02:11:09:db:ac:25:42:42:b2:e7:a9:84:fb:2b:d7:
                    c9:01:a9:04:92:6c:89:7b:28:ee:a5:8b:0e:3d:d8:
                    d7:0d:bb:2d:1c:4b:53:90:ce:99:4a:1b:6d:e9:65:
                    e2:66:81:2a:bf:c5:c7:85:ba:33:a5:1d:7e:26:f4:
                    87:11:00:d7:d6:ca:f1:c3:18:6b:b6:2c:c8:23:57:
                    c9:eb:09:bd:86:80:e2:9d:5f:75:96:54:b2:1f:3b:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0B:26:E2:B2:B6:18:AF:97:70:5F:34:2E:B3:78:5D:EE:1D:7D:AB
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS210537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8070::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:b5:f5:58:1c:68:e3:a2:95:35:a0:53:b9:e3:04:b7:66:
         25:a4:15:8d:66:e3:59:3a:eb:9a:78:dd:53:25:d9:a4:46:e1:
         b7:fd:3f:e9:2c:e8:26:d4:66:4f:01:af:ba:59:75:2c:2a:be:
         53:5f:4b:1b:c6:3c:af:60:99:62:8b:be:7c:17:a6:db:12:53:
         8e:b3:d1:2a:de:1a:31:9c:dc:06:8c:6c:9b:71:82:2d:17:71:
         e6:58:50:5b:59:80:d9:c5:c1:32:5a:f1:8b:eb:56:1b:59:f4:
         c1:db:59:87:91:29:08:cb:3a:88:63:c8:1a:6e:53:be:9e:90:
         0c:08:41:31:db:54:60:a7:36:d2:31:c6:2c:21:c0:e6:50:f8:
         7c:4c:2f:a5:b8:23:64:e5:bf:5e:d0:39:ae:55:bf:cd:01:83:
         cc:be:ac:6c:ee:6d:30:8b:c7:62:de:d8:a8:06:2c:c9:63:0d:
         ba:c6:48:e3:49:cf:65:26:4c:6c:24:f1:4d:4c:f3:fd:15:8b:
         ef:15:5b:cb:dc:85:fe:5c:2a:a3:c6:2e:7f:d7:a9:8d:54:2d:
         5e:2d:e9:19:ed:9e:43:5c:0a:d4:7c:4f:41:56:cd:2a:12:ff:
         85:30:e3:4a:8d:f4:f1:ca:4e:93:a5:09:7f:ee:76:17:20:34:
         b8:b8:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----