Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS210562.roa
File:                     AS210562.roa (raw, json)
Hash identifier:          e37o94iF6EkwyixZz7G/5KMLrYwGy8jdzWLlNe4gdkk=
Subject key identifier:   21:8A:81:D5:9D:9E:98:0E:BA:A3:1E:85:4C:31:CD:28:65:FA:3D:D2
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       66A4C5737A7801FA8325BE3ADE8493067ED4444D
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS210562.roa
Signing time:             Sat 08 Apr 2023 03:25:40 +0000
ROA not before:           Sat 08 Apr 2023 03:20:40 +0000
ROA not after:            Sat 06 Apr 2024 03:25:40 +0000
asID:                     210562
IP address blocks:        2a12:dd47:df30::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a4:c5:73:7a:78:01:fa:83:25:be:3a:de:84:93:06:7e:d4:44:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:40 2023 GMT
            Not After : Apr  6 03:25:40 2024 GMT
        Subject: CN=218A81D59D9E980EBAA31E854C31CD2865FA3DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:91:ac:80:c9:28:b0:85:c0:e8:bb:bb:d4:
                    8c:e9:cf:ed:01:40:8f:40:fd:4c:de:50:56:b2:1d:
                    f0:c5:14:d7:93:41:d0:d5:00:1e:da:60:15:d8:4a:
                    a4:68:b3:9b:c2:5e:95:77:ce:46:82:38:61:16:57:
                    a4:4a:85:61:38:6b:aa:e8:ab:9e:4d:f9:97:b1:13:
                    22:e3:ae:18:eb:7a:91:01:d4:c0:f9:64:8e:69:b8:
                    13:48:63:cc:5b:01:ad:da:53:78:76:04:d5:7e:f1:
                    5a:42:38:df:b8:f2:a8:95:0b:be:f6:93:f7:22:07:
                    02:df:49:0b:f7:d1:0d:8f:44:25:10:27:c8:64:a8:
                    aa:91:49:ff:1e:61:45:81:c4:33:32:0d:91:74:32:
                    b3:32:ae:96:f5:0a:d8:7b:b7:17:fa:17:3c:60:03:
                    03:4e:c0:a0:90:3c:6b:d4:2a:c1:b1:e7:d8:75:30:
                    71:e4:64:c3:88:fb:0f:c2:e4:be:03:7c:9a:77:85:
                    d7:52:29:bd:83:94:26:7b:ad:67:15:db:de:a1:06:
                    13:31:69:43:65:f7:11:0f:03:c8:22:33:0e:8f:f8:
                    9a:8c:ae:c4:eb:ba:83:8c:b3:d1:f5:be:f5:ea:b8:
                    31:3e:e3:53:cb:d1:79:70:ff:0a:54:9e:98:71:6b:
                    4e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8A:81:D5:9D:9E:98:0E:BA:A3:1E:85:4C:31:CD:28:65:FA:3D:D2
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS210562.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:df30::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:32:de:c1:d9:3d:2a:62:b5:8a:62:40:b3:d6:bd:a2:f9:84:
         28:3c:94:56:5b:b3:79:93:be:f1:e3:f5:d1:21:7a:91:a0:db:
         8a:cd:d7:a8:5c:bd:77:83:e9:ae:da:b9:f9:ef:39:64:9f:9f:
         56:de:2f:e5:c3:81:1a:5a:93:76:f4:75:08:cb:80:37:5c:32:
         da:ec:72:a6:ad:3e:9f:b1:ef:ea:d8:6d:23:d7:12:32:2e:f2:
         32:2c:94:62:ea:b1:fb:b0:f6:40:a9:b4:c1:9b:e5:a8:ec:65:
         a0:15:bd:55:fc:0a:65:da:1e:38:d7:79:0a:42:84:71:76:e3:
         e0:11:dd:ef:8f:d2:20:59:b9:11:49:e6:12:7b:68:c6:1d:c5:
         7d:02:41:a9:53:de:68:cc:19:94:8f:40:1f:8c:23:6f:c6:77:
         db:50:10:ec:4d:e2:b4:2b:8a:87:50:07:b2:f9:2f:a4:49:72:
         7a:28:86:9a:d4:52:7e:08:2d:72:61:05:66:7a:d0:f2:d1:ea:
         a6:cf:39:49:36:09:6a:9d:55:de:08:89:ff:b9:ed:fc:b7:4e:
         77:65:6e:aa:b5:1d:89:54:b0:03:1e:aa:75:36:60:33:c4:0f:
         f4:cc:86:2a:ae:98:4d:fc:1e:73:d3:5b:aa:ad:65:df:76:c1:
         2e:9c:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----