Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS210912.roa
File:                     AS210912.roa (raw, json)
Hash identifier:          a/JZAq1pSXMC3NqI3FR48Zl3IBptbM7fo6w4HE7zlvc=
Subject key identifier:   CC:E8:E1:24:6C:BF:49:C6:44:36:33:CB:21:2E:2A:12:E5:56:CC:AE
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       770399F04232A6A03EB0BA92980DAD82CED3067B
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS210912.roa
Signing time:             Sat 08 Apr 2023 03:25:33 +0000
ROA not before:           Sat 08 Apr 2023 03:20:33 +0000
ROA not after:            Sat 06 Apr 2024 03:25:33 +0000
asID:                     210912
IP address blocks:        2a12:dd47:8e60::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:03:99:f0:42:32:a6:a0:3e:b0:ba:92:98:0d:ad:82:ce:d3:06:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:33 2023 GMT
            Not After : Apr  6 03:25:33 2024 GMT
        Subject: CN=CCE8E1246CBF49C6443633CB212E2A12E556CCAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:c7:90:85:e3:30:63:72:78:50:7e:fb:ce:
                    6d:f3:dd:a7:1b:26:b4:d9:0e:c1:19:96:01:7e:d1:
                    b3:cd:40:89:50:73:cd:50:2a:bf:66:d2:c3:c0:4a:
                    22:69:20:53:6d:65:92:75:6b:a7:b3:16:4a:2c:48:
                    5c:b4:b5:77:39:32:b5:6c:92:24:4d:9d:9d:42:90:
                    02:70:85:ba:3e:cc:9b:00:39:5b:62:4b:25:6f:8f:
                    b7:fc:72:e8:dc:a8:3c:48:0e:20:35:b4:3b:64:12:
                    b2:50:a3:b2:46:6a:b1:ff:f4:30:b2:37:80:ed:1d:
                    0f:55:29:7e:2c:ca:bd:9e:4d:c9:87:54:c6:53:ea:
                    cf:1d:d0:cb:be:ac:21:86:a1:2a:f1:f1:eb:f3:84:
                    33:19:b3:e5:1d:d7:15:4c:1c:55:8c:70:b8:29:88:
                    3c:3d:03:e2:b7:05:9c:85:4b:a5:79:e7:e7:60:7b:
                    4f:14:e2:3b:e4:02:0f:cd:18:96:7c:78:99:3f:0d:
                    13:1e:f2:07:dc:eb:c8:c6:ae:46:55:dd:23:8c:d5:
                    27:db:4a:88:64:fc:8c:97:49:b6:5a:4d:4f:b3:d0:
                    3b:85:12:eb:18:c4:9d:65:cf:1c:5b:49:a9:74:82:
                    88:be:9b:d6:98:cb:68:86:48:10:22:58:4e:ec:11:
                    00:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E8:E1:24:6C:BF:49:C6:44:36:33:CB:21:2E:2A:12:E5:56:CC:AE
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS210912.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e60::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:bc:05:4d:71:a9:d8:55:82:22:12:88:0b:63:d9:a3:39:
         91:82:78:ba:a1:86:4c:88:52:89:82:25:9a:ad:39:80:e4:97:
         cd:e8:fc:4d:ae:61:34:fa:11:26:e0:df:37:6a:74:76:4c:27:
         d7:7c:b7:11:f2:fb:a7:c0:ca:2e:99:7b:a3:d9:5b:04:a0:37:
         1a:4a:62:75:d1:c4:f2:2d:c3:df:b5:99:f6:85:ce:fb:ba:74:
         1a:b9:10:d0:9e:c8:1a:6d:f1:68:99:79:68:13:09:be:bb:a5:
         f7:5a:c5:f9:15:6a:7f:72:49:84:07:7e:8c:1c:40:31:62:30:
         32:16:96:8a:23:db:0d:86:b8:cc:58:c5:de:62:79:75:51:43:
         e4:ba:11:ac:5d:44:11:5a:2c:f2:14:32:e3:34:bc:bb:93:0d:
         51:89:ce:b6:8c:36:82:0d:9e:53:d9:bf:cc:9c:48:1c:3f:cb:
         1a:da:68:cd:25:d0:0e:4f:12:9f:db:00:00:cc:51:47:80:cb:
         d7:4b:cc:a7:41:bc:9d:0f:0d:bc:8a:f5:9e:72:0b:69:b8:db:
         dc:36:8f:d8:19:b2:b8:00:37:f8:a6:e8:69:2d:9c:1f:46:f9:
         19:83:e3:0f:f5:10:c6:37:6f:c5:ea:ee:37:bb:7c:8d:49:39:
         be:ac:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----