Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211151.roa
File:                     AS211151.roa (raw, json)
Hash identifier:          Ub4P46hnPMatcXVhUMInjnoJThWRAzD7a+zH16kiIdI=
Subject key identifier:   BE:BB:B2:4B:09:3C:F0:91:01:BF:6B:A8:4A:72:AF:5D:22:91:EA:2F
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       2F502C312D626C1D62931AC0FF2C734999DC93F0
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS211151.roa
Signing time:             Sat 08 Apr 2023 03:25:38 +0000
ROA not before:           Sat 08 Apr 2023 03:20:38 +0000
ROA not after:            Sat 06 Apr 2024 03:25:38 +0000
asID:                     211151
IP address blocks:        2a12:dd47:3300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:50:2c:31:2d:62:6c:1d:62:93:1a:c0:ff:2c:73:49:99:dc:93:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:38 2023 GMT
            Not After : Apr  6 03:25:38 2024 GMT
        Subject: CN=BEBBB24B093CF09101BF6BA84A72AF5D2291EA2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:4a:08:e0:5f:ba:d3:60:53:18:67:c4:0f:
                    f4:dc:90:c5:11:bd:6f:8b:45:4e:29:3c:b0:98:72:
                    8a:f7:00:6a:96:7e:f1:ad:07:a7:fa:8b:31:20:9e:
                    43:6b:44:90:a9:52:95:3a:a6:da:38:e2:a2:c9:16:
                    16:56:2d:4f:a3:c3:e5:21:60:6a:64:6e:17:d4:5f:
                    6c:a7:f3:e8:b6:18:a6:06:f1:d9:7e:e5:5f:8e:f3:
                    31:3d:35:14:ae:e1:8e:e6:ec:dc:00:14:af:ec:ab:
                    04:96:54:ca:37:3e:27:71:9a:ee:d7:11:e6:07:7a:
                    e7:8d:dc:b2:bb:c1:01:dc:ee:c9:b3:50:24:3a:80:
                    42:bb:16:70:ad:15:66:4c:b1:c8:84:4a:f9:da:e3:
                    88:72:85:a0:3e:39:dc:56:af:1c:fb:b3:0b:db:54:
                    95:f1:42:3d:3c:8d:64:32:75:19:b0:49:20:bb:48:
                    31:59:eb:f9:17:96:16:fa:c3:8b:e1:24:b3:97:67:
                    f8:59:14:ba:d6:11:d6:4b:e0:0e:ad:5c:ce:b2:af:
                    80:ef:60:4f:02:1a:8d:18:45:f3:f8:8b:f3:48:23:
                    96:a0:8b:9d:24:2e:87:b3:24:4b:78:0d:b7:53:9c:
                    aa:6a:e6:e0:e1:60:ab:2f:18:af:10:17:1b:ca:48:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BB:B2:4B:09:3C:F0:91:01:BF:6B:A8:4A:72:AF:5D:22:91:EA:2F
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211151.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:b6:9d:bb:0a:09:73:f6:a0:6e:96:fa:72:81:28:1b:18:e2:
         52:4a:c6:fa:38:24:d1:39:18:bf:eb:1d:aa:8a:45:a3:4c:e9:
         af:d8:bb:c2:0c:17:ab:14:a6:06:64:7a:cb:d0:28:07:a8:61:
         46:8b:60:d7:1b:c8:19:38:0c:7b:95:8e:d5:63:2b:17:2b:a1:
         20:78:90:41:8b:69:1c:7c:db:72:9d:db:eb:2f:18:f7:05:4c:
         3b:82:33:f2:25:ab:13:88:c6:b5:6a:ec:f9:c7:d4:7b:91:48:
         e1:77:80:ea:86:64:a8:7f:42:8d:15:68:96:c8:9e:3c:fd:9b:
         03:8f:1e:69:41:11:55:77:37:32:2b:a6:10:64:fd:c7:1f:2f:
         ba:6b:e7:47:5d:cd:d9:c7:ef:f3:eb:c6:d9:f0:28:a5:97:bf:
         21:c1:01:30:a9:8d:1e:dd:37:ff:26:cc:c9:30:7c:34:cc:83:
         47:af:80:6a:18:4c:be:1e:53:7e:d9:17:3b:66:2c:67:cd:6a:
         ca:44:8e:3d:f6:ef:7f:69:e4:c4:ac:02:c2:0e:47:6f:6b:71:
         6c:34:1c:ee:34:53:9f:dc:75:fc:19:2d:fa:96:95:69:8e:ca:
         5d:cf:3e:cd:2c:f8:08:e7:83:4c:81:3f:d4:41:d3:d5:1c:b0:
         89:12:a9:f5
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIUL1AsMS1ibB1ikxrA/yxzSZnck/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzIwMzhaFw0yNDA0MDYwMzI1MzhaMDMxMTAvBgNV
BAMTKEJFQkJCMjRCMDkzQ0YwOTEwMUJGNkJBODRBNzJBRjVEMjI5MUVBMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltUoI4F+602BTGGfED/TckMUR
vW+LRU4pPLCYcor3AGqWfvGtB6f6izEgnkNrRJCpUpU6pto44qLJFhZWLU+jw+Uh
YGpkbhfUX2yn8+i2GKYG8dl+5V+O8zE9NRSu4Y7m7NwAFK/sqwSWVMo3Pidxmu7X
EeYHeueN3LK7wQHc7smzUCQ6gEK7FnCtFWZMsciESvna44hyhaA+OdxWrxz7swvb
VJXxQj08jWQydRmwSSC7SDFZ6/kXlhb6w4vhJLOXZ/hZFLrWEdZL4A6tXM6yr4Dv
YE8CGo0YRfP4i/NII5agi50kLoezJEt4DbdTnKpq5uDhYKsvGK8QFxvKSB11AgMB
AAGjggGYMIIBlDAdBgNVHQ4EFgQUvruySwk88JEBv2uoSnKvXSKR6i8wHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBEBggr
BgEFBQcBCwQ4MDYwNAYIKwYBBQUHMAuGKHJzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzIxMTE1MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UczMA0GCSqGSIb3DQEBCwUAA4IB
AQABtp27Cglz9qBulvpygSgbGOJSSsb6OCTRORi/6x2qikWjTOmv2LvCDBerFKYG
ZHrL0CgHqGFGi2DXG8gZOAx7lY7VYysXK6EgeJBBi2kcfNtyndvrLxj3BUw7gjPy
JasTiMa1auz5x9R7kUjhd4DqhmSof0KNFWiWyJ48/ZsDjx5pQRFVdzcyK6YQZP3H
Hy+6a+dHXc3Zx+/z68bZ8Cill78hwQEwqY0e3Tf/JszJMHw0zINHr4BqGEy+HlN+
2Rc7ZixnzWrKRI499u9/aeTErALCDkdva3FsNBzuNFOf3HX8GS36lpVpjspdzz7N
LPgI54NMgT/UQdPVHLCJEqn1
-----END CERTIFICATE-----