Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211390.roa
File:                     AS211390.roa (raw, json)
Hash identifier:          2BSZi3qb6RqhTehh4TVxhQIWoRGJ9DSPNlcjRyZpGcQ=
Subject key identifier:   40:59:E4:D2:86:59:94:19:6A:D0:C3:08:2C:9A:F1:13:D4:85:72:BB
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       4E9673492F7AB9D8334C367979EBB41CE9BCBC47
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS211390.roa
Signing time:             Sat 08 Apr 2023 04:50:31 +0000
ROA not before:           Sat 08 Apr 2023 04:45:31 +0000
ROA not after:            Sat 06 Apr 2024 04:50:31 +0000
asID:                     211390
IP address blocks:        2a12:dd47:f600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:96:73:49:2f:7a:b9:d8:33:4c:36:79:79:eb:b4:1c:e9:bc:bc:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 04:45:31 2023 GMT
            Not After : Apr  6 04:50:31 2024 GMT
        Subject: CN=4059E4D2865994196AD0C3082C9AF113D48572BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:4f:1f:f8:ec:ef:6c:2c:b1:a2:40:16:18:
                    6c:f9:8f:64:1f:fa:91:8d:0c:75:d7:20:b5:27:bb:
                    77:41:b7:95:17:d0:34:47:d0:25:c4:c6:ba:2c:68:
                    18:32:5e:42:a5:13:10:c0:77:54:29:3f:12:9a:43:
                    aa:22:0f:43:7b:bd:63:1c:d5:6c:8b:f9:c0:06:04:
                    86:9c:24:7c:a2:9b:8b:72:b5:be:a1:c2:dd:df:d7:
                    9d:54:14:2c:cb:c8:59:03:67:ba:dc:71:e3:58:40:
                    62:1c:b5:03:fe:cf:d4:b9:ec:0a:0c:61:bf:42:21:
                    44:f8:93:fa:fb:bb:89:ed:4a:87:16:40:c1:42:6b:
                    8e:00:eb:a4:05:5b:f7:4e:22:ef:63:1a:c5:b3:0b:
                    81:a6:61:e9:7b:18:d2:c7:fd:83:f6:fb:d5:f9:d5:
                    ba:78:be:8d:77:35:fb:9a:26:bf:50:ff:49:77:61:
                    95:41:07:3f:a5:79:02:5f:0f:03:49:6f:5b:7f:e5:
                    9d:33:26:2a:c9:d9:37:9b:91:ea:49:58:94:53:38:
                    bf:76:ac:d6:72:c0:e8:81:dd:63:63:e2:4b:f0:0a:
                    2c:ca:d6:45:9a:3a:cf:91:69:a2:38:39:9a:3a:16:
                    39:da:d2:fd:e6:45:0c:80:38:f2:c5:88:cc:e9:ff:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:59:E4:D2:86:59:94:19:6A:D0:C3:08:2C:9A:F1:13:D4:85:72:BB
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211390.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f600::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:a2:f0:b8:59:0a:fb:79:cb:e6:7c:55:48:ef:f8:b6:99:a3:
         37:45:93:4e:8f:c0:43:54:d2:f8:3a:cd:6f:d5:d9:04:84:d6:
         aa:2c:6b:0c:ad:30:de:09:69:64:ea:b9:a1:93:d8:6e:9a:69:
         36:9a:d8:56:54:f8:43:40:e5:70:35:1e:47:a2:9e:8b:8d:b1:
         3b:c0:ab:d3:59:f1:57:de:1f:33:ff:d1:1d:e2:00:59:e4:a0:
         78:1b:01:e3:5d:94:d3:cc:82:22:96:d6:f1:a1:ff:03:bd:1c:
         2c:e9:32:ad:e2:ee:99:55:ab:06:23:7a:3e:68:05:92:6b:9b:
         5e:6d:e4:84:94:b7:ac:4c:01:04:f7:4a:6d:7b:d0:84:49:ae:
         27:79:9e:ab:b2:22:7f:e9:ad:e6:e6:79:b7:73:0d:10:4f:a6:
         67:54:45:3f:4c:19:cd:8e:3c:8b:2b:b6:f0:93:77:85:34:81:
         c2:2e:2f:f0:b4:3f:e0:71:0d:22:2e:bf:e2:68:3b:b8:95:a6:
         0e:dd:30:4b:08:32:e0:0b:a5:04:10:9d:d1:2f:5c:fa:74:f2:
         6e:92:7f:e2:69:a8:ea:35:21:78:90:78:b0:48:ab:d8:a9:26:
         fb:de:2c:c6:f7:ad:99:ee:01:f7:f4:59:c1:37:45:44:70:20:
         7c:5d:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----