Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211431.roa
File:                     AS211431.roa (raw, json)
Hash identifier:          kOiM8xr8oi1tVSKX0U/B7ZC80DVju+L0esnh0Cb5zds=
Subject key identifier:   69:4E:7E:7A:4C:5D:58:BC:1A:FF:AF:E4:80:CE:31:EF:5E:AF:13:FD
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       05329E5906AEF82E76B1AE1448D55A2C996F2143
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS211431.roa
Signing time:             Sat 08 Apr 2023 03:25:34 +0000
ROA not before:           Sat 08 Apr 2023 03:20:34 +0000
ROA not after:            Sat 06 Apr 2024 03:25:34 +0000
asID:                     211431
IP address blocks:        2a12:dd47:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:32:9e:59:06:ae:f8:2e:76:b1:ae:14:48:d5:5a:2c:99:6f:21:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:34 2023 GMT
            Not After : Apr  6 03:25:34 2024 GMT
        Subject: CN=694E7E7A4C5D58BC1AFFAFE480CE31EF5EAF13FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:af:dc:b8:63:27:dc:91:72:f1:51:01:59:
                    c7:9d:02:b1:51:0d:45:2d:7c:ce:b2:4a:57:89:2e:
                    52:b4:10:ff:6d:14:76:aa:27:5c:17:89:dc:6b:00:
                    f1:3d:cc:62:26:e1:06:9e:b2:c2:c4:45:a4:d4:9e:
                    53:26:b2:88:72:7a:81:cd:ab:3c:a5:7c:5d:d4:9c:
                    e4:9f:cd:7b:c9:e6:af:20:96:80:3d:ad:24:83:8c:
                    0d:cb:f6:79:69:d4:90:91:a8:f0:c3:97:77:b9:87:
                    d3:1d:79:c2:0c:a8:3d:9c:d3:55:01:c3:f9:c8:f7:
                    39:ad:07:79:4c:96:e8:7a:f3:52:7d:6d:5d:cf:3c:
                    6f:d8:fd:59:45:a3:37:f9:f8:96:e7:7d:fe:eb:22:
                    a3:6f:52:b8:9d:33:70:0c:58:f4:b1:e4:9a:29:32:
                    46:6e:bf:77:b5:bd:38:92:59:9f:b8:9c:66:bf:a4:
                    12:25:7f:ba:4e:02:dd:b9:f3:63:32:2f:ca:26:c9:
                    da:97:6c:05:3c:92:10:cc:94:71:0a:e8:a8:3e:1d:
                    5a:e0:2b:70:8a:b2:7e:4f:b1:07:64:8e:f4:e9:cb:
                    1c:88:91:10:a2:75:fc:40:ab:57:8a:4a:a6:c7:0e:
                    b8:76:06:fa:c6:bb:1c:cf:1a:74:14:06:81:d1:01:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4E:7E:7A:4C:5D:58:BC:1A:FF:AF:E4:80:CE:31:EF:5E:AF:13:FD
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:95:67:00:7f:74:cb:ff:0b:a1:0c:28:33:48:cf:ff:98:d7:
         12:a3:a4:38:74:98:f9:3f:01:fb:6c:e5:b8:9f:3d:05:23:78:
         f8:bb:19:37:5a:ed:ae:b6:b3:fd:79:de:ea:e5:fe:33:69:16:
         16:dd:51:fe:e7:eb:33:61:8e:4e:31:e6:90:63:ab:a8:86:98:
         1a:b8:17:d0:fc:28:bb:8d:0c:bc:31:85:70:27:6a:9c:67:f0:
         1b:3b:5d:6c:78:0d:47:ab:eb:4f:c8:06:f3:ba:38:74:69:f6:
         60:87:46:a0:a1:b1:f1:e2:33:6a:89:e6:f4:ae:6a:0c:62:ee:
         1c:15:b2:c1:e5:dd:c7:55:c4:21:4d:0a:9e:de:bf:53:b0:5a:
         0f:82:f3:9a:1a:40:a5:82:54:64:5b:81:2a:e0:2e:a8:e6:fd:
         81:eb:e9:64:75:a1:a1:01:24:45:1c:29:cd:ca:77:ab:60:1d:
         60:9d:fe:90:4d:9f:be:a9:37:49:10:29:d8:3a:b3:aa:ec:6c:
         fd:7f:ca:1e:eb:5b:06:f8:8e:b7:0b:cf:94:f2:35:e6:bc:b6:
         3a:61:6c:fe:6b:90:90:22:b7:44:55:67:63:0f:b0:7d:f7:4b:
         d9:20:34:55:c7:c0:89:98:4a:e8:62:dd:72:b9:80:9c:bc:f1:
         3b:71:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----