Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211604.roa
File:                     AS211604.roa (raw, json)
Hash identifier:          kI3WlFCf39p60+CmzKOm3CNf08ZESABiIO5NDqgC84Q=
Subject key identifier:   3E:C7:6B:33:AC:2E:DC:D9:7A:03:C0:61:ED:29:DD:5E:1A:6E:D3:23
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       60BF5B6FDB88C3FA27CDE47A533394BF5020EE0C
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS211604.roa
Signing time:             Sat 08 Apr 2023 03:25:32 +0000
ROA not before:           Sat 08 Apr 2023 03:20:32 +0000
ROA not after:            Sat 06 Apr 2024 03:25:32 +0000
asID:                     211604
IP address blocks:        2a12:dd47:8072::/48 maxlen: 48
                          2a12:dd47:807e::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bf:5b:6f:db:88:c3:fa:27:cd:e4:7a:53:33:94:bf:50:20:ee:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:32 2023 GMT
            Not After : Apr  6 03:25:32 2024 GMT
        Subject: CN=3EC76B33AC2EDCD97A03C061ED29DD5E1A6ED323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:7b:50:cb:01:85:06:10:5b:16:b3:70:f4:
                    51:b5:ed:50:6f:ee:38:a1:81:68:f3:0c:17:05:c5:
                    31:fa:af:7c:39:d9:76:45:c9:4e:69:d6:d5:bc:d8:
                    2e:60:7c:7d:9d:f5:48:b3:1b:62:23:7e:68:05:16:
                    97:6b:5f:7a:45:2c:e3:2a:f9:ea:c6:1e:4e:0f:b0:
                    4e:4d:23:3e:0d:1c:2d:dd:82:1b:1d:7a:84:ce:ea:
                    f2:a6:78:bb:18:a1:25:ad:b6:02:a3:7b:76:1a:cc:
                    fc:a8:0b:59:e0:64:48:fc:1d:db:24:90:93:5b:83:
                    9e:8e:c1:a8:cd:75:20:09:eb:49:29:9d:2d:7f:e9:
                    8a:ff:40:44:ee:a0:cd:ff:c0:b9:08:ab:8f:58:51:
                    16:40:f7:5b:f7:82:17:76:0b:cc:87:01:d6:5e:2c:
                    6f:36:0e:88:b0:44:92:0c:b3:02:ce:48:03:41:e1:
                    ec:09:c6:ab:49:3d:40:51:38:3c:d2:87:68:49:14:
                    15:6e:6d:86:aa:2d:c3:c8:af:87:39:ab:b2:eb:51:
                    56:50:89:1b:99:67:61:a8:e2:0b:f0:c5:10:32:b7:
                    e2:23:b9:53:01:ce:d1:d4:fd:d2:b2:5d:22:48:87:
                    73:04:9a:86:13:92:48:b4:13:96:29:12:4d:23:4b:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C7:6B:33:AC:2E:DC:D9:7A:03:C0:61:ED:29:DD:5E:1A:6E:D3:23
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211604.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8072::/48
                  2a12:dd47:807e::/47

    Signature Algorithm: sha256WithRSAEncryption
         8b:2c:2c:20:78:8c:9b:67:08:98:0c:c5:4a:1b:71:77:70:e7:
         af:2e:f2:e0:13:c4:75:e7:fd:47:75:57:6f:da:b7:b9:f1:be:
         8b:99:e7:01:a3:1f:dc:ee:53:64:2c:f1:76:bf:bf:70:c3:6a:
         a3:73:7d:af:c5:a5:8f:02:6e:e7:ad:a6:3e:3a:34:97:21:f6:
         20:35:c6:e3:a6:35:ed:07:07:65:8a:9e:74:3a:61:b4:55:3b:
         eb:9f:44:53:9c:79:95:40:e2:39:a2:6e:9c:d5:b3:55:78:a0:
         30:7f:b3:f4:b8:e2:8d:fe:de:3f:b0:26:96:3b:5c:b7:21:b3:
         13:a1:ba:b1:12:3f:b2:97:3f:c9:ec:bf:b8:29:da:ca:9b:79:
         a6:dd:c5:2e:64:29:78:b9:2c:82:09:b9:d2:bd:16:41:59:2f:
         ec:0e:50:1e:76:b7:c2:1b:a5:a0:5d:b1:97:2a:87:94:d1:6f:
         b6:a3:b3:ba:3f:b5:da:87:39:5d:ed:c0:7f:f8:3a:05:b9:aa:
         99:1a:c9:6a:17:03:9c:55:a8:a0:f4:81:b6:a9:e2:36:d6:20:
         fb:09:32:d4:f2:d7:7e:76:4a:11:fc:7c:26:a7:68:0a:ce:57:
         9e:67:63:5a:5d:65:32:86:21:30:ea:5a:c6:a6:6a:45:ce:f2:
         04:27:88:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----